NSX Manager UI becomes inaccessible with error "Component health: Unknown".

Products

• VMware NSX

Issue/Introduction

• The NSX-T manager UI is not available with the following message: 

Some appliance components are not functioning properly.
Component health: Unknown. 
Error code: 101

• May see similar error in /var/log/syslog log in the affected NSX Manager.

2022-11-29T17:46:40.589Z | ERROR |                       client-0 | o.c.p.w.ClientHandshakeHandler | exceptionCaught: Exception DecoderException caught.
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: General OpenSslEngine problem
....
Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: TrustAnchor found but certificate validation failed.

• The output from 'get cluster status' shows all services on the impacted NSX Manager are DOWN except for DATASTORE and NONCONFIG.

• Running the CARR script from KB 369034, its output indicates the CBM_CLUSTER_MANAGER certificate does not match with the corfu server truststore. 

Environment

VMware NSX 4.x

Cause

This issue is caused when the NSX Manager CBM_CLUSTER_MANAGER certificate in the Corfu server trust store is out of sync with the certificate present in the certificate keystore. 

Resolution

• Ensure current and valid NSX Manager backups are taken and available
• Run the CARR script from KB 369034 and allow it to repair the CBM_CLUSTER_MANAGER certificate when prompted.