License assignment failure due to incorrect license server configuration in VCF 9.1

Products

• VCF Operations
• VMware Cloud Foundation

Issue/Introduction

• When attempting to assign licenses to a vCenter instance in VMware Cloud Foundation (VCF) 9.1, the operation fails with the following error:

  Licenses could not be assigned to vCenter.

  
  
  
• The /var/log/vmware/cis-license/license.log on the vCenter appliance shows below error:
  
  

  ERROR CISLicense [vc@4413 threadName="http-nio-0.0.0.0-12080-exec-1"] Caught exception:
  com.vmware.cis.license.entitlement.management.exception.LicenseServerManagementException: Failed to get Entitlements [...] from License Server [...] with URL [<wrong_FQDN>] with response [License Server connection error: java.net.SocketTimeoutException: Read timed out]
  Failed to get Entitlements from License Server with URL [<wrong_FQDN>] with response [License Server connection error: java.net.SocketTimeoutException: Read timed out]
  }],
      data = UpdateErrorInfo (com.vmware.cis.license.subscription.entitlement.entitlements.update_error_info) => {
          reason = LICENSE_SERVER_FAILURE
      },
      errorType = ERROR
  }

• When checking the license server console directly, the status displays as connected, but it shows an incorrect hostname.
• Forward and reverse lookup from vCenter to the license server is valid

Environment

• VCF Operations 9.1
• VMware Cloud Foundation 9.1

Cause

This issue occurs because the license server was deployed with an incorrect domain name or FQDN during the initial installation. As a result, the vCenter attempts to reach the entitlement service using a malformed or unreachable URL, leading to a network timeout despite basic connectivity (nslookup) working correctly for the individual components.

Note: ICMP traffic is disabled in the current released version, but will be enabled in upcoming releases of the license server.

Resolution

Unregister the misconfigured license server from the environment and redeploy it utilizing the Fully Qualified Domain Name (FQDN) of the license server. 

1. Take SSH session to the affected vCenter Server appliance using root credentials.
2. Validate that the Forward Lookup Zones (A records) and Reverse Lookup Zones (PTR records) for the license server.

   nslookup <Target_License_Server_FQDN>
   nslookup <Target_License_Server_IP>

3. Verify that all required network paths—specifically secure communication over TCP Port 443 are unrestricted across intervening security zones between the vCenter Server instances, VCF Operations, and the target License Server. Refer: Unable to license vCenter after upgrading to 9.1
4. If the hostname mismatch occurs, proceed with deleting the existing license sever. Follow the verified workflow sequence to explicitly disassociate and remove the faulty registration entity. For specific step-by-step UI actions, reference the official documentation: Remove a License Server.
5. Initiate the creation workflow for the license server, ensuring the complete Fully Qualified Domain Name (FQDN) is used during deployment.
   
   Notes:
   • In the network configuration fields, ensure to enter in the absolute Fully Qualified Domain Name (e.g., licenseserver.example.local) in the naming parameters rather than entering a standalone short hostname syntax.
   • The entered hostname must be all lower-case. A single upper-case letter will cause a failed license assignment.
   • Refer: Register VCF Operations
6. After completing the redeployment, you will be able to successfully assign the licenses to the vCenter Server instance.