Unable to register components with VCF Operations during greenfield installation of Operations for Networks

Products

• VCF Operations
• VCF Operations for Networks

Issue/Introduction

• Error seen when attempting to deploy VCF Operations for Networks 9.1 as below:
  
  

  Unable to register components with VCF Operations. Navigate to 'https://######.######.####./vcf-operations/ui/home/administration/control-panel/management-tasks/lcm/tasks' for more details.

   

•  Error On the Stage 2 of Update Component configurations is showing is as below:

  Error Code: LCMVRNICONFIG90044
  LCMVRNICONFIG90044
  Error occurred while fetching Auth Token from VCF Ops Networks. This could be either due to no proper response or no connection established to VMware Aria Operations for Networks

   

• Navigating to VCF Operations Operate> Flows  it doesn't recognize that VCF Operations for Networks is installed,  see screenshot below:
  
  

   
• In review of logs at location /storage/log/vcops/log/component-manager-plugin-<random id>.log show something similar to:

INFO component-manager-plugin 31894 [ops@4413 threadId="51249" threadName="ComponentManagerTaskEngine-5" operationId=""] [com.vmware.vrealize.lcm.util.RestClientV2.getSSLConnection] - Using proxy to connect. proxy host: <proxy hostname>, proxy port: 80
...snip...
ERROR component-manager-plugin 31894 [ops@4413 threadId="51249" threadName="ComponentManagerTaskEngine-5" operationId=""] [com.vmware.vrealize.lcm.plugin.core.vrni.driver.helper.VRNIUtils.getAuthTokenV2] - Exception occurred when making REST call VMware Aria Operations for Networks platform
org.bouncycastle.tls.TlsFatalAlert: certificate_unknown(46)
        at org.bouncycastle.jsse.provider.ProvSSLSocketWrap.checkServerTrusted(ProvSSLSocketWrap.java:132)
        at org.bouncycastle.jsse.provider.ProvTlsClient$1.notifyServerCertificate(ProvTlsClient.java:385)
        ...snip...
Caused by: java.security.cert.CertificateException: Unable to construct a valid chain
        at org.bouncycastle.jsse.provider.ProvX509TrustManager.validateChain(ProvX509TrustManager.java:321)
        ... 28 more
Caused by: java.security.cert.CertPathBuilderException: Unable to find certificate chain.

Environment

• VMware Cloud Foundation 9.1.0
• VMware Cloud Foundation Operations for Networks 9.1
  
  
  

Cause

The proxy connection is SSL terminating, which is not supported.  See Settings in the Network Settings Category

 

Resolution

To resolve this, remove the configured proxy in VCF Operations GUI using the following steps:

1. In VCF Operations, Navigate to Operate > Administration > Global Settings > Network Settings.
2. Delete the configured proxy. Post you have deleted the proxy configuration the register components with VCF Operations error should go away.
3. Complete the failed management tasks after deleting the proxy and retrying them. A retry of the failed task is necessary specifically from the Build > Lifecycle > Tasks view
4. Validate that the task are completed.
5. Validate by navigating to VCF Operations Operate> Flows  it should recognize the VCF Operations for Networks deployment and you should see flow analyze view and its options as per screenshots below:
   
   
   
   Since HTTP proxy is  used for the fleet appliances to be able to connect our of your company network to Broadcom for downloads and communication, reconfigure the proxy after the task is done to re-enable connection to software depot if needed.