VCF deployment fails at Configure vSphere cluster with error "Failed to get SDDC Manager public api access token.Ensure that vCenter and SDDC Manager services are running."

Products

• VMware SDDC Manager / VCF Installer

Issue/Introduction

The following error is observed in /var/log/vmware/vcf/domainmanager/domainmanager.log in SDDC Manager/Installer.

DEBUG vcf_dm 1711 [sddcm@4413 traceId="6aca1aa51d4d9cd8a951aaf7c02b61ab" spanId="a226" threadId="dm-exec-727" class="c.v.v.s.h.VcfRestTemplateHttpClient" method="createRestTemplate" line="388"] HTTP request 'connect' timeout set to 180000 milliseconds
DEBUG vcf_dm 1711 [sddcm@4413 traceId="6aca1aa51d4d9cd8a951aaf7c02b61ab" spanId="a226" threadId="dm-exec-727" class="c.v.v.s.h.VcfRestTemplateHttpClient" method="createRestTemplate" line="389"] HTTP request 'read' timeout set to 180000 milliseconds
ERROR vcf_dm 1711 [sddcm@4413 traceId="6aca1aa51d4d9cd8a951aaf7c02b61ab" spanId="a226" threadId="dm-exec-727" class="c.v.e.s.s.h.SddcManagerTokenUtil" method="getToken" line="89"] Failed to get SDDC Manager Access token.
ERROR vcf_dm 1711 [sddcm@4413 traceId="6aca1aa51d4d9cd8a951aaf7c02b61ab" spanId="a226" threadId="dm-exec-727" class="c.v.e.s.c.c.e.l.LocalizableRuntimeExceptionLogger" method="log" line="38"] [#####] FAILED_TO_GET_SDDC_MANAGER_TOKEN Failed to get SDDC Manager public api access token. Ensure that vCenter and all SDDC Manager services are running
com.vmware.evo.sddc.common.core.error.InvalidStateException: Failed to get SDDC Manager public api access token. Ensure that vCenter and all SDDC Manager services are running
        at com.vmware.evo.sddc.sddcmanager.helper.SddcManagerTokenUtil.getToken(SddcManagerTokenUtil.java:90)
        at com.vmware.evo.sddc.sddcmanager.helper.SddcManagerTokenUtil.getToken(SddcManagerTokenUtil.java:49)
        at com.vmware.evo.sddc.sddcmanager.RetrySddcTaskAction.execute(RetrySddcTaskAction.java:53)
        at com.vmware.evo.sddc.sddcmanager.RetrySddcTaskAction.execute(RetrySddcTaskAction.java:33)
  com.vmware.evo.sddc.orchestrator.core.ProcessingTaskSubscriber.invokeMethod(ProcessingTaskSubscriber.java:401)
        at com.vmware.evo.sddc.orchestrator.core.ProcessingTaskSubscriber.processTask(ProcessingTaskSubscriber.java:515)
        at com.vmware.evo.sddc.orchestrator.core.ProcessingTaskSubscriber.accept(ProcessingTaskSubscriber.java:128)
        at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)
Caused by: org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://sddcmanagerfqdn.example.com/v1/tokens": Certificate for <sddcmanagerfqdn.example.com> doesn't match any of the subject alternative names: [##.##.#.##]

Environment

VCF 9.1

Cause

• SDDC Manager certificate's Subject Alternative Name (SAN) attribute is missing the Fully Qualified Domain Name (FQDN) of the SDDC Manager appliance.

Resolution

• To resolve this issue, you must regenerate the SDDC Manager certificate and ensure that the Subject Alternative Name (SAN) attribute includes the FQDN, the IP address of the SDDC Manager appliance.
• Re-generate the SDDC Manager certificate using the script or manual method mentioned in the KB :  SDDC Manager UI inaccessible or Regenerate button greyed out due to expired certificate in VMware Cloud Foundation