Error "Wait for response of task 'Test connection' with id '<ID>' is timed out for collector '<Ops Collecter ID>' " when adding or validating connection for NSX adapter in Aria Operations

Products

• VCF Operations

Issue/Introduction

• This is a working setup where the data collection stopped for one of the NSX adapter instances.
• Removed the adapter and when attempting to add the adapter following the instructions provided here, it fails with error "Wait for response of task 'Test connection' with id '<ID>' is timed out for collector '<Ops Collector ID>'." and does not proceed further:
  
  
  
  
• Browser API logs reports similar errors for 'manageResource.action' API:
  
  

Environment

Aria Operations 8.18.5

Cause

This issue occurs when there are stale SSL certificates for NSX instance in Aria Operations trusted certificate store resulting in SSL handshake failures.

Resolution

To resolve this issue, 

1. Take snapshots of all nodes. For steps refer How to take a Snapshot of VMware Aria Operations
2. Login to Aria Operations UI and delete the SSL certificates associated with the NSX adapter following the instructions provided here - Removing an Adapter Certificate .
3. SSH to Aria Operations with root credentials and list the SSL certificates from truststore using the following commands:
   
   
   1. Capture the truststore password using the following command:  
      
      grep ssltruststorePassword /storage/vcops/user/conf/ssl/storePass.properties | sed s/ssltruststorePassword=//
      
      
   2. List SSL certificates from the truststore and capture alias for NSX certificate:
      
      $VCOPS_BASE/jre/bin/keytool -list -keystore "$VCOPS_DATA_VCOPS/user/conf/ssl/tcserver.truststore" -storepass <truststore_password from step.2a> -v
        
   3. Identify and delete all SSL certificates(root, intermediate, solution, etc.) associated with NSX instance:
      
      $VCOPS_BASE/jre/bin/keytool -delete -alias <certificate alias captured in step.2b>-keystore "$VCOPS_DATA_VCOPS/user/conf/ssl/tcserver.truststore" -storepass '<truststore_password from step.2a>'