Invalid Credentials alert shown for NSX-T Manager

Products

• VCF Operations for Networks

Issue/Introduction

• VCF Operations for Networks shows an alert under NSX Data Source as 'Invalid Credentials'.

• Redo validation > Ellipsis > Enter credentials > Validation Fails
  Redo Validation > SSH > Logged in as 'admin' user successful.
• Collector log shows:
  • [TIME STAMP} ERROR collector 30848 [netw@4413 class="dataprovider.utils.HttpUtils" thread="NSXT_DATASOURCE_NAME_Config_OpMgr-0" method="checkStatusAndThrow" line="41"] API /api/session/create error response {"module_name":"common-service","error_message":"Authentication Failed: Account is temporarily locked","error_code":98}
2026-01-17T19:09:36.000566Z WARNING collector 30848 [netw@4413 class="common.utils.CommonUtils" thread="NSXT_DATASOURCE_NAME_Config_OpMgr-0" method="logException" line="2743"] Exception occurred while getting access token for dpId = NSXT_DATASOURCE_NAME.
com.vnera.dataproviders.core.common.impl.dataprovider.utils.exceptions.HttpException: Could not get response for /api/session/create, status 403
        at com.vnera.dataproviders.core.common.impl.dataprovider.utils.HttpUtils.checkCodeAndThrow(HttpUtils.java:54) _[dataproviders-0.001-SNAPSHOT.jar:_]

Environment

VCF Operations for Networks 9.0
VCF Operations for Networks 9.0.1

Cause

User account used to add data source is temporarily locked in NSX manager due to invalid password attempts.

 

Resolution

1. Check the account lockout policy for API in NSX manager, and temporarily change the lockout period and maximum authorization failure attempts to a different value if the current value is too aggressive. Refer to NSX administration guide - Authentication Policy
2. Update correct password in Aria Operations for Networks after lockout period is over

If the Invalid Credentials alert still persists,  perform the steps below:

1. Edit NSX Manager and uncheck DFW Firewall IPFix and Enable NSXT Latency (If checked). Submit the Datasource.
2. Wait for 30 min.
3. Delete the NSX Datasource from VCF  Operations for Networks GUI
4. Wait for 1 hour (approximately)
5. Add the NSX manager data source.
6. Wait for minimum 8-12 hours for flow data to process and seen on the GUI.

Additional Information

NSX account lockout policy is a security feature that locks a user account after a number of failed login attempts

Admin account lockout policy for the NSX-T Edge and Manager nodes