Platform Services for VMware Tanzu Platform install fails with "could not obtain UAA admin token"

Products

• VMware Tanzu Platform Core
• Tanzu Hub SaaS

Issue/Introduction

When installing the Platform Services for VMware Tanzu Platform tile, it fails on the data-tile-cluster-discovery process. Looking at the logs shows:

/var/vcap/sys/log/data-tile-cluster-discovery/data-tile-cluster-discovery.stdout.log
2026-08-20T10:20:51Z [pre-start] Fetching bootstrap token from https://uaa.sys.tanzu.lab
2026-08-20T10:20:51Z [pre-start] ERROR: could not obtain UAA admin token (is UAA_URL and bootstrap credential correct?)
2026-08-20T10:21:31Z [pre-start] Fetching bootstrap token from https://uaa.sys.tanzu.lab
2026-08-20T10:21:31Z [pre-start] ERROR: could not obtain UAA admin token (is UAA_URL and bootstrap credential correct?)
2026-08-20T10:22:11Z [pre-start] Fetching bootstrap token from https://uaa.sys.tanzu.lab
2026-08-20T10:22:11Z [pre-start] ERROR: could not obtain UAA admin token (is UAA_URL and bootstrap credential correct?)

Environment

Platform Services for VMware Tanzu Platform

Cause

This error occurs when the hub-tas-agent VM does not trust the certificate in use by the GoRouter.

Resolution

To resolve this, take the GoRouter certificate from TAS tile -> Networking -> Certificates and private keys for the Gorouter.

Place this within the BOSH director tile -> Security -> Trusted Certificates field. Then run an Apply Changes against the TAS tile.

If this does not resolve the issue, there is likely a different certificate validation failure happening. Please raise a case with Broadcom support to investigate.