Infoblox integration continuous loop with "Untrusted Certificate Found" error in VMware Aria Automation

Products

• VCF Automation

Issue/Introduction

• When validating the account for an Infoblox integration in VMware Aria Automation, you may encounter a continuous loop displaying the message "Error: Untrusted Certificate Found." Clicking "accept" to trust the certificate results in a loop that continuously prompts for acceptance. Rebooting the appliance does not resolve the issue, even if the certificate is confirmed to be valid in other environments.
  
  
• During this loop, the provisioning-service-app.log file will record the following SSL verification errors:

ERROR provisioning [host='xxx' thread='reactor-http-epoll-13' user='xxx' org='xxx' trace='xxx' parent='xxx' span='xxx'] c.v.a.i.s.i.IpamProviderGatewayServiceImpl.lambda$validateEndpoint$4:235
 - Validation of endpoint failed:
        com.vmware.admiral.ipam.controller.exception.IpamCertificateException: Failed to validate credentials because of invalid certificate. [Reason: Infoblox HTTP request failed with: HTTPSConnectionPool(host='xxx', port=443): Max retries exceeded with url: /wapi/v2.7/networkview?_return_fields=name (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1007)')))][Error code: 3002]
                at com.vmware.admiral.ipam.service.impl.IpamProviderGatewayServiceImpl$ABXIntegrationStrategy.validateEndpointResponse(IpamProviderGatewayServiceImpl.java:410) ~[tango-ipam-1.6.3-10816-f1d370b.jar:na]
            

• If you attempt to bypass the certificate check by navigating to Assembly > Infrastructure > Connections > Integrations and setting the Infoblox.IPAM.DisableCertificateCheck parameter to True, the endpoint will save successfully. However, subsequent data collection will fail and throw the following error:

java.util.concurrent.CompletionException: java.lang.NullPointerException

Environment

 

• VMware Aria Automation (formerly vRealize Automation)

• Infoblox IPAM Plugin

 

Cause

The initial loop occurs because the system fails to validate the local issuer certificate chain for the Infoblox endpoint, which blocks authentication. When you manually bypass the certificate check, the endpoint connection is allowed to save, but it leaves the database with malformed or missing required endpoint configuration data. This missing data ultimately triggers a NullPointerException when the system attempts to perform data collection.

Resolution

To resolve the NullPointerException during data collection and fix the underlying configuration issue, you must apply a database modification to correct the endpoint records . See: Data collection fails for Infoblox IPAM integration on Aria Automation: java.util.concurrent.CompletionException: java.lang.NullPointerException: Cannot read field "documentSelfLink" because "subnetState" is null.

Additional Information

During troubleshooting, you can check if your environment matches the specific certificate chain error "unable to verify the first certificate" outlined in vRA Cloud Infoblox Plugin throws a certificate chain error during authentication process. If those specific log messages are absent, proceed with the resolution provided above.