NSX Global Manager Communication Issues with Local Managers

Products

• VMware NSX

Issue/Introduction

• Certificate renewals of the self signed certificates on Local and Global Managers. 
  
  
• Alarms: Global Managers to Local Manager Synchronization error. 
  
  
• Log error:
  
  /var/log/proxy/reverse-proxy.log
  
  2026-02-13T16:54:50.173Z <local manager> NSX 77337 - [nsx@6876 comp="nsx-manager" level="WARNING" subcomp="http"] Client certificate 'L=PA, ST=CA, C=US, OU=NSBU, O=VMware, CN=global-manager' not found in trust store <179>1

2026-02-13T16:54:50.173Z <local manager>  NSX 77337 - [nsx@6876 comp="global-manager" errorCode="MP98" level="ERROR" subcomp="http"] Uncaught exception

2026-02-13T16:54:50.174Z <local manager> NSX 2614315 - [nsx@6876 comp="global-manager" level="WARNING" subcomp="global-manager"] Error org.springframework.web.client.HttpServerErrorException$InternalServerError: 500 Internal Server Error: "{"module_name":"common-services","error_message":"Internal server error has occurred.","details":"Client certificate not found in trust store","error_code":99}"#012#011at org.springframework.web.client.HttpServerErrorException.create(HttpServerErrorException.java:100)#012#011at

Environment

NSX-T 4.1.0

Cause

Global Manager APH channel did not sync the new Local Manager certificates that is available on the Global Manager.

Resolution

Update the Global Manager APH channel.

• Prerequisite:
  • Thumbprint for local manager node.
• Login (root) on Global Manager. 
  • Execute: 

nsx# curl -X POST -ivk http://localhost:7441/api/v1/sites?action=onboard_site -H "Content-Type: application/json" -d '{"address": "###.##.###.###", "username": "admin", "password": "<passwd>", "thumbprint": "", "site_name": "", "standby_gm":false}'

• Check that the alarm clears.