Unable to deploy VCF Automation from VCF Operations - Receiving error code LCMVCFA00013

Products

• VCF Automation
• VCF Operations

Issue/Introduction

• Attempting to deploy VCF Automation 9 via Fleet Management fails at Stage 17
• VCF Automation fails with error code "LCMVCFA00013 - Error occurred while getting refresh token using service account token"
• The /var/log/vrlcm/vmware_vrlcm.log on the Fleet Management appliance shows the following

2025-09-09T15:40:59.769Z INFO vrlcm[1187] [pool-3-thread-77] [c.v.v.l.v.p.t.GetSddcManagerEndpointsFromVcfaTask] – Get SDDC Manager endpoints from VCF Automation task.
2025-09-09T15:40:59.774Z INFO vrlcm[1187] [pool-3-thread-77] [c.v.v.l.v.d.r.u.VcfaEndpointRestUtil] – Request to get refresh token using service account token.
2025-09-09T15:40:59.781Z INFO vrlcm[1187] [pool-3-thread-77] [c.v.v.l.v.d.r.VcfaRestClient] – Triggering request :: https://xxx.xxx.xxx/tm/oauth/provider/token
2025-09-09T15:40:59.795Z INFO vrlcm[1187] [pool-3-thread-77] [c.v.v.l.u.CustomTrustManager] – Certificate chain trusted
2025-09-09T15:40:59.797Z INFO vrlcm[1187] [pool-3-thread-77] [c.v.v.l.v.d.r.VcfaRestClient] – API Response got :: HttpResponseProxy

{HTTP/1.1 404 Not Found [vary: Accept-Encoding, date: Tue, 09 Sep 2025 15:40:59 GMT, connection: close, content-length: 0] [Content-Length: 0,Chunked: false]}
2025-09-09T15:40:59.799Z INFO vrlcm[1187] [pool-3-thread-77] [c.v.v.l.v.d.r.VcfaRestClient] – API Response Status : 404 Response Message :
2025-09-09T15:40:59.799Z ERROR vrlcm[1187] [pool-3-thread-77] [c.v.v.l.v.d.r.u.VcfaEndpointRestUtil] – Error occurred while getting refresh token using service account token.
2025-09-09T15:40:59.799Z ERROR vrlcm[1187] [pool-3-thread-77] [c.v.v.l.v.p.t.GetSddcManagerEndpointsFromVcfaTask] – Error occurred while getting SDDC Manager endpoints from VCF Automation account
2025-09-09T15:40:59.800Z INFO vrlcm[1187] [pool-3-thread-77] [c.v.v.l.p.a.s.Task] – Injecting task failure event. Error Code : 'LCMVCFA00013', Retry : 'true', Causing Properties : '

{ CAUSE :: }
'
2025-09-09T15:41:01.156Z INFO vrlcm[1187] [pool-3-thread-76] [c.v.v.l.v.p.u.VMSPServerRestUtil] – httpGetCallWithoutRetry url : /status?selector%3Dgroup+notin%28snapshots%2Cbackup%2Cnoncritical%29
2025-09-09T15:41:01.156Z ERROR vrlcm[1187] [pool-3-thread-76] [c.v.v.l.v.p.u.VMSPServerRestUtil] – Error while triggering API, kubeConfig YXYXYXYX passed YXYXYXYX auth token

• You have deleted and re-deployed the VCF Automation instance and it fails with the same error code again

 

Environment

VCF Operations 9.0

VCF Automation 9.0

Cause

The service account for integrations with VCF Operations is created on the Fleet management side. The tokens are created in the Tenant Manager database. During redeployment Fleet management recreates the integration accounts, but does not delete the old ones. Once the machine is deployed the new integration accounts do not work because their token is invalid and VCF Automation fails to deploy successfully. 

Resolution

This issue is currently being investigated by Broadcom engineering. Please contact Broadcom support for further assistance.