Machine SSL tab under Certificate management and Certificate authority tab shows "no healthy upstream" on vCenter UI

Products

• VMware vCenter Server

Issue/Introduction

• Machine SSL tab under Certificate management and Certificate authority tab shows "no healthy upstream" on vCenter UI.
  
  
• vCenter server is managed by SDDC Manager 
  
  
• A certificate mismatch occurred reverting vCenter to a pre-renewal snapshot after a failed update rolled back its certificate, while SDDC Manager retained the newly updated one.

Environment

SDDC 5.2.x

vCenter server 8.x

Cause

vCenter server doesn't trust SDDC Manager's certificate.

Resolution

This is a known issue fixed in version 9.1.1.

For version 5.2.x, follow the below workaround: 

1. Login to Management vCenter UI and navigate to Administration.

2. Click on Client Plugins > Select SDDC Manager > Remove SDDC Manager

3. SSH to SDDC manager via vcf user and switch to root.

4. Restart sddc-manager-ui-app service:  systemctl restart sddc-manager-ui-app

Validate the vCenter Certificate management UI - the certificate details should now be visible.