vCenter Integration on VCF Operations failed with "Unable to lookup VC Extension information"

Products

• VCF Operations

Issue/Introduction

Symptoms:

• When integrating a vCenter with VCF Operations 9.0, the UI prompts the user to ACCEPT the certificate during the connection process.
• After clicking ACCEPT and save, the integration fails with "Unable to lookup VC Extension information".

Complete error message:

Unable to lookup VC Extension information:
com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate chain is
not trusted and thumbprint verification is not configured
VC extensions info check task failed

Environment

VCF Operations 9.0
vCenter 9.0

Cause

This issue may be caused by an SSL Trust Mismatch within the target vCenter's Lookup Service.
This mismatch can be verified by running the lsdoctor tool ("python lsdoctor.py -l") on the vCenter, which reports the following error :

YYYY-MM-DDThh:mm:ss ERROR generateReport: default-first-site\<vCenter FQDN> (VC 7.0 or CGW) found SSL Trust Mismatch: Please run python ls_doctor.py --trustfix option on this node.

Resolution

• Prerequisite: Take an offline snapshot of the vCenter Appliance before proceeding.
• Follow the following KB to run "python lsdoctor.py --trustfix" to fix the issue.
• Refer the following KB for more details about using lsdoctor.py tool.

Using the 'lsdoctor' Tool
https://knowledge.broadcom.com/external/article/320837

Additional Information

Japanese version of this KB : https://knowledge.broadcom.com/external/article/436087