Unable to deploy OVA in vCenter with error: "A fatal error has occurred to continue"

Products

• VMware vCenter Server 8.0

Issue/Introduction

• The UI displays the error: A fatal error has occurred. Unable to continue.
• The vmware-vpxd-svcs service is in a Stopped or Inactive state.
• Unexpected 503 status codes and Could not validate with CIS Authz service are recorded during OVF import sessions.
  
  /var/log/vmware/content-library/cls.log 

  • YYYY-MM-DDTHH:MM:SS | ERROR    | mmcroa63-6363469-auto-3se32-h5:70176906 | tomcat-http-46            | AuthorizationFilter            | Could not retrieve permission information for ID urn:vmomi:Folder:group-v16243:8ca81cdc-b027-4028-9c0c-afa13bc5389d for operation com.vmware.vcenter.ovf.import_session.

    create_for_resource_pool.

    com.vmware.vsphere.common.authz.AuthorizationException: Could not validate with CIS Authz service

            at com.vmware.vsphere.common.authz.impl.PermissionValidatorImpl.validate(PermissionValidatorImpl.java:44) ~[vsphere-auth-lib-1.0.0.jar:?]

            at com.vmware.vcde.common.services.authorization.impl.PermissionValidatorWrapperImpl.validate(PermissionValidatorWrapperImpl.java:98) ~[vsphere-cs-li

    Caused by: com.vmware.cis.authorization.client.exception.AuthorizationClientException: Operation: hasPrivileges. Read API execution failed.

            at com.vmware.cis.authorization.client.impl.AuthorizationServiceClientimpl.readOperation(AuthorizationServiceClientimpl.java:1091) ~[inventory-client.jar:?]

            at com.vmware.cis.authorization.client.impl.AuthorizationServiceClientimpl.hasPrivileges(AuthorizationServiceClientimpl.java:578) ~[inventory-client.jar:?]

            at com.vmware.vsphere.common.authz.impl.PermissionValidatorImpl.validate(PermissionValidatorImpl.java:42) ~[vsphere-auth-lib-1.0.0.jar:?]

            ... 37 more

    Caused by: com.vmware.vim.vmomi.client.common.UnexpectedStatusCodeException: Unexpected status code: 503

Environment

• VMware vCenter Server 8.x
• VMware vCenter Server 9.x

Cause

The vmware-vpxd-svcs (vCenter Server Common Services) is stopped or inactive. This service is required for Content Library functions and authorization validation during OVF/OVA imports.

Resolution

1. Log in to the vCenter Server Appliance (VCSA) via SSH as root.
2. Run the following command to check the service status:
service-control --status vmware-vpxd-svcs
3. If the service is stopped, attempt to start it:
   service-control --start vmware-vpxd-svcs
4. Reattempt to deploy OVA.

Additional Information

Note: If the service fails to start due to an SSL or hostname mismatch error, refer KB 432246 and KB 385107 - to replace the Machine SSL certificate.

For detailed instructions on managing Broadcom support cases, see Creating and Managing Broadcom Support Cases.

Download Broadcom products