Tenant Workload domain appliances missing from VCF Fleet Management Certificates section

Products

• VCF Operations

Issue/Introduction

• Tenant Workload domain appliances are not visible in the VCF Fleet Management Certificates section.

• In the VcfAdapter_###.log (typically on the Cloud Proxy)

Unable to connect to the server - 502 - GET https://<sddcManagerHostname>/v1/domains


• In the '/var/log/vrlcm/vmware_vrlcm.log' on the Fleet Management appliance, you notice the following errors


Failed to get JWT token

Failed to trust certificate
 
certificate_unknown


 

• Previous troubleshooting steps, such as manual inventory syncs or restarting adapter collections, did not resolve the issue.
  
  
• KB: Unable to manage certificates or passwords in VCF Operations 9.0 has been ruled out.

Environment

VCF Operations 9.0.0
Fleet Management 9.0.0

Cause

The "Certificates" tab is a cached view of the Fleet Management database. This issue is caused by Time Synchronization (NTP) drifts or temporary network blocks affecting the Token Exchange. When the system fails to get a JWT token or encounters certificate_unknown errors, the Inventory Sync task fails. This results in a stale or empty cache, causing a blank UI.

Resolution

Ensure VCF Operations nodes, Cloud Proxy, and SDDC Manager are synchronized to the same NTP source. The issue may self resolve after some time and then return.

1. To force an immediate token refresh and restore the link:

   1. Navigate to Administration > Integrations > Accounts.

   2. Select the VCF adapter and click Edit.

   3. Re-enter the password.

   4. Click Validate Connection.

Additional Information

See Unable to manage certificates or passwords in VCF Operations 9.0