Accessing Lifecycle Manager throws “An unexpected error has occurred” “You have no privileges to view this object or it does not exist.”

Products

• VMware vCenter Server

Issue/Introduction

• Lifecycle Manager is not accessible in the vSphere client and accessing it will show the following error message:

"An unexpected error has occurred"
"You have no privileges to view this object or it does not exist".

• In /var/log/vmware/vsphere-ui/logs/catalina.log, the following error is seen.

  •  SEVERE [http-nio-127.0.0.1-5090-exec-4] com.vmware.vum.client.exceptions.GlobalExceptionHandler.logException com.vmware.vim.vmomi.client.exception.SslException: com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate chain is not trusted and thumbprint doesn't match
     SEVERE [http-nio-127.0.0.1-5090-exec-4] com.vmware.vum.client.exceptions.GlobalExceptionHandler.logException com.google.common.util.concurrent.UncheckedExecutionException: com.vmware.vim.vmomi.client.exception.SslException: com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate chain is not trusted and thumbprint doesn't match

• In /var/log/vmware/vsphere-ui/logs/vsphere-ui-runtime.log.stderr below error found.

  •  SEVERE [http-nio-127.0.0.1-5090-exec-4] com.vmware.vum.client.exceptions.GlobalExceptionHandler.logException com.vmware.vim.vmomi.client.exception.SslException: com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate chain is not trusted and thumbprint doesn't match
     SEVERE [http-nio-127.0.0.1-5090-exec-4] com.vmware.vum.client.exceptions.GlobalExceptionHandler.logException com.google.common.util.concurrent.UncheckedExecutionException: com.vmware.vim.vmomi.client.exception.SslException: com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate chain is not trusted and thumbprint doesn't match

• On checking Trusted Root cert using vCenter CLI , expired certs are seen.
  • Ref: Verify and resolve expired vCenter Server certificates using the command line interface
  • for i in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list); do echo STORE $i;   sudo /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $i --text | egrep "Alias|Not After"; done


Environment

• vCenter server 8.x

Cause

• One of the Trusted Root Cert has been expired.

Resolution

• Remove the expired Trusted Root Cert to resolve the issue by following below KB.
  • Ref: Removing CA Certificates from the TRUSTED_ROOTS store in the VMware Endpoint Certificate Store(VECS) in vCSA using script OR
  • Ref: Verify and remove CA Certificates from the TRUSTED_ROOTS store in the VMware Endpoint Certificate Store(VECS)

Additional Information

• Error "An Unexpected error has occurred" message appears accessing vSphere Lifecycle Manager and baselines from the ESXi host.
• An unexpected error has occurred while accessing the Lifecycle Manager
• Lifecycle Manager fails to open with error: "An unexpected error has occurred"