NSX - Unable to log in to embedded NSX UI plugin on vSphere client

Products

• VMware NSX

Issue/Introduction

• NSX is deployed using the embedded deployment in the vCenter vSphere client.
• Accessing the NSX embedded plugin in the vSphere Client fails with "You do not have sufficient privileges to access the content of this page".
• You may encounter similar log snippets like the following:

/var/log/proton/nsxapi.log:

2024-11-11T22:35:37.444Z ERROR http-nio-127.0.0.1-7440-exec-23 AuthenticationEntryPoint 14157 - [nsx@6876 comp="nsx-manager" errorCode="MP403" level="ERROR" subcomp="http"] Not authenticated Full authentication is required to access this resource org.springframework.security.authentication.InsufficientAuthenticationException: Full authentication is required to access this resource

/var/log/syslog.log:

2024-11-11T22:35:37.444Z NSX-Manager NSX 12882 - [nsx@6876 comp="nsx-manager" errorCode="MP403" level="ERROR" subcomp="http"] Failed to Authenticate: Token has been issued in the future: ########
2024-11-11T22:35:37.444Z NSX-Manager NSX 14157 - [nsx@6876 comp="nsx-manager" errorCode="MP403" level="ERROR" subcomp="http"] Not authenticated Full authentication is required to access this resource

 

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware NSX 4.x
VMware NSX-T Data Center 3.x

Cause

This is a configuration issue, so It is required to ensure that the time is synchronized between NSX Manager and vCenter. Time gaps longer than 60 seconds generate authentication issues between the NSX Manager and vCenter.

Resolution

This is a condition that may occur in a VMware NSX environment. So to avoid this, configure the same NTP server for NSX Manager and vCenter. Or, ensure that there is no time difference between them.

Configuring NTP on Appliances and Transport Nodes