Configure Microsoft CA certificate under VCF Instances in VMware Cloud Foundation Operations (VCF) Fleet Manager fails with error "Certificate authorities update failed."
search cancel

Configure Microsoft CA certificate under VCF Instances in VMware Cloud Foundation Operations (VCF) Fleet Manager fails with error "Certificate authorities update failed."

book

Article ID: 416470

calendar_today

Updated On:

Products

VCF Operations

Issue/Introduction

  • Configuring the CA under VCF Management in VCF Operations Fleet Manager and selecting Microsoft CA  is successful 
  • Configuring the CA under VCF Instances in VCF Operations Fleet Manager and selecting Microsoft CA fails with the error "Certificate authorities update failed."
  • Configuring Microsoft CA certificate and generating the certificate using the configured Microsoft CA from SDDC Manager UI is successful;
  • Reproducing the issue while capturing a HAR file shows the following error in the Response you can use the following KB as a guide to obtain HAR capture How to collect a HAR log file for troubleshooting Cloud Director issues :
    {
        "type": "Error",
        "message": "Invalid input format.",
        "moreInformation": [
            {
                "name": "errorMessage",
                "value": "400 : \"{\"errorCode\":\"REST_INVALID_API_INPUT\",\"arguments\":[],\"message\":\"Invalid input\",\"remediationMessage\":\"Enter correct API input\",\"nestedErrors\":[
    
    {\"errorCode\":\"ANNOTATIONS_MISMATCH\",\"arguments\":[\"JSON parse error: Unrecognized character escape 's' (code 115)\"],\"message\":\"Following conditions do not match - JSON parse error: Unrecognized character escape 's' (code 115)\"}
    ],\"referenceToken\":\"######\"}\""
            }
        ],
        "httpStatusCode": 400,
        "apiErrorCode": 400
    }

Environment

VMware Cloud Foundation Operations 9.0 

VMware Cloud Foundation Operations 9.0.1

Cause

The issue occurs as a result of entering the User Name in the format of DOMAIN\username when configuring the Certificate Authority under VCF Instances in VCF Operations Fleet Manager UI. 

Resolution

  1. Sign into VMware Cloud Foundation Operations
  2. Navigate to Fleet Management → Certificates → VCF Instances  → CONFIGURE CA
  3. Select Microsoft CA for Certificate Authority Type → Enter in CA Server URL  → Enter in User Name in UPN format  → Enter in the Password associated with the user  → Enter in the template name 

Additional Information

Unable to configure Certificate Authority in VCF Operations. The operation fails with the error: "Certificate authorities update failed".

Configure Certificate Authority for VCF Management fails with error, "Certificate authorities update failed"

Issue configuring Certificate Authority for VMware Cloud Foundation Operations 9.0 fails with error "Certificate Authorities update failed"