Error "User credentials used to connect from VMware Cloud Director to vCenter Server do not have enough privileges" when trying to upload vApp template to the catalog.

Products

• VMware Cloud Director

Issue/Introduction

• When trying to upload a vApp template to the catalog an error is observed:
  
  [ d3812d11-4527-4648-bd9f-6ed7e6432611 ] User credentials used to connect from VMware Cloud Director to vCenter Server do not have enough privileges on object of type "Folder" with value "group-####" in vCenter Server. Make sure the required privilege(s) "" are set  for this user in vCenter Server. No Permission to perform the specified action. The session is not authenticated.


• Service account in use has administrator permissions for vCenter Server.
  
  
• Checking /opt/vmware/vcloud-director/logs/vcloud-container-debug.log on the VCD, these messages are seen
  
  vCenter Server Reported: The session is not authenticated.
at com.vmware.ssdc.library.vim.LmVim.Convert(LmVim.java:273)
at com.vmware.ssdc.library.vim.LmVim.Convert(LmVim.java:502)
at com.vmware.vcloud.val.internal.impl.VC20VirtualEngine.CreateFolder(VC20VirtualEngine.java:2586)
at com.vmware.vcloud.val.internal.impl.FolderManagerImpl.safeCreateFolder(FolderManagerImpl.java:112)
at com.vmware.ssdc.backend.services.impl.VAppManagerImpl.createVAppFolderInternal(VAppManagerImpl.java:1782)
at com.vmware.ssdc.backend.services.impl.VAppManagerImpl.createVAppFolderForUpload(VAppManagerImpl.java:1798)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

  
  
• Trying to login to the vCenter using the same account that is used to connect VMware Cloud Director to vCenter Server fails with invalid credentials.

Environment

VMware Cloud Director 10.6.x

Cause

Account used to connect VMware Cloud Director to vCenter Server has an expired password or the password was changed.

Resolution

Follow below steps to update the password for the service account  in VMware Cloud Director.

1. Log in to the VMware Cloud Director Service Provider Admin Portal.
2. Navigate to Infrastructure Resources > vCenter Server Instance
3. Select the target vCenter instance that uses the service account.
4. Edit the connection details and enter the new password for the service account.
5. Click Save to ensure the new credentials work.
   
   

Upload of the vApp template will now work.