When attempting to configure or redeploy VMware NSX on ESXi hosts, the installation fails consistently at 48%.
"Failed to install software on host. Failed to install software on host. Time out waiting for host to join NSX Manager."FN Operation: INSTALL. Host: #####-####-####-####-######## current progress percentage: 48, stateDescription: deployment.progress.fn.registering_host"Push certificate failed: 'Failure invoking NSX manager API to push certificate. 500:None'".Connection timed out) or trust issues (No APH UUID found in CheckTrusted RPC response).NSX 2100175 - [nsx@6876 comp="nsx-esx" subcomp="nsxsfhc" tid="#####" level="WARNING"] Command nsxcli -c "join management-plane <nsx-t_manager.domain> thumbprint #################################### token ********** node-uuid ######-####-####-####-############ validate-manager-cert " failed with return-code 4 (% Node registration failed: 'NSX Manager API certificate is not valid: curl_wrapper: (7) No APH UUID found in CheckTrusted RPC response' )VMware NSX
The root cause is the presence of stale NSX VIBs or, residual certificate states on the ESXi host from a previous deployment.
Even if the NSX Manager UI reports the host as "Not Configured" the underlying VIBs may still be installed or partially corrupt. These stale components cause a trust mismatch (indicated by the SSL and APH UUID errors), preventing the host from successfully joining the Management Plane during the re-preparation process.
Completely Uninstall NSX from a Managed Host in a vSphere Cluster and then re-prepare the host for NSX.