Error: ERR_TOO_MANY_REDIRECTS when attempting to access vIDM via load balanced FQDN.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)
• VMware NSX
• VMware NSX Advanced Load Balancer

Issue/Introduction

• VMware Identity Manager (vIDM) environment is inaccessible via the NSX Load Balancer (LB) FQDN
• Individual vIDM nodes report a valid certificate when accessed directly via HTTPS
• On the NSX manager node, one or more controllers show as disconnected when the following command is run;

  • get controllers

Environment

VMware Identity Manager 3.3.7

NSX Load Balancer

Cause

The updated certificate applied to the Load Balancer within NSX failed to propagate correctly across the NSX infrastructure. This results in the LB continuing to present the expired certificate to the vIDM nodes, causing them to reject the connection and resulting in a redirect loop. 

Resolution

1. Execute the Certificate Analyzer, Results and Recovery (CARR) script within the NSX environment to correct certificate-related synchronization and propagation failures.

   • Using Certificate Analyzer, Results and Recovery (CARR) Script to fix certificate related issues in NSX
     
     

2. Allow the CARR script to identify and recover out-of-sync certificates across NSX components.

3. Verify that the updated LB certificate has successfully propagated and is correctly presented to the vIDM nodes.