Lookupservice errors due to port 443 blocked - Site Recovery

Products

• VMware vSphere ESXi
• VMware Live Recovery

Issue/Introduction

• An error occurs when logging into the Site Recovery UI:
  
   Unable to connect to Lookup Service at https://VC02:443/lookupservice/sdk. Reason:https://VC02:443/lookupservice/sdk invocation failed with java net ConnectException: Timeout connecting to VC02:443
  
  
  
  
• Attempts to reconnect vSphere Replication (Site Recovery UI > Reconnect > Select vSphere Replication) fail with the following error
  
   Unable to connect to Lookup Service at https://vc02:443/lookupservice/sdk. Reason:https://vc02:443/lookupservice/sdk invocation failed with "org.apache.http.conn.ConnectTimeoutException:Connect to vc02:443 vc02 failed:connect timed out"

  
  

Environment

• VMware Live Recovery
• VMware Live Site Recovery
• VMware vCenter Server

Cause

This issue occurs due to a communication failure. Port 443 is blocked between the vSphere Replication appliance and the vCenter Server

• From vSphere Replication /opt/vmware/support/logs/dr-client/dr.log, there is an error with "connect time out"
  
  2025-12-08 12:09:09, 531 [srm-reactive-thread-25] WARN com. vmware.dr. client. shared.pairing. CheckPscCredentialsRequestHandler 4458717922692302188 ######### checkPscCredentials - DrRequestHandlerError:com. vmware. vim. vmomi. client. exception. ConnectionException: Unable to connect to Lookup Service at https://#####.#####.##.local: 443/lookupservice/sdk. Reason: https://####.####.##.local: 443/lookupservice/k invocation failed with "org. ####.http.conn.ConnectTimeoutException: Connect to #####.#####.##.local: 443 [#####.####.##.local/14.##.##.62] failed:connect timed out"
at com. vmware. vim. vmomi. client.common. impl. ResponseImpl. setError (ResponseImpl. java:265)
at com. vmware. vim. vmomi. client.http. impl. HttpExchangeBase. setResponseError (HttpExchangeBase. java: 355)
at java.base/java.lang. Thread. run (Unknown Source)
Caused by: org. apache.http.conn.ConnectTimeoutException: Connect to ####.####.##.local:443 [xxxxx.xxxxx.xx.local/14.##.##.62] failed: connect timed out


• Port is failing to connect between vSphere Replication and vCenter Server

root [ /home/admin ]# curl -v telnet://14.##.##.62:443
Trying 14.##.##.62:443 ...
connect to 14.##.##.62 port 443 failed: Connection timed out
Failed to connect to 14.##.##.62 port 443 after 129755 ms: Couldn't connect to server
Closing connection 0

Resolution

• Please engage the Networking team to open port 443 between the vSphere Replication appliance and the vCenter Server.
     Follow  Port numbers that must be open for vSphere Replication
   
• Verify the vSphere Replication Appliance has a route to reach vCenter Server.
  Follow Configure a Static Route on an Additional VM Network Adapter to make static routes persistent on the vSphere Replication Appliance.
  
  
• Once the port is opened and static routes added if needed, reconnect vSphere Replication through the Site Recovery UI.