Error code: LCMVIDM72230 while enabling multi-tenancy for VMware Identity Manager using Aria Suite Lifecycle Manager.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Multi-tenancy request fails with error LCMVIDM72230 "Failed to perform DNS check for the tenant" in Aria Suite Lifecycle Manager.

• Tenant fully qualified domain name resolves to Load balancer IP from Aria Suite Lifecycle Manager and VMware Identity Manager nodes.
• /var/log/vrlcm/vmware_vrlcm.log

INFO vrlcm[6239] [http-nio-8080-exec-11] [c.v.v.l.a.g.s.EngineServiceImpl]  -- Error Cause ::
{
  "messageId" : "LCMVIDM72230",
  "message" : "Failed to perform DNS check for the tenant.",
  "eventId" : "xxxxxxxxxxxxxxxxxxx",
  "retry" : true,
  "exceptionMessage" : "DNS resolvability and reachability for the tenant <Tenant FQDN> failed. Ensure to have a DNS entry mapping <Tenant FQDN> to <LB IP>, and that the <Tenant FQDN> is resolvable, reachable from VMware Aria Suite Lifecycle via the nslookup and retry.",
  "exceptionStackTrace" : "com.vmware.vrealize.lcm.vidm.common.exception.VidmTenantHostNotResolvableException: DNS resolvability and rechability for the tenant <Tenant FQDN> failed. Ensure to have a DNS entry mapping <Tenant FQDN> to <LB IP>, and that the <Tenant FQDN> is resolvable, reachable from VMware Aria Suite Lifecycle via the nslookup and retry. \n\tat com.vmware.vrealize.lcm.vidm.core.task.tenant.VidmTenantDnsCheckTask.execute(VidmTenantDnsCheckTask.java:98)\n\tat com.vmware.vrealize.lcm.platform.automata.service.Task.retry(Task.java:158)\n\tat com.vmware.vrealize.lcm.automata.core.TaskThread.run(TaskThread.java:60)\n\tat java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)\n\tat java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)\n\tat java.base/java.lang.Thread.run(Unknown Source)\n",

Environment

VMware Identity Manager 3.3.7

Cause

Due to ICMP traffic being blocked for Tenant Fully qualified domain name from Aria Suite Lifecycle Manager and VMware Identity Manager nodes, causing multi-tenancy request to fail.

Resolution

Ensure ICMP traffic is enabled and Tenant fully qualified domain name should be pingable from Aria Suite Lifecycle Manager and VMware Identity Manager nodes.