NSX Compute manager registration fails with "Error code: 7061" when using an SSO user authenticated via OKTA

Products

• VMware NSX

Issue/Introduction

 

• When attempting to add a VMware vCenter Server as a Compute Manager in VMware NSX, the registration fails.

• The NSX Manager UI displays the following error message:

  Cannot register compute manager server <vcenter-fqdn> , credentials are incorrect or invalid compute manager. (Error code: 7061)

• The credentials entered belong to a Single Sign-On user.

 

Environment

VMware NSX 

Cause

This issue occurs because the SSO user account specified for the Compute Manager registration is configured to authenticate through an external Identity Provider (IdP), such as OKTA.

Currently, NSX does not support registering a Compute Manager using an SSO user that requires external OKTA authentication.

Resolution

To resolve this issue, you must use a vCenter Server account that does not rely on external IdP (OKTA) authentication. Choose one of the following options:

Option 1: Use the default vCenter Administrator Provide the credentials of the default VMware vCenter administrator account (e.g., [email protected]).

Option 2: Create a dedicated Service Account. Create a dedicated local vCenter Server role and user specifically for NSX operations.

For more detailed instructions and the specific privileges required for a Compute Manager account, please refer to the official Broadcom documentation:

• Add a compute manager