Unable to configure Certificate Authority in VCF Operations. The operation fails with the error: "Certificate authorities update failed".

Products

• VCF Operations

Issue/Introduction

When trying to configure a Certificate Authority for Fleet Management in VCF Operations, the configuration operation fails with the error: "Certificate authorities update failed".

Environment

VCF Operations

Cause

The root cause of this issue is that the Certificate Authority (CA) server URL is not reachable from the Fleet Manager appliance. A review of the /var/log/vrlcm/vmware_vrlcm.log file on the Fleet Manager appliance indicates a connectivity issue with the Certificate Authority (CA) server. Specifically, the Fleet Manager receives a "connection refused" response when attempting to connect to the CA server at https://<CA_Server>/certsrv.

Resolution

To resolve this issue, please coordinate with your internal team to verify whether the problem is originating from the Certificate Authority (CA) server or if a network appliance is blocking connectivity. Once connectivity to the CA server is restored, the configuration process should complete successfully.