Can't log in to VMware Identity Manager GUI through VIP

Products

• VMware Aria Suite

Issue/Introduction

You hit an error "Error Connect to Load Balancer FQDN:443 [Load Balancer FQDN /*.*.*.*] failed: connect timed out" when you try to login to VMware Identity Manager via the load balancer IP address.  

Symptoms seen

1. Aria Automation login fails with the same or similar error
2. When you try to run the curl command curl -kv https://Load_Balancer_FQDN from one of the VMware Identity Manager nodes to the Load Balancer FQDN it displays a failed connection error
3. VMware Identity Manager health status in Aria Suite Lifecycle is Green

Environment

VMware Identity Manager 3.3.x

Cause

Incorrect firewall rules are blocking necessary traffic between the VMware Identity Manager and Load Balancer.

Resolution

• Verify Firewall Rules:
  • Ensure that the firewall rules allow the necessary traffic between VMware Identity Manager and the Load Balancer. Refer to the documentation for specific port requirements.
  • Link: https://docs.vmware.com/en/VMware-Identity-Manager/3.3/identitymanager-connector-win/GUID-A401F9EA-0BD5-42E3-BF62-41F278724C85.html#network-requirements-3
• Open Required Ports:
  • Work with network team to open the required ports on the firewall.
• Test Connectivity:
  • After making the necessary firewall changes, test connectivity to the Load Balancer using curl command curl -kv https://Load_Balancer_FQDN
  • If the issue persists, double-check the firewall rules and ensure that the correct ports are open.