Fleet Management Certificate Trust Failed During Component Lifecycle Operations

Products

• VCF Operations for Networks

Issue/Introduction

• Administrators are unable to synchronize the inventory for VCF Operations for Networks within VCF Fleet Management (Aria Suite Lifecycle).

• The synchronization task fails with the following errors:

LCMVRNICONFIG90045 - Failed to get CSRF token for Operations-networks. Validate if the IP Address, credentials are correct and all services are running.

• Error "Certificate Trust Failed has been observed on Management Lifecycle" is displayed within the Requests (or Tasks) monitoring interface of the VCF Fleet Management (formerly Aria Suite Lifecycle) UI.

Environment

VCF Operations for Networks 9.0.x

Cause

• The certificate presented by the target endpoint (VCF Operations, VCF Operations for Logs, or VCF Operations for Networks) is not present (or present, but expired) in the centralized VCF Fleet Management trust store.
  
  
• During the lifecycle task, the validation engine fails to find the referenced certificate thumbprint and aborts the connection.

Resolution

1. Log in to the VCF Fleet Management UI.

2. Navigate to Developer Center > API & SDKs > Fleet Management API.

3. Click the Authorize button located at the top right of the Swagger UI, enter the required administrator credentials, and click Authorize.

4. Scroll to the Certificate Management Controller API section and expand it.

5. Locate and expand the POST method for the /lcm/certificate-management/api/certificate-trust URI.

6. Click Try it out.

   In the endpoint parameter field, enter the exact Fully Qualified Domain Name (FQDN) of the failing component endpoint.

7. Click Execute.

8. Scroll to the Responses block and verify that the Server response HTTP status code is 200.

9. Navigate back to Lifecycle Operations > Requests, select the failed synchronization or upgrade task, and click Retry.