SDDC pre-upgrade check report errors for NSX Edge credentials

Products

• VMware SDDC Manager
• VMware NSX

Issue/Introduction

• Following error is observed in SDDC pre-upgrade check report:

Description: Validate the NSX Edge Cluster credentials
Health status: ERROR
Error Description: NSX Edge credentials validation failed for node: host_fqdn
Impact: High: Do not perform upgrade without addressing this issue.
Remediation: Check the NSX edge credentials for usernames: admin, audit, root

• NSX Edge servers will have root, audit and admin accounts showing status "--" in the SDDC password manager.

Environment

• VCF 5.x
• NSX 4.x

Cause

The NSX Edge node passwords were lost or expired, leading to a loss of synchronization between the appliance and SDDC Manager's credential store.

 SDDC Manager cannot retrieve or validate the status of accounts when the NSX account (audit, root and admin) credentials do not match the passwords recorded in the SDDC password manager. The presence of the -- status indicates a failure to poll the account metadata from the NSX Edge nodes. This password mismatch causes the pre-upgrade check to error.

Resolution

1. Reset the passwords of respective accounts (audit, root and admin) following KB NSX Edge Nodes or Managers are disconnected in Password Management on SDDC.

2. After resetting the passwords in NSX Manager, remediate the password in SDDC Manager to update the password in the SDDC Manager database.

3. Re-run the SDDC Manager upgrade pre-check to confirm the error is remediated.