NSX Certificate rotation is stuck in Pending state

Products

• VMware NSX

Issue/Introduction

• In NSX UI, under System > Certificates > Certificate Replacement Result > View Details, the certificate rotation is stuck in state Pending.

• Additionally, backups may be blocked due to the pending operation.
  
  

  Sample log in /var/log/syslog

  ERROR scheduling-worker-1 BackupGenerationServiceImpl 77691 SYSTEM [nsx@6876 comp="nsx-manager" errorCode="MP29213" level="ERROR" subcomp="manager"] Certificate renewal is in progress on NSX Manager. Please try Backup after 11 seconds

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware NSX

Resolution

This is a known issue impacting VMware NSX.

Workaround:

To interrupt the operation and switch it from Pending to Stopped, restart the service proton on the NSX Managers.

• SSH the NSX Manager as admin.
• Restart the manager service: restart service manager
• Wait for the cluster to be stable again: get cluster status
  You can also check in the NSX UI.
• Proceed with the other two NSX Managers, one by one.