Cannot connect Cloud Proxy to Aria Operations

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Cloud Proxy is deployed and is online.  However, it is not able to connect to Aria Operations.

Environment

Aria Operations 8.x

Cause

Incomplete SSL certificate chain.  The certificate chain on the Aria Operations URL is different than the certification chain from what the Cloud Proxy is seeing from the openssl command.

openssl s_client -connect <Aria_Operations_FQDN>:443 -showcerts

Note: Replace <Aria_Operations_FQDN> with the fully qualified domain name of the Aria Operations primary node

On the Cloud proxy, the following error can be seen from the /var/log/haproxy-admin.log file:

Server PrxyRC_BE/VROPS_0 is DOWN reason: Layer6 invalid response, info: "SSL handshake failed"

Resolution

In this scenario, you would like to deploy and have the Cloud Proxy connected.  You would like to modify the existing custom certificate with the internal Aria Operations self-signed certificate.

Please follow the steps from the following KB to Reload the default certificate in Aria Operations