vDS status is DOWN on multiple ESXis

Products

• VMware NSX

Issue/Introduction

• vDS status is down under the Manage host networking option for the distributed switch.
  
  
  
  
• In the NSX setup, the Compute Manager status is down. 
• Below is the error message during VM migration 
   
  • "Currently connected network interface" 'Network adapter #' uses network 'DVSwitch[<UUID>] NSX port group [<name>]', which is not accessible.
  
  
  

Environment

VMware NSX 4.x

VMware vCenter 7.x

Cause

The connection was interrupted between the ESXi and the manager due to expired ESXi and APH-TN certificates.

Resolution

• Expired ESXI host certificates need to be renewed.
  Reference:
  https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/7-0/certificate-replacement-options.html
  https://knowledge.broadcom.com/external/article/341649/configuring-ca-signed-certificates-for-e.html
  
  
• CARR script needs to be used to fix expired certificates in the NSX environment. Refer KB Using Certificate Analyzer, Results and Recovery (CARR) Script to fix certificate-related issues in NSX.
  Reference:
  https://knowledge.broadcom.com/external/article?articleId=369034
  https://techdocs.broadcom.com/us/en/vmware-cis/nsx/vmware-nsx/4-2/administration-guide/certificates/replacing-certificates/replace-certificates-through-nsx-manager.html

Additional Information

If the suggested resolution steps do not resolve the issue, please consider submitting a support case to Broadcom. Kindly include the error screenshot or details, along with NSX manager log files and script log file (A log named carr.log is created in the folder where the start.sh script is located.)