Error "javax.net.ssl.SSLHandshakeException: PKIX path building failed..." in the Configurations > Log Collection for a vCenter

Products

• VCF Operations

Issue/Introduction

In VCF Operations, when checking the status in Infrastructure Operations > Configurations > Log Collection, the vCenter instance displays a Failed status. Clicking the information button reveals the following error message:

javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

If the vCenter adapter is moved to a different collector in the collector group, clicking the info button next to the Failed Log Collection status also shows the following errors before changing to the SSLHandshakeException.

Failed to configure VC to send logs

Failed to configure component

Environment

VCF Operations 9.0.0
VCF Operations 9.0.1

Resolution

Option 1

Upgrade your VCF Operations to version 9.0.2, as this issue has been fixed in this release

Option 2

Collecting directly into Logs Cluster

1. Open VCF Operations for Logs UI and navigate to Management > Cluster page
2. Restart all the nodes manually sequentially (no specific order), ensuring one node is up before restarting the next one

Collecting using collector/group

1. Identify all Cloud Proxy Virtual Machines (VMs) associated with the failing collector configuration.

2. Power down the identified Cloud Proxy VMs.

3. Wait a few moments (e.g., 1 minute).

4. Power on the Cloud Proxy VMs.

5. After the VMs are back online and services have restarted, navigate to Infrastructure Operations > Configurations > Log Collection in VCF Operations and confirm the status is now Active.

Additional Information

This process effectively clears any internal caches and re-initializes processes on the Cloud Proxies that may have been corrupted or stuck, allowing the SSL certificate handshake to complete successfully.