Adding collector node failed on VCF Operations for Networks 9.0

Products

• VCF Operations

Issue/Introduction

VCF Operations for Networks 9.x was deployed through VCF operations fleet management.

Customer tried to deploy collector node for VCF Operations for Networks 9.0 from VCF operations but failed.

The error happened on selecting certificate step and the logs are showing as below inside fleet management.

/var/log/vrlcm/vmware_vrlcm.log

YYYY-MM-DDTHH:MM:SS.SSSZ INFO vrlcm[####] [pool-3-thread-###] [c.v.v.l.p.c.v.d.h.VRNIUtils]  -- Calling update certificate API - path /api/ni/settings/certi
...
END CERTIFICATE-----\n","private_key":null}

YYYY-MM-DDTHH:MM:SS.SSSZ INFO vrlcm[####] [pool-#-thread-###] [c.v.v.l.p.c.v.d.h.VRNIUtils]  -- Response code - 400 and data - {"code":400,"message":"Bad Request","details":[{"code":400,"message":"Either private key or certificate is missing in the request.","target":[]}]}
YYYY-MM-DDTHH:MM:SS.SSSZ ERROR vrlcm[####] [pool-#-thread-###] [c.v.v.l.p.c.v.d.h.VRNIUtils]  -- Failed to update certificate
YYYY-MM-DDTHH:MM:SS.SSSZ INFO vrlcm[####] [pool-#-thread-###] [c.v.v.l.p.a.s.Task]  -- Injecting task failure event. Error Code : 'LCMVRNICONFIG9019', Retry : 'true', Causing Properties : '{ CAUSE ::  }'

 

 

Environment

VCF 9.0.2

Cause

The issue happened due to missing private key for VCF Operations for Networks with unknown reason.

Resolution

You need to replace certificate for VCF Operations for Networks and adding collector node again.

https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-0/fleet-management/certificate-management-9-0/replace-a-certificate-with-a-certificate-authority--ca--certificate.html

The certificate must contains all nodes information

 

If your environment cannot configure and use Microsoft CA, please open a case for additional support from the GS support team.