Unable to create Configuration Drift Template in Aria Operations

Products

• VMware Aria Suite

Issue/Introduction

• While trying to create Configuration Drift template, it is stuck at step 4.
• After selecting the policy in step 4, NEXT or CREATE options do not work.
• Config template preview is blank after selecting policy, as it failed to retrieve the configuration.

• Below error snippets are observed in /storage/log/vcops/log/config-drift-plugin.log:

  2025-01-DDTHH:TT:XX,XXX+0000 ERROR [ServerConnection on port 10000 Thread 444] com.vmware.vrops.config.manager.ConfigTaskManager - Failed to retrieve current state for Resource ID: xxxx-xxxx-xxxx-xxxx-xxxx. Error: [Caught rest client exception while calling api https://X.X.X.X/config-modules/api/vcenter/configuration/v1/get: 500 Internal Server Error: "{"schema_version":"1.0-DRAFT","name":"Get Configuration","timestamp":"YYYY-MM-DDTXX:TT:TT.TTTT","description":"Exception fetching configuration.","status":"FAILED","errors":[{"timestamp":"YYYY-MM-DDTXX:TT:TT.TTTT","source":{"server":"0.0.0.0","type":"ConfigModules","endpoint":"/config-modules/api/vcenter/configuration/v1/get"},"error":{"message":"HTTPSConnectionPool(host='vCenter_FQDN', port=443): Max retries exceeded with url: /rest/com/vmware/cis/session (Caused by SSLError('Fingerprints did not match. Expected \"Thumbprint_value_A\", got \"Thumprint_value_B\"'))"}}],"target":{"hostname":"vCenterFQDN","type":"vcenter"}}"]
  YYYY-MM-DDTXX:TT:TT.TTTT INFO  [ServerConnection on port 10000 Thread 444] com.vmware.vrops.config.manager.ConfigManager - Plugin ConfigManager: getting all the config templates details
  YYYY-MM-DDTXX:TT:TT.TTTT ERROR [ServerConnection on port 10000 Thread 444] com.vmware.vrops.config.manager.ConfigManager - Failed to retrieve config templates. Result is null

Environment

Aria Operations 8.18.x

Cause

vCenter object was trusted by multiple certificates which caused the issue.

Resolution

• Find the certificates which are trusted by the same vCenter object and delete the duplicate/expired ones. Refer How to clear the Expired Certificates banner in Aria Operations
• Validate the connection again for vCenter account in Integrations section. If a new certificate is presented to trust, ACCEPT the certificate and try creating the Configuration Drift template.

 

Additional Information

Inline with this article its good to refer the article Troubleshooting VCF Configuration Drifts for additional insights that might uncover other anomalies.