Certificate Operation: Replace Certificate task hung at 100% on vCenter Server UI after replacing certificate from Fleet Management in VCF 9.0
search cancel

Certificate Operation: Replace Certificate task hung at 100% on vCenter Server UI after replacing certificate from Fleet Management in VCF 9.0

book

Article ID: 433675

calendar_today

Updated On:

Products

VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

  • Following a certificate replacement operation for fleet components (vCenter, ESXi, SDDC Manager) initiated via Fleet Management, a task i.e.,  "Certificate Operation: Replace Certificate" hangs at 100% within the vCenter Server UI Recent Tasks pane.
  • The initiator of the hung task in vCenter is listed as an SDDC Manager service account (for example, svc-vcf-<env>-sddc-<env>-vcntr-<id>@vsphere.local).
  • The task status remains stuck in a running or incomplete state indefinitely.
  • Despite the stuck task in the UI, the underlying Machine SSL certificate was actually replaced successfully on the vCenter Server. 

Environment

VMware vCenter Server 9.x
VCF Operations

Cause

While the backend certificate replacement process completes successfully on the vCenter component, a synchronization or caching issue prevents the completion status from properly updating. Specifically, the SDDC Manager operations service fails to signal the final completion to the vCenter UI. Because the task was initiated by the SDDC Manager's service account, vCenter leaves it as an orphaned or visually hung task in the recent tasks list waiting for that final signal.

Resolution

To force the task status to update and clear the hung task from the vCenter UI, the operationsmanager service on the SDDC Manager must be restarted.

  1. Connect to the SDDC Manager appliance via SSH using the vcf user account.
  2. Switch to the root account by executing the su - command and providing the root password.
  3. Restart the operations manager service by running the following command: 
    systemctl restart operationsmanager
  4. Wait a few moments for the service to fully initialize, then refresh the vCenter UI to confirm the hung task has been cleared.