HCX - Error upgrading service mesh appliance - DeployAppliance failed in state CONFIGURE_PORT_PROPERTIES

Products

• VMware HCX

Issue/Introduction

Service Mesh upgradation fails with below error.

The following messages can be found in the log file /common/logs/admin/app.log

DeployAppliance failed in state CONFIGURE_PORT_PROPERTIES. Error: Could not copy port properties while redeploying appliance ##-ServiceMesh-NE-I1-##-Redeploying. PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Retry attempt: 0.
 

NSXService_SvcThread-890, Ent: HybridityAdmin, , TxId: #######-#######--#######--#######--#######-] ERROR c.v.v.h.s.n.NsxTInventorySyncJob- Failed to update NsxT Inventory
com.vmware.vchs.hybridity.adapters.https.UntrustedCertificateException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

 
[InterconnectService_SvcThread-475, IX:#######--#######--#######--#######--#######-, , TxId: #######-#######--#######--#######--#######] WARN  c.v.v.h.s.i.DeployAppliance- DeployAppliance failed in state CONFIGURE_PORT_PROPERTIES. Error: Could not copy port properties while redeploying appliance AWS-ServiceMesh-NE-I1-eBb-Redeploying. PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Retry attempt: 3.

[InterconnectService_SvcThread-484, Ent: HybridityAdmin, , TxId: #######-#######--#######--#######--#######] ERROR c.v.v.h.s.i.DeployAppliance- Retries exhausted for state CONFIGURE_PORT_PROPERTIES, exiting..
[InterconnectService_SvcThread-485, SM:servicemesh-#######-#######--#######--#######--#######, IX:#######-#######--#######--#######--#######,  TxId: #######-#######--#######--#######--#######] INFO  c.v.v.h.s.i.ApplianceLifeCycleJob- Running in state: CHECK_DEPLOY
[FailureDetectionService_EventListener, , , TxId: ] INFO  c.v.v.h.f.FailedJobEventsListener- Received a Failed Job, jobType: InterconnectServiceJobs workflow type: DeployAppliance

[InterconnectService_SvcThread-485, SM:servicemesh-#######-#######--#######--#######--#######, IX:#######-#######--#######--#######--#######, TxId: #######-#######--#######--#######--#######] ERROR c.v.v.h.s.i.ApplianceLifeCycleJob- All DeployAppliance workflows have failed. Canceling operation and initiating rollback.

Environment

HCX

Cause

The NSX Certificate is mismatched. This can occur after updating the certificate on NSX.

Resolution

Re-import the newly updated NSX Manager certificate. 

• Navigate to the HCX appliance management interface: https://hcx-ip-or-fqdn:9443
• Navigate to the Administration tab.
• Select Certificate > Trusted CA Certificate on the side menu.
• Select the certificate import option: URL
• Enter the IP or FQDN for the NSX Manager registered with HCX. 
• Click Apply.