Aria Automation cloud account fails to connect to vCenter with "Remote host terminated the handshake" error

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• When you attempt to add or validate a vCenter cloud account in VMware Aria Automation, the connection fails even if the vCenter certificates are valid and trusted.
• The UI displays the error: Failed to connect to vCenter: Your certificate may be untrusted. To trust the certificate validate your account credentials and accept the untrusted certificate... Error: Remote host terminated the handshake.
• Aria Automation logs contain the following exception:

javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
Caused by: java.io.EOFException: SSL peer shut down incorrectly

Environment

VMware Aria Automation 8.18.x

VMware vCenter 8.x

Cause

This issue occurs because Aria Automation is configured to use a corporate web proxy, and the FQDN or domain of the vCenter server has not been added to the proxy exclusion list. Consequently, the appliance attempts to connect to the internal vCenter through the proxy, which terminates the connection.

Resolution

To resolve this issue, you must add the vCenter domain to the proxy exclusion list on the Aria Automation appliances.

1. Open an SSH session to one of the Aria Automation appliances.

2. Run the following command to view your current proxy settings and existing exclusions:

   vracli proxy show
   

   • Note the existing exclusion list.

3. Update the proxy configuration to include the new vCenter domain (e.g., *.newcustom.domain) using the vracli proxy set command.

   Note: You must include all previously configured proxies and exclusions in the set command, as this command overwrites the existing configuration.

4. Verify that the new domain appears in the exclusion list:

   vracli proxy show
   

5. Return to the Aria Automation UI and attempt to add the cloud account again.

Additional Information

For more details on managing proxy settings, see the Broadcom technical documentation: How do I configure an internet proxy server.