Error: "ServerFaultCode: The session is not authenticated. at gitlab.eng.vmware.com/core-build/vcd-addon-byok/byok/client/vc" when adding a Key Provider in VMware Cloud Director Encryption Management.

Products

• VMware Cloud Director

Issue/Introduction

Adding the Key Provider, we are seeing an  error: ServerFaultCode: The session is not authenticated.

This is actively under investigation by Cloud Director Engineering.

Environment

VMware Cloud Director 10.6.0.1

Encryption Management Solution version 1.2

Cause

Trying to use Update vCenter credentials we see error:

https://<Cloud Director Domian>/cloudapi/1.0.0/entities/urn:vcloud:entity:vmware:ManagedVCConnection:#######-####-####-####-############/behaviors/urn:vcloud:behavior-interface:EstablishConnection:vmware:ResourceConnection:1.0.0/invocations failed: {"minorErrorCode":"ACCESS_TO_RESOURCE_IS_FORBIDDEN","message":"[ #######-####-####-####-############ ] This operation is denied.","stackTrace":"com.vmware.vcloud.api.presentation.entity.security.OperationDeniedException: This operation is denied.

at com.vmware.ssdc.backend.dao.impl.DefinedEntityDaoImpl.doLoadEntity(DefinedEntityDaoImpl.java:2272)

at com.vmware.ssdc.backend.dao.impl.DefinedEntityDaoImpl.doLoadEntity(DefinedEntityDaoImpl.java:2265)

at com.vmware.ssdc.backend.dao.impl.DefinedEntityDaoImpl.doLoadEntity(DefinedEntityDaoImpl.java:2261)

at com.vmware.ssdc.backend.dao.impl.DefinedEntityDaoImpl.getDefinedEntity(DefinedEntityDaoImpl.java:454)

at jdk.internal.reflect.GeneratedMethodAccessor12345.invoke(Unknown Source)\n\tat java.base/

Resolution

This is a known issue. It is being evaluated for fix in a new Encryption Management Solution Release