Workload Domain Creation task fails at 'Update VMCA Certificate In VxRail Manager'

Products

• VMware SDDC Manager

Issue/Introduction

Workload Domain Creation task fails at 'Update VMCA Certificate In VxRail Manager'.

/var/log/vmware/vcf/domainmanager/domainmanager.log reports 

YYYY-MM-DDTHH:MM:SS.785+0000 DEBUG [vcf_dm,,###############################,,6540] [c.v.v.secure.http.HttpClientService,dm-exec-10]  Received response with status: 400 reason: POST ... for BAD REQUEST request with host: VxRail.example.com, port: 443, isSecure: true, path: /rest/vxm/v3/certificates/import-vxm, queryParamMap: null, headers: {Accept=application/json, Content-Type=application/json}

YYYY-MM-DDTHH:MM:SS.785+0000 INFO  [vcf_dm,,###############################,,6540] [c.v.v.secure.http.HttpClientService,dm-exec-10]  Response Body: { "message": }"Certificate is not yet validated.", "errorCode": 100018

YYYY-MM-DDTHH:MM:SS.785+0000 INFO  [vcf_dm,,###############################,,6540] [c.v.e.s.c.v.VxRailManagerService,dm-exec-10]  VxRail Manager response status is 400 and response message is { "message": "Certificate is not yet validated.", "errorCode": 100018 } for api /rest/vxm/v3/certificates/import-vxm

YYYY-MM-DDTHH:MM:SS.785+0000 ERROR [vcf_dm,,###############################,,6540] [c.v.e.s.c.v.VxRailManagerService,dm-exec-10]  Import Certificates request failed with status 400

YYYY-MM-DDTHH:MM:SS.785+0000 ERROR [vcf_dm,,###############################,,6540] [c.v.e.s.c.v.c.s.i.VxRailManagerApplianceServiceImpl,dm-exec-10]  Configure VMCA Certificate failed for VxRailManager - 'IP ADDRESS', {} com.vmware.evo.sddc.common.vxrail.error.VxRailManagerException: Import Certificates request failed with status 400

 

Environment

VMware Cloud Foundation 5.X

Cause

This issue occurs due to time deviation between the VCF components.  

Resolution

Resolve any time synchronization issues between the VCF components.