vCenter license assignment fails with "License could not be assigned to the selected vCenter system" error caused by certificate issue

Products

• VCF Operations

Issue/Introduction

When attempting to assign a primary license via the License Management page in VCF Operations, the task fails with the error: "License could not be assigned to the selected vCenter systems". 

Error message "unable to find valid certification path to requested target" was reported in collector.log

YYYY-MM-DDTHH:mm:ss.642Z ERROR collector #### [ops@#### threadId="#######" threadName="vcf-licensing-collection-#####"] [(##) com.vmware.adapter.management.components.A.A.A] - Unable to create vc client for VC <VC IP or FQDN> com.integrien.alive.common.exception.VcException: Connecting to VC at https://<VC IP or FQDN>/sdk failed. ::: Caused by: com.vmware.vim.vmomi.client.exception.SslException: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Cause

This issue may be caused by an SSL Trust Mismatch within the target vCenter's Lookup Service.

Resolution

Using the lsdoctor tool with --trustfix option to fix the SSL trust mismatch.

Note: Take an offline snapshot of the vCenter Appliance before using lsdoctor tool.


Refer the following KB for more details about using lsdoctor.py tool: Using the 'lsdoctor' Tool

Additional Information

証明書の問題で vCenter へのライセンス割り当てが「選択したvCenterServerシステムにライセンスを割り当てることができませんでした」エラーで失敗する