VMware vSAN Snapshot manager UI Plugin not registered in vCenter

Products

• VMware vCenter Server

Issue/Introduction

• After successfully deploying Snapshot Service Appliance, VMware vSAN Snapshot manager UI Plugin is not registered in vCenter
• In Snapshot Service Appliance log file /var/log/firstboot, you can see lines similar to :

The DNS in VC certificate is: VCSA_FQDN, DNS

The DNS in VC certificate is not same with VC input addess, maybe the VC input address is IP address

VC input address is invalid IPv4/v6 address or not the same with the DNS in VC certificate

• Inspecting vCenter MACHINE_SSL certificate "Subject Alternative Name" property, you can see 

/usr/lib/vmware-vmafd/bin/vecs-cli entry list --store MACHINE_SSL_CERT --text | grep -A1 Alternative

X509v3 Subject Alternative Name: 
DNS:VCSA_FQDN, DNS:VCSA_HOSTNAME, DNS:OTHER_FQDN

Environment

• VMware vCenter Server 8.0 U3
• VMware Snapshot Service Appliance

Resolution

• Currently there is no resolution.
• As a workaround, you can apply the following procedure
  • Backup vCenter Server : https://knowledge.broadcom.com/external/article/313886/vmware-vcenter-in-enhanced-linked-mode-p.html
  • replace vCenter Server MACHINE_SSL with "Subject Alternative Name" equal to "DNS:VCSA_FQDN" https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-authentication/GUID-E0609A99-A8D1-4336-BD3B-DE707E261A63.html
  • Redeploy VMware Snapshot Service Apppliance : https://docs.vmware.com/en/VMware-vSphere/8.0/vsan-administration/GUID-72DD25BB-42CD-4E09-84AD-B9B32769DAD2.html

 

Additional Information

certool Management Commands Reference

https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-authentication/GUID-7696606E-CBDC-4D11-B190-EC9136C06D6B.html