Getting an error for compute manager "Certificate of Compute Manager ####### is invalid(Error code : 90202)"
search cancel

Getting an error for compute manager "Certificate of Compute Manager ####### is invalid(Error code : 90202)"

book

Article ID: 415125

calendar_today

Updated On:

Products

VMware NSX

Issue/Introduction

  • You have replaced the vCenter server certificate recently
  • Latest thumbprint on the vCenter can be seen by running the below command on the vCenter Server

echo | openssl s_client -connect localhost:443 2>/dev/null | openssl x509 -noout -fingerprint -sha256

  • We see an error as Certificate of Compute Manager ####### is invalid(Error code : 90202) when try to update the compute Manager thumbprint in the NSX Web GUI
 
/var/log/cm-inventory/cm-inventory.log
 
2025-10-17T03:38:08.360Z ERROR http-nio-127.0.0.1-7443-exec-1 CmInventoryService 84951 FABRIC [nsx@6876 comp="nsx-manager" errorCode="MP90202" level="ERROR" reqId="########-af3a-####-807b-3033########" subcomp="cm-inventory" username="admin"] CM ####-vcsa-##### certificate is invalid
2025-10-17T03:38:08.362Z ERROR http-nio-127.0.0.1-7443-exec-1 JsonRpcErrorResolver 84951 - [nsx@6876 comp="nsx-manager" errorCode="MP100" level="ERROR" subcomp="cm-inventory"] Error discovered by JSON RPCcom.vmware.nsx.management.cminv.common.exceptions.InventoryException: Certificate of Compute Manager ####-vcsa-##### is invalid.
        at com.vmware.nsx.management.cminv.computemanager.service.CmInventoryService.handleCmCertificateErrors(CmInventoryService.java:1031) ~[libcm-inv-container.jar:?]
        at com.vmware.nsx.management.cminv.computemanager.service.CmInventoryService.validateComputeManagerConnectionConfig(CmInventoryService.java:976) ~[libcm-inv-container.jar:?]
        at com.vmware.nsx.management.cminv.computemanager.service.CmInventoryService.validateComputeManagerConnectionConfig(CmInventoryService.java:945) ~[libcm-inv-container.jar:?]
        at com.vmware.nsx.management.cminv.computemanager.service.ComputeManagerServiceImpl.updateComputeManager(ComputeManagerServiceImpl.java:884) ~[libcm-inv-container.jar:?]
        at com.vmware.nsx.management.cminv.facade.InventoryCmObjFacadeImpl.updateComputeManager_aroundBody28(InventoryCmObjFacadeImpl.java:855) ~[libcm-inv-container.jar:?]
        at com.vmware.nsx.management.cminv.facade.InventoryCmObjFacadeImpl$AjcClosure29.run(InventoryCmObjFacadeImpl.java:1) ~[libcm-inv-container.jar:?]
        at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149) ~[aspectjrt-1.9.1.jar:?]
        at com.vmware.nsx.management.container.application.FacadeInterceptorHelperImpl.proceed(FacadeInterceptorHelperImpl.java:168) ~[libnsx-framework.jar:?]
        at com.vmware.nsx.management.container.application.FacadeInterceptorHelperImpl.proceed(FacadeInterceptorHelperImpl.java:422) ~[libnsx-framework.jar:?]
        at com.vmware.nsx.management.common.api.FacadeInterceptorAspect.annotatedMethod(FacadeInterceptorAspect.java:80) ~[libmp_common.jar:?] 
/var/log/syslog
 
2025-10-17T05:05:50.593Z nsx-mgr-01.com NSX 84951 SYSTEM [nsx@6876 comp="nsx-manager" level="WARNING" reqId="########-a043-45da-####-0e3800######" subcomp="cm-invento
ry" username="admin"] SSL Exception in getting vc thumbprint
2025-10-17T05:05:50.595Z nsx-mgr-01.com NSX 84951 SYSTEM [nsx@6876 comp="nsx-manager" errorCode="MP7049" level="ERROR" reqId="########-a043-45da-####-0e3800######" subcomp="cm-inventory" username="admin"] Cannot register compute manager, server thumbprint is blank or empty. Found thumbprint ##:##:##:##:##:##:##:##:DA:BB:FB:6A:B1:02:##:##:##:##:##:C3:20:51:EA:B3:##:##:##:##:##:##:##:## for server. If correct, please re-submit with this thumbprint
2025-10-17T05:05:50.598Z nsx-mgr-01.com NSX 84951 FABRIC [nsx@6876 audit="true" comp="nsx-manager" level="INFO" reqId="########-a043-45da-####-0e3800######" subcomp="cm-inventory" update="true" username="admin"] UserName="admin", Src="10.##.##.##", ModuleName="InventoryCmObj", Operation="UpdateComputeManager", Operation status="failure", New value=["########-bf94-####-b8b9-2a49########" {"server":"####-vcsa-#####.com","origin_type":"vCenter","credential":{"credential_type":"UsernamePasswordLoginCredential"},"origin_properties":[{"key":"fullName","value":"VMware vCenter Server 8.0.3 build-24322831"},{"key":"localeVersion","value":"INTL"},{"key":"version","value":"8.0.3"},{"key":"originComputeManagerDescription"},{"key":"apiVersion","value":"8.0.3.0"},{"key":"build","value":"########"},{"key":"vendor","value":"VMware, Inc."},{"key":"licenseProductName","value":"VMware VirtualCenter Server"},{"key":"name","value":"VMware vCenter Server"},{"key":"osType","value":"linux-x64"},{"key":"instanceUuid","value":"########-e535-####-a396-6d45########"},{"key":"originComputeManagerName","value":"VMware vCenter Server"},{"key":"localeBuild","value":"000"},{"key":"licenseProductVersion","value":"8.0"},{"key":"apiType","value":"VirtualCenter"},{"key":"productLineId","value":"vpx"}],"create_service_account":false,"set_as_oidc_provider":false,"access_level_for_oidc":"FULL","reverse_proxy_https_port":443,"multi_nsx":false,"resource_type":"ComputeManager","id":"########-bf94-####-b8b9-2a49########","display_name":"####-vcsa-#####","_create_user":"admin","_create_time":1635070507976,"_last_modified_user":"admin","_last_modified_time":1697639415770,"_system_owned":false,"_protection":"UNKNOWN","_revision":3}]
2025-10-17T05:05:50.598Z nsx-mgr-01.com NSX 84951 - [nsx@6876 comp="nsx-manager" errorCode="MP100" level="ERROR" subcomp="cm-inventory"] Error discovered by JSON RPC

Environment

VMware NSX-T Data Center
VMware NSX

VMware vCenter Server

Cause

This problem occurs because the thumbprint of the certificate that NSX Manager holds is different from the updated thumbprint following the replacement of the vCenter Server certificate 

Resolution

If not already performed, please reboot the impacted vCenter and attempt to reconnect.

Please open a support request if this issue persists after the reboot.

Creating and managing Broadcom support cases

Additional Information