Compute Manager 'DOWN' Status in VCF 9 due to Root Certificate Chain Validation Failure

Products

• VMware NSX

Issue/Introduction

• In a VCF 9 environment, the **Compute Manager** (vCenter Server) status appears as **DOWN** within NSX manager.
  
  
• You may see messages similar to the following in the  /var/log/cm-inventory/cm-inventory.log file on the NSX manager node and API responses may indicate a certificate validation error similar to: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.`

 

Environment

VCF 9.X

Cause

This issue occurs when the root certificate for the Compute Manager is present in the **Corfu certificates API** but is missing from the local CA certificate store on the file system. This discrepancy prevents successful certificate chain validation during the connection process.

Resolution

This issue is resolved in VCF 9.1 . If you encounter similar issues, please open a case with Broadcom Support - How to create Broadcom support case