vCenter Server 6.x versions prior to 6.7 Update 3 does not support changing the PNID after deployment.
[YYYY-MM-DDTHH:MM:SS] vsphere.local 47c25a86-20c3-49c6-9ec0-c5579b36c83d ERROR] [IdentityManager] Failed to authenticate principal [Administrator@domain] for tenant [vsphere.local]
com.vmware.identity.idm.IDMLoginException: Access denied
[YYYY-MM-DDTHH:MM:SS] warning vpxd[03740] [Originator@6876 sub=Default] Failed to connect socket; <io_obj p:0x000000000c4d83d8, h:3392, <TCP '0.0.0.0:0'>, <TCP '</font>IP_Address'>>, e: system:10060(A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond)
[YYYY-MM-DDTHH:MM:SS] error vpxd[03740] [Originator@6876 sub=HttpConnectionPool-000011] [ConnectComplete] Connect failed to <cs p:0000000008d2dda0, TCP:</font>vcenter.example.com:443>; cnx: (null), error: class Vmacore::SystemException(A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond)
If the hostname and DNS configuration reverts to original values after rebooting the VCSA machine, refer to: VMware vCenter Server Appliance hostname and DNS configuration revert after a reboot and How to update content libraries after changing vCenter Server PNID
For versions prior to vCenter 6.7 Update 3, the PNID is locked in and cannot be changed after deployment. Changing the PNID is not supported in versions prior to 6.7 Update 3.
Options to resolve the above issue:
To change the IP address of vCenter Server that was deployed with a FQDN PNID:
To verify the current PNID, run the following command:
/usr/lib/vmware-vmafd/bin/vmafd-cli get-pnid --server-name localhost
Note: On rare occasions should the above UI workflows fail to completely set the PNID, manually set and complete the PNID change./usr/lib/vmware-vmafd/bin/vmafd-cli set-pnid --server-name localhost --pnid <PNID-NAME>
Warning: Attempting to set the PNID via the command line only without going through the proper workflow, as mentioned in the Resolution section, may break vCenter.