SSP - failed to Onboard NSX manager to SSP- "No Valid License Error" seen after onboarding NSX Manager

Products

VMware vDefend Firewall with Advanced Threat Prevention Advanced Threat Protection Platform

Issue/Introduction

Failed to onboard NSX to SSP and observed error message "SSP - "No Valid License Error" seen after onboarding NSX Manager - Infra Sync Down"

Error snippet from /var/log/proton/nsxapi.log observed in NSX manager

WARN CommonAgentDeltaProcessor CommonAgentDeltaConfigProducerImpl 1010408 NAPP [nsx@6876 comp="nsx-manager" level="WARNING" s2comp="CommonAgent" subcomp="manager"] Caught exception in ScheduledExecutorService.
java.lang.NullPointerException: null
        at vmware.nsx.napp.CommonAgentProtos$CertificateMsg$Builder.setCertificate(CommonAgentProtos.java:1340) ~[?:?]
        at com.vmware.nsx.management.proton.commonagent.utils.DataConverter.buildCertUpdateMessage(DataConverter.java:94) ~[?:?]
        at com.vmware.nsx.management.proton.commonagent.service.CommonAgentCertificateChangeListenerImpl.lambda$sendAllCertificates$3(CommonAgentCertificateChangeListenerImpl.java:239) ~[?:?]
        at java.util.stream.ForEachOps$ForEachOp$OfRef.accept(Unknown Source) ~[?:?]
        at java.util.stream.ReferencePipeline$2$1.accept(Unknown Source) ~[?:?]
        at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(Unknown Source) ~[?:?]
        at java.util.stream.AbstractPipeline.copyInto(Unknown Source) ~[?:?]
        at java.util.stream.AbstractPipeline.wrapAndCopyInto(Unknown Source) ~[?:?]
        at java.util.stream.ForEachOps$ForEachOp.evaluateSequential(Unknown Source) ~[?:?]
        at java.util.stream.ForEachOps$ForEachOp$OfRef.evaluateSequential(Unknown Source) ~[?:?]
        at java.util.stream.AbstractPipeline.evaluate(Unknown Source) ~[?:?]
        at java.util.stream.ReferencePipeline.forEach(Unknown Source) ~[?:?]
        at com.vmware.nsx.management.proton.commonagent.service.CommonAgentCertificateChangeListenerImpl.sendAllCertificates(CommonAgentCertificateChangeListenerImpl.java:239) ~[?:?]
        at com.vmware.nsx.management.proton.commonagent.service.CommonAgentFullConfigProducerImpl.produceCertMsgs(CommonAgentFullConfigProducerImpl.java:237) ~[?:?]
        at com.vmware.nsx.management.proton.commonagent.service.CommonAgentFullConfigProducerImpl.produce(CommonAgentFullConfigProducerImpl.java:130) ~[?:?]
        at com.vmware.nsx.management.proton.commonagent.service.CommonAgentDeltaConfigProducerImpl.processConfigUpdates(CommonAgentDeltaConfigProducerImpl.java:762) ~[?:?]
        at com.vmware.nsx.management.proton.commonagent.service.CommonAgentDeltaConfigProducerImpl.lambda$start$1(CommonAgentDeltaConfigProducerImpl.java:219) ~[?:?]
        at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source) ~[?:?]
        at java.util.concurrent.FutureTask.runAndReset(Unknown Source) ~[?:?]
        at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(Unknown Source) ~[?:?]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) ~[?:?]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) ~[?:?]
        at com.vmware.nsx.util.concurrent.Executors$MeteredRunnable.run(Executors.java:353) ~[nsx-util.jar:?]
        at com.vmware.nsx.util.concurrent.Executors$MeteredRunnable.run(Executors.java:353) ~[nsx-util.jar:?]
        at java.lang.Thread.run(Unknown Source) ~[?:?]

Environment

SSP 5.0 and NSX4.2.X

Cause

NSX onboard was not successful and is showing no valid license error popup on SSP due to TNs certificates not synced with SSP which was causing the issue

we can verify the cluster status in the NSX Manager UI

NSX manager UI -> system -> Fabric -> hosts

Resolution

Fixed NSX installation on the host resolved the issue and NSX onboarded without any errors

Additional Information

If the resolution mentioned in this KB does not address your issue, refer to the Master KB for NSX Onboarding Issues, which lists all known onboarding scenarios, causes, and troubleshooting methods.