Getting permission issue when trying to access Lifecycle manager in vCenter UI

Products

• VMware vCenter Server

Issue/Introduction

When trying to access Lifecyle manager in vCenter UI you see following

In /var/log/vmware/vlcm/vlcm.log you see similar entries (time and date are only for example) 

2025-07-01T14:06:35.781Z error vlcm [vclib/client.go:147] Failed to create new client: Post "https://########:443/sdk": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2025-07-01T16:06:35+02:00 is after 2025-04-04T00:18:20Z
2025-07-01T14:06:37.781Z info vlcm [vpapurl/url.go:118] Returning local URL: https://########:443/sdk
2025-07-01T14:06:37.784Z error vlcm [vclib/client.go:147] Failed to create new client: Post "https:/########:443/sdk": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2025-07-01T16:06:37+02:00 is after 2025-04-04T00:18:20Z

 

Using script from this article  vCert - Scripted vCenter Expired Certificate Replacement you see expired certificates.

In example

Checking Certificate Status
Checking Machine SSL certificate  EXPIRED
Checking Solution User certificates:
machine VALID
vsphere-webclient VALID

Environment

vSphere 8.x

Cause

Due to expired certificates Lifecycle Manager service wasn't working properly.

Resolution

Renew certificates following vCert - Scripted vCenter Expired Certificate Replacement