SDDC Manager UI displays "Disconnected" status for Workspace ONE (WS1) admin account
Article ID: 435001
Updated On:
Products
Issue/Introduction
In the SDDC Manager UI, the Password Management section displays a "Disconnected" status for Workspace ONE (WS1)/vIDM admin account.
Attempts to remediate or update the password via SDDC Manager fail with credential errors.
- NSX Manager logs (/var/log/proxy/envoy_access_log.txt) show repeated authentication failures (HTTP 403) from Aria Operations for Networks collector IP address.
[YYYY-MM-DDTHH:MM:SSZ] <Collector-IP> <NSX-IP> "GET" "/api/v1/node" "HTTP/1.1" 403 UAEX...[YYYY-MM-DDTHH:MM:SSZ] <Collector-IP> <NSX-IP> "POST" "/api/session/create" "HTTP/1.1" 403 UAEX... Aria Operations for Networks shows "Invalid credentials" status for the NSX-T data sources.
Environment
- Aria Operations for Networks
- VMware NSX
- Workspace One
Cause
This issue occurs when NSX Manager passwords are rotated (e.g., via SDDC Manager), but the new credentials are not subsequently updated within the Aria Operations for Networks data source settings.
The Aria Operations for Networks collectors continue to attempt connection to the NSX-T Managers using the legacy/expired credentials. These repeated failed authentication attempts trigger 403 Permission Denied errors and causes the local admin accounts to lock out
Resolution
Synchronizing passwords in Aria Operations for Networks is a mandatory step in the NSX password rotation workflow. To restore the connection and prevent future disconnects, the credentials must be updated in Aria Operations for Networks immediately following any password rotation in NSX or SDDC Manager.
- Verify Connectivity and Account Status
Log in directly to the NSX Manager UI to ensure the admin/integration account is not permanently locked and that the new password is correct.
If the account is temporarily locked, wait for the lockout period to expire or clear the lockout via the NSX CLI.
- Update Aria Operations for Networks Data Sources
- Log in to the Aria Operations for Networks UI.
Navigate to Settings > Accounts and Data sources.
Locate the NSX-T Manager data sources.
Edit each data source and enter the newly rotated password
Click Submit to save the condifuration.
- Remediate SDDC Manager Status
Once Aria Operations for Networks is using the correct credentials, return to the SDDC Manager UI.
Navigate to Password Management.
Select the affected component and click Remediate or Retry to refresh the account status.
The admin account should now reflect a "Connected" status.
Additional Information
Feedback
