Alerts in HCX "Thumbprint exchange with HBR server on appliance HCX-ServiceMesh-IX-11-failed"
search cancel

Alerts in HCX "Thumbprint exchange with HBR server on appliance HCX-ServiceMesh-IX-11-failed"

book

Article ID: 402723

calendar_today

Updated On:

Products

VMware HCX

Issue/Introduction

  • HCX Manager reporting following alerts in for IX appliance

    "Thumbprint exchange with HBR server on appliance HCX-ServiceMesh-IX-11-failed"

  • app.log at /common/logs/admin in HCX Manager shows below error

    2025-06-10 03:05:07.208 UTC [InterconnectService_SvcThread-15173, Ent: HybridityAdmin, , TxId: 5e90####-####-####-a85f-63ee3#######] ERROR c.v.v.h.s.i.ThumbprintExchanger- Error exchanging thumbprints for appliance from HBR Server: ffc3####-####-####-####-#####83ba#####
    2025-06-10 03:05:07.209 UTC [InterconnectService_SvcThread-15173, Ent: HybridityAdmin, , TxId: 5e90####-####-####-a85f-63ee3#######] ERROR c.v.v.h.s.i.ThumbprintExchanger- ThumbprintExchanger Job: (#####-####-####-####-#########) encountered error
    2025-06-10 03:05:11.951 UTC [InterconnectService_SvcThread-15169, Ent: HybridityAdmin, , TxId: ########-####-####-####-63ee########] WARN  c.v.v.h.s.i.PeriodicThumbprintExchanger- PeriodicThumbprintExchanger Job: (ac######-####-####-####-###########) encountered error Exchange thumbprint failed for serviceMeshIds ["servicemesh-#######-#####-#####-####-########"]

Environment

VMware HCX

Cause

The error occurs when a proxy server is configured in HCX without excluding local connections from the proxy operation. Configuring a proxy server without these local exclusions generally leads to migration failures and errors during HCX operations

Resolution

Update the 'Proxy Exclusions'  to exclude the local connections from the HCX admin page ie 9443.

Steps:

  • Log in to the management interface: https://hcx-ip-or-fqdn:9443
  • Navigate to the Administration tab, and select Proxy.
  • Enter or edit the proxy server settings:
    • Proxy Exclusions
    • Use a comma separated list to define all related proxy server exclusions, enter any IP, subnet, host, and/or domain names. Use * for wildcard values and do not include complete URLs (no https://).
  • To verify the configuration, click Test Connection and enter the test URL.
  • Click 'Save'
  • Restart the HCX Manager Services

Additional Information