VCFA is not able to connect to SDDC Manager after SSL certificate update.
search cancel

VCFA is not able to connect to SDDC Manager after SSL certificate update.

book

Article ID: 449009

calendar_today

Updated On:

Products

VCF Automation

Issue/Introduction

Symptoms:

  • Once the SSL certificate of a SDDC Manager's API endpoint is updated, VCFA is no longer able to connect to it.
  • The Protect and Discovery view shows an error similar to the following:
    Unhealthy - failed to find SDDC Manager for vCenter <vCenter FQDN>: no SDDC Manager found that manages vCenter <vCenter FQDN>

Environment

VCF Automation 9.0.x

VCF Automation 9.1.x

Cause

VCFA does not automatically acquire the new certificate from SDDC Manager.

Resolution

Workaround
Use the following procedure to sync the certificate chains from SDDC Manager to VCFA:

  1. Take a backup of VCFA.
  2. Log into one of the VMs of VCFA.
    1. ssh vmware-system-user@<VCFA-Platform-FQDN>
    2. sudo -i
  3. Execute a certificate synchronization command to rectify the problem. It checks if the current SSL certificate chains of each SDDC Manager registered with VCFA differs from the one already known to VCFA. In case of a mismatch, the certificate is updated in VCFA after confirmation from the user that is also backed by a thumbprint verification.
    1. Install the sync_vcfa_with_sddcm_cert.sh script on the node:
      echo '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' | base64 -d | tar -xJf -
    2. Run ./sync_vcfa_with_sddcm_cert.sh <VCFA-FQDN>
    3. Type the password for admin@System.
    4. For any mismatch, verify the certificate chain thumbprints and approve the update.
Powered by Wolken Software