Unable to access vCenter UI - An error occurred while fetching identity providers.

Products

• VMware vCenter Server

Issue/Introduction

Symptoms: 

The vCenter UI is displaying the below error when attempting to log in via a browser.
An error occurred while fetching identity providers. Please try again later. If problem persists, contact your administrator.

 

Environment

VMware vCenter Server 7.x
VMware vCenter Server 8.x

Cause

The error occurred because vCenter certificates had expired.

Resolution

Run the below command on the vCenter appliance to see the status of the vCenter certificates:

for i in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list); do echo STORE $i; sudo /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $i --text | egrep "Alias|Not After"; done

Sample Output:

[*] Store : MACHINE_SSL_CERT
Alias : __MACHINE_CERT
            Not After : Jan 12 03:34:39 2025 GMT
[*] Store : TRUSTED_ROOTS
Alias : xxxx
            Not After : Jun  4 03:28:50 2031 GMT
Alias : xxxx
            Not After : Jan  7 03:44:38 2033 GMT
[*] Store : machine
Alias : machine
            Not After : Jan 12 03:41:25 2025 GMT
[*] Store : vsphere-webclient
Alias : vsphere-webclient
            Not After : Jan 12 03:41:26 2025 GMT
[*] Store : vpxd
Alias : vpxd
            Not After : Jan 12 03:41:27 2025 GMT
[*] Store : vpxd-extension
Alias : vpxd-extension
            Not After : Jan 12 03:41:29 2025 GMT
[*] Store : APPLMGMT_PASSWORD
Alias : location_password_default
[*] Store : data-encipherment
Alias : data-encipherment
            Not After : Jan  7 03:44:38 2033 GMT
[*] Store : SMS
Alias : sms_self_signed
            Not After : Jun  9 03:32:42 2031 GMT
Alias : sps-extension
[*] Store : hvc
Alias : hvc
            Not After : Jan 12 03:41:32 2025 GMT
[*] Store : wcp
Alias : wcp
            Not After : Jan  7 03:44:38 2033 GMT

To resolve the issue, replace the expired vCenter certificates.

Note: Below KB can be used to replace the certificate on the vCenter server using the Fixcerts script.
Replace certificates on vCenter server using the Fixcerts script