CARR Script Unable to Renew Principal Identity Certificate

Products

• VMware NSX

Issue/Introduction

Global Manager and Local Manager are out of sync. 

Accessing LM from GM UI fails with an error: Internal server error has occurred. (Error code: 99)

The Principal Identity (PI) certificates for both the Global Manager (GM) and Local Manager (LM) have expired. Attempts to renew or review these certificates using the CARR script are failing.

GM Manager: 

LM:

Environment

VMware NSX 

Cause

Principal Identity (PI) user exists in the system without a valid corresponding certificate. 

Resolution

If you have encountered this issue, please open a support case with Broadcom Support and refer to this KB article.
For more information, refer Creating and managing Broadcom support cases.