ESXi VASA client certificate provision has failed due to VASA certificate expiry

Products

• VMware vSphere ESXi

Issue/Introduction

Storage provider (VASA) cert expiry. 

Environment

VMware vCenter Server 7.x
VMware vCenter Server 8.x
VMware vSphere ESXi 7.x
VMware vSphere ESXi 8.x

Cause

less /var/log/vmware/vmware-sps/sps.log

YYYY-MM-DDT01:31:17.905-07:00 [pool-28-thread-1] INFO  opId=sps-SHPoller-246563-375 com.vmware.vim.sms.health.ServiceHealthPoller - Ran service health check
YYYY-MM-DDT01:31:21.598-07:00 [pool-27-thread-5] ERROR opId=sps-Main-246523-476 com.vmware.vim.sms.provider.vasa.alarm.AlarmDispatcher - Error: org.apache.axis2.AxisFault: connect timed out occured as provider: https://X.X.X.X:8084/version.xml is offline

Resolution

• SSH to the vCenter 
• Restart the VPXD service 

  • #service-control --stop vpxd && service-control --start vpxd

• Its highly recommended to contact Storage vendor and get the certificate 
• Register VASA Provider With VMware vCenter: 

  1.Start the vSphere Client and connect to the VMware vCenter Server.
  2.Select View > Administration > Storage Providers . The Storage Providers view opens.
  3.Click Add. The Add Vendor Provider dialog box opens.
  4.Type a descriptive name for the VASA Provider in the Name field.
  5.Type the URL of the VASA Provider in the URL field. The URL of the VASA provider is:
  https://server_address:8443/vasa/services/vasaService
  server_address is the host name or IP address of the virtual appliance on which the VASA provider is located.
  
  6.Type the VASA provider user name, specified in step 8 of Configuring VASA Provider Settings , in the Login field.
  7.Type the VASA provider password, specified in step 9 of Configuring VASA Provider Settings , in the Password field.
  8.Click OK. The vSphere Client displays a thumbprint of the certificate for the VASA provider host.
  9.Click Yes to trust the VASA provider host.
  10.Click Refresh All.