HCX upgrade fails due to NSX connectivity down

Products

• VMware HCX

Issue/Introduction

• HA Group upgrade task fails with below error.

• /common/logs/admin/app.log around this time stamp would indicate certificate exception for NSX.

[NSXService_SvcThread-#####, Ent: HybridityAdmin, , TxId: ############] ERROR c.v.v.h.s.n.NsxTInventorySyncJob- Failed to update NsxT Inventory com.vmware.vchs.hybridity.adapters.https.UntrustedCertificateException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

• HCX appliance dashboard (HCX Manager IP/FQDN:9443) shows NSX connectivity down.

Environment

VMware HCX

Cause

NSX certificate renewal causing SSL connection failure with HCX

Resolution

• Navigate to the HCX appliance management interface: https://hcx-ip-or-fqdn:9443
• Navigate to the Administration tab.
• Select Certificate > Trusted CA Certificate on the side menu.
• Select the certificate import option: URL
• Enter the IP or FQDN for the NSX Manager registered with HCX. 
• Click Apply.
• Then go to configuration> Administration > NSX Manager and re authenticate NSX manager using admin credentials.

 

 

Additional Information

Failure to update NSX with the HCX configuration