NSX SSO sign in failure after replacing VMware Identity Broker (VIDB) Certificate

Products

• VMware NSX

Issue/Introduction

Following a VIDB certificate replacement performed via the VMware Cloud Foundation (VCF) Operations "fleet replace certificate" API, the NSX Manager may experience SSO login failures. Users are unable to authenticate to the NSX Manager interface, despite the certificate rotation being reported as successful by VCF Operations.

Environment

VCF 9.x

Resolution

This is a condition that may occur in a VMware NSX environment.

 

To restore SSO functionality, the NSX Manager services must be restarted to force a refresh of the certificate cache.

Take a backup of the NSX Managers and perform a rolling reboot of the NSX Manager nodes

Verify the fix by attempting to log in to the NSX Manager UI via SSO.