Commissioning of host in SDDC is failing with following error 'Failed to install temporary VMCA commissioning certificate for host'
search cancel

Commissioning of host in SDDC is failing with following error 'Failed to install temporary VMCA commissioning certificate for host'

book

Article ID: 405004

calendar_today

Updated On:

Products

VMware SDDC Manager

Issue/Introduction

We get following errors while commissioning the host to SDDC

 

 

*Port connectivity for port  443 from sddc manager is correct.

*Date command on sddc manager will show a difference in the current time and the time set on SDDC manager.

Environment

SDDC 5.2.1

Cause

There is a time drift observed on the sddc manager-

        ERROR [vcf_om,d5b7cc26e1e2423c,cbb4] [c.v.v.s.a.AuthorizationFilter,http-nio-127.0.0.1-7300-exec-9] Error decoding JWT token
        com.vmware.vcf.security.token.service.error.TokenInvalidException: JWT expired at YYYY-MM-DDTHH:MM:SS<time_Zone>. Current time: YYYY-MM-DDTHH:MM:SS<time_Zone>, a difference of 43602 milliseconds.  
        Allowed clock skew: 0 milliseconds.
        at com.vmware.vcf.security.token.service.TokenServiceImpl.getClaims(TokenServiceImpl.java:278)
        at com.vmware.vcf.security.token.service.TokenServiceImpl.decodeToken(TokenServiceImpl.java:188)
        at com.vmware.vcf.security.authorization.AuthorizationFilter.doFilterInternal(AuthorizationFilter.java:78)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:116)

Resolution

Added the correct NTP server and then restarting of sddc manager services has fixed the issue and the host got commissioned.