"Error 609651 - Incorrect Transport Zones for DVS" is displayed in NSX when attempting to prepare a cluster as Security only

Products

• VMware NSX

Issue/Introduction

• vCenter was restored from backup.
• Preparing a cluster as NSX security only fails with error similar to the below:
  Incorrect Transport Zones [[]] for DVS 50 0e 3c a3 ## ## ## ##-## ## ## ## 1c 24 f9 f5 while configuring TNP for DFW on DVPG. (Error code: 609651)
• Which can be seen in the NSX manager log: /var/log/proton/nsxapi.log
  INFO http-nio-127.0.0.1-7440-exec-11 NsxBaseRestController 5182 SYSTEM [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] Error in API /nsxapi/api/v1/infra/sites/default/enforcement-points/default/transport-node-collections/9fd74aaa-####-####-####-5fa3d83a4bb9%3Adomain-c####?action=install_for_microseg caused by exception com.vmware.nsx.management.policy.transportnodecollection.exception.TransportNodeCollectionException: {"moduleName":"policy","errorCode":609651,"errorMessage":"Incorrect Transport Zones [[]] for DVS 50 0e 3c a3 ## ## ## ##-## ## ## ## 1c 24 f9 f5 while configuring TNP for DFW on DVPG."}

INFO http-nio-127.0.0.1-7440-exec-11 NsxBaseRestController 5182 SYSTEM [nsx@6876 audit="true" comp="nsx-manager" level="INFO" subcomp="manager"] UserName:'admin' ModuleName:'policy' Operation:'POST@/api/v1/infra/sites/default/enforcement-points/default/transport-node-collections/9fd74aaa-####-####-####-5fa3d83a4bb9%3Adomain-c####' Operation status: 'failure' Error: Incorrect Transport Zones [[]] for DVS 50 0e 3c a3 ## ## ## ##-## ## ## ## 1c 24 f9 f5 while configuring TNP for DFW on DVPG.

Environment

VMware NSX 4.1.x

Cause

This issue occurs due to the vCenter restore, which leads to a different DVS UUID's, this caused NSX to be out of sync with security only transport zones. 

Resolution

This issue is resolved in VMware NSX 4.2.3, available at Broadcom downloads.

If you are having difficulty finding and downloading software, please review the Download Broadcom products and software KB.