Unable to Join Manually deployed NSX Manager to existing NSX Manager Cluster
search cancel

Unable to Join Manually deployed NSX Manager to existing NSX Manager Cluster

book

Article ID: 440445

calendar_today

Updated On:

Products

VMware NSX

Issue/Introduction

  • An NSX manager node needs to be joined to an existing cluster per Join the New NSX Manager Node to the NSX Manager Cluster
  • Joining the existing cluster to the NSX manager via join existing_node_ip cluster-id cluster_id thumbprint api_thumbprint username admin as admin user in the new NSX manager CLI results in the error % An error occurred while joining the specified cluster. Reason: [CBM125] SSL exception when making an attach call to the destination. Please check the thumbprint.
  • Running the get certificate cluster thumbprint command matches a thumbprint in the NSX cluster

Cause

A thumbprint mismatch occurs because the thumbprint provided in the join command does not correspond to the specific target IP address being used (e.g., using an individual node's thumbprint to connect to the cluster VIP, or using the cluster VIP's thumbprint to connect directly to an individual node).

Resolution

  • Verify the exact IP address being used in the join command (specify either the individual target node IP or the cluster VIP).

  • Obtain the correct matching thumbprint for that specific IP address. If connecting to the cluster VIP, retrieve the cluster thumbprint by running the get certificate cluster thumbprint command.

  • Re-run the join command using the validated IP address and its corresponding thumbprint pair.

Additional Information

Manually deployed NSX Manager failed to join the NSX Manager Cluster