Failed to integrate vCenter instance in VCF OPS 9.x

Products

• VCF Operations

Issue/Introduction

- Test connection is successful

- Below error found when save the VC account in operators integration:

Unable to lookup VC Extension information.
com.vmware.vim.sso.admin.exception.CertificateValidationException: com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate chain is not trusted and pinned certificates are not configured and thumbprint verification is not configured

- The issuer from the problematic vCenter 'certification is "Fortinet Untrusted CA"

Environment

VCF Operators 9.x

Resolution

1. Configure a bypass rule on the Fortinet firewall to exclude SSL inspection for traffic between the VCF OPS (VMwareAdapter) and vCenter.

2. If bypass is not permitted, export the Fortinet Root and Intermediate CA certificates and import them into the VCF OPS trusted certificate store, refer to KB420399

3. If the above steps fail, engage the network or security administration team responsible for the Fortinet firewall boundary for root certificate export