Error: 'MPA config file does not exist' during NSX Edge Host Certificate Push

Products

• VMware NSX

Issue/Introduction

• NSX Edge shows all Managers in standby
  
  
  
  
• Controllers shows status in disconnect with "Controller_Rejected_host_Cert"
  
  

• When attempting to push the host certificate to an NSX Edge during a transport node certificate push, the "MPA config file does not exist" error occurs.
  
  

Environment

VMware NSX 4.x

Cause

• We can only get this error if mpaconfig.json doesn't exist or it doesn't have right permission
• Upon checking the file using below command we found it has missing permission
  
  ls -lrt /etc/vmware/nsx-mpa/mpaconfig.json
  
  

Resolution

• This issue can be resolved by correcting the file permissions on the affected Edge using the command below.
  chmod 660 /etc/vmware/nsx-mpa/mpaconfig.json

• After the permissions were changed, it successfully pushed the certificate and confirmed the Edge is in a connected state.