Error : LCMVCFA00001 while upgrading VCF Automation

Products

• VCF Operations
• VCF Automation

Issue/Introduction

The Management Tasks -> Configure Component tasks In VCF Operations fails with

LCMVCFA00001 : Error occurred while creating service account in VCF Automation

Below error log seen on the UI:

org.bouncycastle.tls.TlsFatalAlert: certificate_unknown(46)
Caused by: java.security.cert.CertificateException: Unable to construct a valid chain
Caused by: java.security.cert.CertPathBuilderException: No issuer certificate for certificate in certification path found.

 

Environment

VCF Operations 9.1

VCF Automation 9.1

Cause

The issue occurred as the customer has by mistake put IP of VCFA service runtime platform FQDN in the VCFA F5 load balancer, as a result Fleet service is routing request to the the platform node FQDN which is a VMSP component and not part of VCFA service hence unable to construct a valid chain

Resolution

Disable or delete the incorrect entry from the VCFA F5 load balancer

To verify the connectivity:

1. SSH to VCF management services control plane node with vmware-system-user username
2. Run the below command, it should be successful on every try.
   

   curl --cacert /tmp/bundle.pem https://<vcfafqdn>/automation -v