Synthetic Check in VCF operations fails with the error tls: failed to verify certificate: x509: certificate signed by unknown authority

Products

• VCF Operations

Issue/Introduction

• While configuring the SFTP backup settings in VCOPs, after clicking the Save button, a synthetic check task is executed.
• This task runs for a while and then fails with the below error:
  

  Error Code: LCMVMSP10035

  Synthetic checker on the application platform failed.

  Synthetic check failed. Please refer to Broadcom Knowledge Base Article
https://knowledge.broadcom.com/external/article/389510 for remediation details.,"vcfa-fqdn-prelude-default : failed to execute "GET" request: Get "https://<vcfa_node_fqdn>": tls: failed to verify certificate: x509: certificate signed by unknown authority"

• /var/log/vrlcm/vmware_vrlcm.log in Fleet Management appliance shows below entries:
  
  <date><time> ERROR vrlcm[1369] [pool-3-thread-33] [c.v.v.l.v.p.u.VMSPServerRestUtil]  -- Timeout! Synthetic checker failed after 1800 seconds.
<date><time> INFO vrlcm[1369] [pool-3-thread-33] [c.v.v.l.p.a.s.Task]  -- Injecting task failure event. Error Code : 'LCMVMSP10035', Retry : 'true', Causing Properties : '{ CAUSE :: skipSyntheticCheck ===  }'
com.vmware.vrealize.lcm.vmsp.common.exception.ValidateSyntheticCheckerException: Synthetic check failed. Please refer to Broadcom Knowledge Base Article https://knowledge.broadcom.com/external/article/389510 for remediation details.,"vcfa-fqdn-prelude-default : failed to execute "GET" request: Get "https://<vcfa_node_fqdn>": tls: failed to verify certificate: x509: certificate signed by unknown authority"

Environment

VMware Cloud Foundation 9.x

Resolution

Follow the below steps to resolve this issue:

1. SSH into VCFA node with vmware-system-user.
2. Run the command to switch to super user : sudo su -
3. Run the command to add the label to vmsp-tls: kubectl label secret vmsp-tls "patch-workaround=true" -n istio-ingress
4. Retry the operation.