vSphere license usage cannot display properly when vCenter Server's CA certificate is missing on Aria Operations
book
Article ID: 396789
calendar_today
Updated On:
Products
VMware Aria Suite
Issue/Introduction
Within Subscription --> License Management --> Licenses, in the "Usage" column, vSphere license usage displayed as 0, actually the license has been assigned to ESXi;
In Aria Operations log, /logs/adapters/VMwareInfraHealthAdapter/VMwareInfraHealthAdapter_<adapter id>.log, there is "CertificateValidationException" error as below:
yyyy-mm-ddThh:mm:ss,xxxx+0000 ERROR [pool-xxxxxx-thread-4] (53) com.vmware.adapter3.vmwareinfrahealth.helpers.vcenter.collector.VCenterLicenseUsageCollector.collect - Cannot fetch licenses from VC: com.vmware.vim.sso.admin.exception.CertificateValidationException: com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate chain is not trusted and thumbprint doesn't match
Environment
Aria Operations 8.x
Cause
vCenter Server's MACHINE_SSL certificate is signed by 3rd CA, not VMCA. But 3rd CA's certificates are still missing on Aria Operations.
Resolution
Import all root and intermediate CA certificates that signed vCenter Server MACHINE_SSL certificate to Aria Operations following the document below:Importing CA Certificates
Stop/Start VIH adapter collection in Operations --> Configurations --> Inventory Management --> VMware Infrastructure Health Adapter Instance --> Infrastructure Health Adapter, click the "Stop Collecting" then "Start Collecting" button: