Local Manager (LM) thumbprint update fails on the Global Manager (GM) following a certificate rotation

Products

• VMware NSX

Issue/Introduction

• After performing a certificate replacement in the environment, a Local Manager (LM) fails to register back to the Global Manager (GM).
• Validating 'Check Compatibility' returns a successful (green) status, indicating the thumbprint is recognized and valid.
• However, the update fails with error.

  Error: Failed to register Policy appliance with NSX Manager: siteA.abc-apac.net, Cause:503 InternalServerError (Error code: 500023) 

       

Environment

VMware NSX-T Data Center 3.2.1

Cause

This issue is caused by a known software limitation in NSX version 3.2.1.
During the certificate synchronization process, the Global Manager fails to retrieve the full list of certificates from the Local Manager because the page_size=1000 parameter is missing from the internal API call.
This results in an incomplete data transfer and the subsequent 500023 error.

Resolution

Upgrade the NSX infrastructure to version 3.2.2 or higher, which includes the necessary pagination parameters to handle certificate collection correctly.

Additional Information

Impact:
Global Manager (GM) to Local Manager (LM) connectivity failure following a VIP certificate update on the Local Manager.