Error assigning primary license to registered vCenter Server

Products

• VCF Operations

Issue/Introduction

• Upgraded vCenter and ESXI to 9.1
• Deployed a license server
• /var/log/vmware/cis-license/license.log on vCenter Server reveals following error: 

  defaultMessage=Failed to get Entitlements [########-####-####-####-############] from License Server [########-####-####-####-############] with URL [<licenseserverfqdn> with response [License Server returned unexpected status code: 526 and response Invalid SSL Certificate),
  args = [],
  params = <null>,
  localized = Failed to get Entitlements [########-####-####-####-############
  I from License Server [########-####-####-####-############] with URL [<licenseserverfqdn> with response [License Server returned unexpected status code: 526 and response Invalid SSL Certificate]
  }],
  data=COM.VMware.cis.license.subscription. entitlement.entitlements.update_error_info => {reason=LICENSE_SERVER_FAILURE},
  }
  },
  errorType = ERROR
  startTime = 6/19/26 08:07:54 +0000,
  endTime = 6/19/26 08:07:55 +0000,
  user = <vCenter service account>

Environment

• VMware Cloud Foundation (VCF) 9.1
• VMware vSphere Foundation (VVF) 9.1
• VMware vCenter Server 9.1

Resolution

1. Log in to the vSphere Client as an Administrator.
2. Open /var/log/vmware/cis-license/license.log, extract from the error the affected user. 
3. Navigate to Administration > Access Control > Global Permissions.
4. Verify that the below privileges are added to the affected user's assigned vCenter role.  Refer to the document Certificate Management Privileges:
   
   • CertificateManagement.Manage
   • CertificateManagement.Administer
   • Global.Licenses
5. Verify that Propagate to children is enabled and save the changes.