Key Management Server Health Status alarm on vSphere UI.

Products

• VMware vCenter Server

Issue/Introduction

Key Management Server Health Status alarm on vCenter server. 

 

Environment

VMware vSphere 7.x

VMware vSphere 8.x

Cause

The issue can occur due to the vCenter server failing to establish a trusted connection with the external Key Management Server (KMS).

 

/var/log/vmware/vpxd/vpxd.log

error vpxd[512193] [Originator@6876 sub=CryptoManagerKmipWrapper] Failed to connect to KMS external-kms.local:5696 - Err:QLC_ERR_TIMEOUT_EXPIRED Failed to establish the connection, timeout expired
warning vpxd[512193] [Originator@6876 sub=CryptoManager] DiscoverVersions failed: Err:QLC_ERR_TIMEOUT_EXPIRED Failed to establish the connection, timeout expired

Resolution

 Re-establish the trust between vCenter and the KMS cluster.

See, Re-establishing Trust between vCenter and KMS cluster after certificate replacement.