Error: Pre-requisites for setup are missing and NSX/VC connections is Blank in VCF Automation due to firewall restrictions
search cancel

Error: Pre-requisites for setup are missing and NSX/VC connections is Blank in VCF Automation due to firewall restrictions

book

Article ID: 450995

calendar_today

Updated On:

Products

VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

When accessing the VCF Automation provider page, the message Pre-requisites for setup are missing appears. Despite the deployment appearing healthy in VCF Operations, the vCenter and NSX connections are not visible under Administration > Connections in VCF Automation.

  • Banner message Pre-requisites for setup are missing displays on the VCF Automation provider page.
  • vCenter, NSX Manager, and Supervisor connections are blank or missing under Administration > Connections.
  • The following error is seen in /services-logs/tenant-manager-0/file-logs/vcloud-container-debug.log

    ERROR    | Backend-activity-pool-310068 | SDDCManagerPollerJob$SDDCManagerPollerJobActivity | [Activity Execution] Failed to connect to SDDC Manager, id=urn:vcloud:vcfInfraEndpoint:#####-#####, name=<SDDCManager-FQDN> - Handle: urn:uuid:####################, Current Phase: SDDCManagerPollerJob$SDDCManagerPollerJobActivity$ConnectToSDDCManagerPhase | requestId=########,request=POST https://FQDN/cloudapi/1.0.0/vcfInfraEndpoints/urn:vcloud:vcfInfraEndpoint:#########,requestTime=########,remoteAddress=#########,userAgent=Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/201...,accept=application/json;version 9.0.0,Host=########### vcd=###########,task=################ activity=(com.vmware.vcloud.backendbase.management.system.TaskActivity,urn:uuid:###########) activity=(com.vmware.ssdc.backend.vcf.sddcmanager.SDDCManagerPollerJob$SDDCManagerPollerJobActivity,urn:uuid:#########)
    java.lang.RuntimeException: Failed connecting to host, name=
            at com.vmware.ssdc.backend.vcf.sddcmanager.TestConnectionUtil.validateProbeResultConnection(TestConnectionUtil.java:145)
            at com.vmware.ssdc.backend.vcf.sddcmanager.TestConnectionUtil.extractAndFindRootCertificate(TestConnectionUtil.java:163)
            at com.vmware.ssdc.backend.vcf.sddcmanager.TestConnectionUtil.testConnectionAndTrustCertificate(TestConnectionUtil.java:95)
            at com.vmware.ssdc.backend.vcf.sddcmanager.SDDCManagerPollerJob$SDDCManagerPollerJobActivity$ConnectToSDDCManagerPhase.validateSddcManagerConnection(SDDCManagerPollerJob.java:240)
            at com.vmware.ssdc.backend.vcf.sddcmanager.SDDCManagerPollerJob$SDDCManagerPollerJobActivity$ConnectToSDDCManagerPhase.invokeCancelableOperation(SDDCManagerPollerJob.java:204)
            at com.vmware.vcloud.common.activity.toolkit.VcdAbstractActivity$CancelablePhase.invoke(VcdAbstractActivity.java:591)
            at com.vmware.vcloud.activity.executors.ActivityRunner.runPhase(ActivityRunner.java:175)
            at com.vmware.vcloud.activity.executors.ActivityRunner.run(ActivityRunner.java:112)
            at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
            at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
            at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
            at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
            at java.base/java.lang.Thread.run(Thread.java:829)
    Caused by: java.net.ConnectException: Connection refused (Connection refused)
            at java.base/java.net.PlainSocketImpl.socketConnect(Native Method
  • From VCFA appliance , curl -kv telnet://SDDC-M-FQDN:443 shows Connection refused

Environment

  • VMware Cloud Foundation (VCF) Automation 9.x

Cause

Firewall connection rules block necessary communication between the VCF Automation appliance and the management domain components (vCenter and NSX Manager). Without these network paths, the automated discovery process for the SDDC instance cannot complete.

Resolution

To restore communication and detect the SDDC components:

  1. Review and update firewall connection rules to allow traffic between the VCF Automation appliance and the FQDNs/IP addresses of vCenter and NSX Manager.
  2. Ensure all required ports for VCF Automation integration are open.
  3. Log in to the VCF Automation Provider Portal (https://<FQDN>/provider).
  4. Navigate to Administration > Connections > VCF Instances.
  5. Select the SDDC instance and click Refresh VCF Instance.
  6. Wait for the refresh operation to complete.
  7. Verify that vCenter, NSX Manager, and the Supervisor now appear in the Connections list with a status of Connected.