vSphere license usage cannot display properly when vCenter Server's CA certificate is missing on Aria Operations
search cancel

vSphere license usage cannot display properly when vCenter Server's CA certificate is missing on Aria Operations

book

Article ID: 396789

calendar_today

Updated On:

Products

VMware Aria Suite

Issue/Introduction

  • Within Subscription --> License Management --> Licenses, in the "Usage" column, vSphere license usage displayed as 0, actually the license has been assigned to ESXi;
  • In Aria Operations log, /logs/adapters/VMwareInfraHealthAdapter/VMwareInfraHealthAdapter_<adapter id>.log, there is "CertificateValidationException" error as below:

    yyyy-mm-ddThh:mm:ss,xxxx+0000 ERROR [pool-xxxxxx-thread-4] (53) com.vmware.adapter3.vmwareinfrahealth.helpers.vcenter.collector.VCenterLicenseUsageCollector.collect - Cannot fetch licenses from VC:
    com.vmware.vim.sso.admin.exception.CertificateValidationException: com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate chain is not trusted and thumbprint doesn't match

Environment

Aria Operations 8.x

Cause

vCenter Server's MACHINE_SSL certificate is signed by 3rd CA, not VMCA. But 3rd CA's certificates are still missing on Aria Operations.

Resolution

  1. Import all root and intermediate CA certificates that signed vCenter Server MACHINE_SSL certificate to Aria Operations following the document below:Importing CA Certificates

  2. Stop/Start VIH adapter collection in Operations --> Configurations --> Inventory Management -->  VMware Infrastructure Health Adapter Instance --> Infrastructure Health Adapter, click the "Stop Collecting" then "Start Collecting" button: