vSphere import is failing

Products

• VMware SDDC Manager

Issue/Introduction

• When attempting to use the VCF Import Tool to bring an existing vSphere environment under VCF management, the process fails.
• We get below errors in logs: /var/log/vmware/vcf/sddc-manager/vcf_brownfield.log

  [YYYY-MM-DD HH:MM:SS] [DEBUG] sddc_manager_helper:842: b'{"errorCode":"BASELINER_DATASOURCE_VALIDATION_FAILED","arguments":["INTERNAL_MIXED_SDDC_MANAGER",""],"context":{"orchestrator.error.retriable":"false"},"message":"Validation of data source of type INTERNAL_MIXED_SDDC_MANAGER and address failed.","referenceToken":"######"}'
  
  [DEBUG] sddc_manager_helper:322: Certificates payload contains 0 entries
  [ERROR] request_helper:28: Result status code from ESC[SDDC Manager controller info retrieval: 404EESC[00m
  [DEBUG] sddc_manager_helper:830: Set datasource payload: {'type': 'SDDC_MANAGER', 'authType': 'INTERNAL_MIXED', 'endpoint': {'address': ''}}
  [YYYY-MM-DD HH:MM:SS] [ERROR] request_helper:28: Result status code from ESC[91mset datasource: 400ESC[00m
  [DEBUG] sddc_manager_helper:842: b'{"errorCode":"BASELINER_DATASOURCE_VALIDATION_FAILED","arguments":["INTERNAL_MIXED_SDDC_MANAGER",""],"context":{"orchestrator.error.retriable":"false"},"message":"Validation of data source of type INTERNAL_MIXED_SDDC_MANAGER and address failed.","referenceToken":"######"}'
  [YYYY-MM-DD HH:MM:SS] [DEBUG] sddc_manager_helper:844: Response from set datasource: b'{"errorCode":"BASELINER_DATASOURCE_VALIDATION_FAILED","arguments":["INTERNAL_MIXED_SDDC_MANAGER",""],"context":{"orchestrator.error.retriable":"false"},"message":"Validation of data source of type INTERNAL_MIXED_SDDC_MANAGER and address failed.","referenceToken":"######"}'[DEBUG] sddc_manager_helper:864: Response from trigger import guardrails: b'{"id":"###############################de","link":null,"taskId":"12f#####-f##e-4###-a###-6########","resourceId":"2####d-3####-####-a###-6a########","resourceType":"BASELINER_DISCOVERY","state":"IN_PROGRESS","description":"Discover SDDC","errors":null,"timestamp":17464######6,"completionTimestamp":null}'

Environment

VMware SDDC Manager 5.2.x

Cause

This issue can cause due to expired trusted root certificates in the vCenter that the customer is trying to convert. This blocks the trust establishment step in the convert workflow and prevents the guardrails from operating normally - leading to the vSAN python guardrails returning INTERNAL_SERVER error. 

Resolution

1. Need to clean up the expired certificates to execute guardrails phase correctly.
2. Please refer KB to remove the expired certificates in trusted root store of VC : Verify and remove CA Certificates from the TRUSTED_ROOTS store in the VMware Endpoint Certificate Store(VECS)
3. Retry the operation again.