Cloud Proxy OVF Deployment Fails with ServiceUnavailable Error in vCenter

Products

• VMware vCenter Server
• VMware Aria Operations (formerly vRealize Operations) 8.x

Issue/Introduction

Cloud Proxy (CP) OVF deployment operations fail from vCenter. The vCenter task failure produces the following error message:

Failed to deploy OVF package. ThrowableProxy.cause A general system error occurred: Provider method implementation threw unexpected exception: com.vmware.vapi.std.errors.ServiceUnavailable: ServiceUnavailable (com.vmware.vapi.std.errors.service_unavailable) => { messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => { id = com.vmware.vapi.endpoint.cis.ServiceUnavailable, defaultMessage = Service unavailable., args = [], params = <null>, localized = <null> }], data = <null>, errorType = SERVICE_UNAVAILABLE }

Environment

7.0 U3s

8.18.5

Cause

An expired trusted root certificate is present in the vCenter certificate management store, preventing proper trust validation by the vAPI endpoint service during the deployment workflow.

Resolution

Steps:

1. Access the vCenter via PuTTY to check the certificate store and identify the expired trusted root.
   
   
2. Remove the expired certificate from the trusted roots store to restore proper certificate chain validation for the vAPI service.
   
   
3. Retry the Cloud Proxy OVF deployment once the certificate is removed.

Additional Information

For step-by-step instructions on removing the expired certificate, please refer to the following official documentation:

Verify and remove CA Certificates from the TRUSTED_ROOTS store in the VMware Endpoint Certificate Store(VECS)