Error: HTTP failure response for computeProfiles when editing Service Mesh

Products

• VMware HCX

Issue/Introduction

• Editing or viewing the Service Mesh results in the following error in the HCX user interface:

  Http failure response for https://<HCX-Manager-IP>/hybridity/api/interconnect/computeProfiles?endpointid=####: 500 OK

  
• The vCenter service account used for HCX registration is consistently locked out in the respective identity manager (e.g., vCenter SSO).
• The following log entries appear in the /common/logs/admin/web.log file on the HCX Manager:

  WARN  c.v.vca.hybridity.util.NSPRestClient- Invalid credentials logging into remote endpoint
  ERROR c.v.h.i.u.InterconnectNetworkProfileUtil- Exception in loadRemoteNetworkProfiles java.lang.RuntimeException: Invalid credentials

Environment

• VMware HCX 4.x
• VMware vCenter Server 7.x or 8.x

Cause

The password for the service account (e.g., [e-mail]) integrated with HCX was recently changed, but the new credentials were not updated in the HCX configuration. Because HCX makes frequent API calls to synchronize inventory and health status, it continues to attempt authentication with stale credentials, triggering automated account lockout policies.

Resolution

Follow these steps to restore connectivity and update the credentials:

NOTE: If you have multiple HCX Connectors attempting to connect to the same Cloud Manager, the service account may be repeatedly locked out by other connectors before you can update the credentials. In such cases, you may need to create a new user account in the vCenter SSO Administrators group specifically for HCX authentication and re-authenticate HCX using this new account as described below.

1. Unlock the Service Account:

   • Log in to the vCenter Server  and ensure the service account used by HCX is unlocked and functional.

2. Update HCX Appliance Credentials:

   • Navigate to the HCX Appliance Management interface at https://<HCX-Manager-IP>:9443.
   • Go to Configuration > vCenter Server.
   • Click Edit, enter the updated password, and click Save.

3. Update HCX Site Pairing:

   • Log in to the standard HCX Manager UI (https://<HCX-Manager-IP>).
   • Navigate to Interconnect > Site Pairing.
   • Edit the existing site pairing and update the credentials for the remote site to match the current password.

4. Restart Services (Please note that restarting services may cause the active migrations to fail):

   • If the Service Mesh UI continues to display the 500 error or fails to load profiles, go back to the HCX VAMI (:9443).
   • Navigate to Appliance Summary and restart the App-Engine and Web-Engine services to clear the credential cache.

5. Verify Service Mesh Status:

   • Return to the HCX UI and perform a Resync of the affected Service Mesh.
   • Confirm that network profiles and compute profiles are correctly populated.

Additional Information

To speak with a customer representative or a Support Engineer, see Creating and managing Broadcom support cases. Scroll to the bottom of the page and click on your respective region.

Uploading files to cases on the Broadcom Support Portal