"Unable to determine the NSX version. Please ensure the IP address and password is correct" error when running CARR script

Products

• VMware NSX

Issue/Introduction

• When running the CARR script an error similar to these examples may be observed :
  Unable to determine the NSX version. Please ensure the IP address and password is correct
  or
  Authentication failure for user 'admin' to IP X A.B.C.D. Password is incorrect... exiting...
• The NSX Manager admin username was changed to a custom name at deployment time.

Environment

VMware NSX

Cause

CARR script requires admin user to be present on NSX.

Resolution

This is a known behaviour of the CARR script.

To be able to execute the CARR script, the custom NSX Manager username must be changed back to admin.

1) Using a REST API client or curl get the full list of users

    GET https://<NSX_MGR_IP>/api/v1/node/users/

{
...
.....
    {   
      "full_name": "",
      "last_password_change": 33,
      "password_change_frequency": 90,
      "password_reset_required": false,
      "status": "ACTIVE",
      "userid": 10000,    
      "username": "custom_admin_name"
    },
    ...
  ]
}

2) Copy the block relating to the custom admin user above including the brackets.
    Note : The userid will be needed for the next API command.

3) Update the username back to admin using the PUT API 

    PUT https://<NSX-IP>/api/v1/node/users/<User-ID>

    PUT https://<NSX-IP>/api/v1/node/users/10000

        BODY:

    {   
      "full_name": "",
      "last_password_change": 33,
      "password_change_frequency": 90,
      "password_reset_required": false,
      "status": "ACTIVE",
      "userid": 10000,    
      "username": "admin"       <<<< username changed to admin
    }

NOTE: In the body above, the only change is the "username" to "admin", but all other parameters remain the same.

After running the CARR script, the username can be reverted to the original name using the same procedure.

Additional Information

• Using Certificate Analyzer, Results and Recovery (CARR) Script to fix certificate related issues in NSX