VCF Operations 9.1 connection mode activation intermittently or continuously fails with the UI error "Failed to communicate with the VCF Business Services console" when configured with proxy

Products

• VMware Cloud Foundation

Issue/Introduction

- UI displays: "Failed to communicate with the VCF Business Services console. Check your network connection, and if this error persists, contact support." during VCF license activation on Connected mode

-Below error found in vcops-bridge log:

No enum constant with key: app.license.enforceDelayPeriod

- Running verbose curl through proxy exposes TLS re-encryption by an internal proxy authority, whereas direct connections negotiate TLSv1.3 signed by DigiCert Global.

-You may also observe below Error in VCF Operations UI Console :

Environment

VMware Cloud Foundation 9.1

Cause

The enterprise proxy performs Deep Packet Inspection (DPI) TLS interception by substituting public certificates with an untrusted intermediate CA , causing internal Java microservices to fail PKIX path validation, alongside intermittent proxy CONNECT tunnel drops

Resolution

1.Request the network and security team managing proxy/port:

- Exclude eapi.broadcom.com, vcf.broadcom.com, and dl.broadcom.com from SSL/TLS Deep Packet Inspection (DPI) / MitM re-encryption.

- Ensure unrestricted outbound TCP 443 CONNECT tunneling and DNS resolution for these FQDNs.

 

2.Config proxy server/port and make sure the test connection succeed in OPS Administration > Global Settings > Network Settings

 

3. If the customer's network security policy strictly prohibits disabling SSL inspection/interception on proxy server, export the full chain certificate of proxy server and import all to VCF OPS trust store refer to below doc:

https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-1/fleet-management/certificate-management-9-0/managing-certificates-in-vmware-vsphere-foundation/certificates/importing-ca-certificates.html

 

4.Regenerate Activation Code & Complete Activation:

- Log into the VCF Business Services Console (CLM) and generate a new Activation Code.

- In VCF Operations, navigate to Administration > Licenses & Registration > Registration, paste the new code, and click Activate.