Unable to register components with VCF Operations during greenfield installation of Operations for Networks

Products

• VCF Operations
• VCF Operations for Networks

Issue/Introduction

• Attempting to deploy VMware Cloud Foundation Operations for Networks 9.1 fails with the following error:
  

  Unable to register components with VCF Operations. Navigate to 'https://######.######.####./vcf-operations/ui/home/administration/control-panel/management-tasks/lcm/tasks' for more details.

   

•  During Stage 2 (Update Component Configurations), the task fails with:

  Error Code: LCMVRNICONFIG90044
  LCMVRNICONFIG90044
  Error occurred while fetching Auth Token from VCF Ops Networks. This could be either due to no proper response or no connection established to VMware Aria Operations for Networks

   

• Navigating to VCF Operations > Operate > Flows indicates that VCF Operations for Networks is not recognized as installed : 
  
  
  
  

• Reviewing logs located at /storage/log/vcops/log/component-manager-plugin-<random id>.log shows something similar to:
  

  INFO component-manager-plugin 31894 [ops@4413 threadId="51249" threadName="ComponentManagerTaskEngine-5" operationId=""] [com.vmware.vrealize.lcm.util.RestClientV2.getSSLConnection] - Using proxy to connect. proxy host: <proxy hostname>, proxy port: 80
  ...snip...
  ERROR component-manager-plugin 31894 [ops@4413 threadId="51249" threadName="ComponentManagerTaskEngine-5" operationId=""] [com.vmware.vrealize.lcm.plugin.core.vrni.driver.helper.VRNIUtils.getAuthTokenV2] - Exception occurred when making REST call VMware Aria Operations for Networks platform
  org.bouncycastle.tls.TlsFatalAlert: certificate_unknown(46)
          at org.bouncycastle.jsse.provider.ProvSSLSocketWrap.checkServerTrusted(ProvSSLSocketWrap.java:132)
          at org.bouncycastle.jsse.provider.ProvTlsClient$1.notifyServerCertificate(ProvTlsClient.java:385)
          ...snip...
  Caused by: java.security.cert.CertificateException: Unable to construct a valid chain
          at org.bouncycastle.jsse.provider.ProvX509TrustManager.validateChain(ProvX509TrustManager.java:321)
          ... 28 more
  Caused by: java.security.cert.CertPathBuilderException: Unable to find certificate chain.

Environment

• VMware Cloud Foundation 9.1.0
• VMware Cloud Foundation Operations for Networks 9.1

Cause

The HTTP proxy is configured with SSL termination, which is not supported in VCF Operations. Settings in the Network Settings Category

Resolution

Step 1: Remove the Configured Proxy

1. In VCF Operations, navigate to Operate > Administration > Global Settings > Network Settings.
2. Delete the configured HTTP proxy.

Step 2: Retry the Management Task

1. Navigate to Administration > Control Panel > Management Tasks.
2. Filter for Component Configuration.
3. Expand the failed VRNI task and click Retry.
4. Confirm the status updates to Passed.

Step 3: Complete Lifecycle Tasks & Verification

1. Navigate to Build > Lifecycle > Tasks and retry any remaining failed tasks from this view.
2. Verify all tasks show a status of Completed.

Navigate to VCF Operations > Operate > Flows and confirm that the VCF Operations for Networks deployment is recognized and the Flow Analyze view is visible.

Note : If external network connectivity is required, reconfigure the HTTP proxy after task completion to restore communication with Broadcom and the software depot. (If required)