NSX manager fails to start HTTPS service after upgrading to version 9.1

Products

• VCF Operations
• VMware NSX

Issue/Introduction

• NSX manager fails to start HTTTPS service after upgrading to version 9.1
• Executing the 'get cluster status' command on one of the NSX Manager node on admin mode reveals that the HTTPS and Manager components are down for the node.
• The error related to IndexOutOfBoundsException is observed in /var/log/proton/nsxapi.log on the affected NSX Manager node:
  
  <...log snippet...>
ERROR NSX 6464 [nsx@4413 comp="nsx-manager" errorCode="MP100" level="ERROR" logger="TrustStoreServiceImpl" msgID="SYSTEM" subcomp="manager" threadName="WrapperStartStopAppMain"] 
Unexpected exception\njava.lang.IndexOutOfBoundsException: Index 0 out of bounds for length 0
at java.base/jdk.internal.util.Preconditions.outOfBounds(Unknown Source)     
at java.base/jdk.internal.util.Preconditions.outOfBoundsCheckIndex(Unknown Source)
at java.base/jdk.internal.util.Preconditions.checkIndex(Unknown Source)\n  at java.base/java.util.Objects.checkIndex(Unknown Source)
at java.base/java.util.ArrayList.get(Unknown Source)
at com.vmware.nsx.management.truststore.service.impl.TrustStoreServiceImpl.importCACertificateIntoLocalTrustStore(TrustStoreServiceImpl.java:2187)       
at com.vmware.nsx.management.truststore.service.impl.TrustStoreServiceImpl.resyncCaCertificates(TrustStoreServiceImpl.java:2855)
at com.vmware.nsx.management.truststore.service.impl.TrustStoreServiceImpl.initialize(TrustStoreServiceImpl.java:2
<...log snippet...>


Environment

VMware NSX 9.1

Cause

• At least one TRUSTED_CA certificate record already persisted in this cluster's Corfu data that has zero x509 certs attached, and this throws IndexOutOfBoundsException, crashing Proton's entire Spring context on startup 

Resolution

Contact Broadcom Support for further assistance.