WLD Upgrade precheck error with message 'Service Account not found for communicating between SDDC manager and vCenter'

Products

• VMware SDDC Manager / VCF Installer

Issue/Introduction

• Imported vSphere 8.0U3 into VCF 9.0.2 Workload Domain and upgrading to 9.0.2.
  
  
• Post vCenter upgrade completed, this error is shown up during precheck for upgrading Workload Domain.
  
  Service Account not found for communicating between SDDC manager and vCenter
  
  
• From SDDC manager UI -> Security -> Password Management, you can find there is 'svc-XXXX' account as active status for this Workload Domain vCenter Server.
  
  
  
  
• You can see this account from /var/log/vmware/vpxd/authz-data.json file in the vCenter log bundle.
  
  
• But you cannot find this account when you are checking with this command from vCenter bash shell.
  
  /usr/lib/vmware-vmafd/bin/dir-cli svcaccount list

Environment

VMware SDDC manager 9.0.2

Cause

SDDC Manager's stored SDDC→vCenter credential is a regular local SSO user, not a true vCenter Local Service Account 
- created that way during brownfield import while the target vCenter was still on 8.0.3.

(pre-9.0, doesn't support true service accounts).

After the customer upgraded vCenter to 9.0.2, nothing converted this legacy credential.
So vCenter Service Account Precheck Action correctly flags it as "not a true service account" and fails the WLD upgrade precheck.

Resolution

The fix is already built into this build.

From SDDC manager UI,

1. Inventory -> Workload Domains -> Click the problematic Workload Domain -> Select 'Updates' tab.

2. Then Scroll down the page and search the 'Available Configuration Updates' item.

3. You should find 'Create Service Account in vCenter' item from the table.

4. If you can find it then click 'APPLY ALL' button for applying this configuration drift.