Symptoms:
Note:
For the UI
For the API
For SSL related errors, below are the options to resolve those issues:
Note:
Option 1: Individually
Using the UI, edit each individual connection and click Save.
The UI will allow you to interactively review and trust individual certificates presented by each respective server (Trust-on-first-use principle).
In 10.4, post trusting the vCenter Server certificate, another prompt will appear for the VMCA certificate which is required for Cloud Director to trust the connections to ESXi Hosts.
Option 2: Automated
Run this cell-management-tool command to retrieve and trust certificates from all configured vCenter Server and NSX servers as well as the VMCA certificate (10.4):
/opt/vmware/vcloud-director/bin/cell-management-tool trust-infra-certs --vsphere --unattended
This command helps by providing additional options on how to review the certificates that will be trusted before trusting them.
Option 3: Manual
Should the above options not be possible, the VMCA certificate can be downloaded manually and uploaded to the Cloud Director Truststore.
For SAN related errors, below are the options to resolve the issue:
Option 1: For 10.3
The Provider must replace any certificate for VC, NSX-V or NSX-T managers to have valid SANs that match the hostname.