VPXD Extension Thumbprint Check mismatch for rbd when running the VCF Diagnostic Tool for vSphere (VDT)

Products

• VMware vCenter Server

Issue/Introduction

While running the VDT you see the following error:

[FAIL]    VPXD Extension Thumbprint Check
              [PASS]  com.vmware.vim.eam: thumbprint match
              [FAIL]  com.vmware.rbd: Thumbprint mismatch detected!

Environment

• VMware vCenter 7.x
• VMware vCenter 8.x

Resolution

1. Take a snapshot for the VC
2. Log in to the vCenter Server appliance via shell or SSH
3. Create a temporary directory under root 

   mkdir /certificate

4. Create a copy of the certificate and key from the vpxd-extension store 

   /usr/lib/vmware-vmafd/bin/vecs-cli entry getcert --store vpxd-extension --alias vpxd-extension --output /certificate/vpxd-extension.crt
   /usr/lib/vmware-vmafd/bin/vecs-cli entry getkey --store vpxd-extension --alias vpxd-extension --output /certificate/vpxd-extension.key

5. Update the service endpoint using the vpxd-extension certificate 

   python /usr/lib/vmware-vpx/scripts/updateExtensionCertInVC.py -e com.vmware.rbd -c /certificate/vpxd-extension.crt -k /certificate/vpxd-extension.key -s <FQDN> -u Administrator@<SSO Domain> -p <SSO Password> 

6. Restart the services(Optional)

   service-control --restart vmware-rbd-watchdog

7. Once the above steps are completed rerun the VDT to validate.