Hi,
I have a new deployment of NSX 6.3.5. I cannot deploy any NSX controllers the OVA deployment shows the following error..
Operation failed on VC. For more details, refer to the rootCauseString or the VC logs
NSX Manager controller log shows the following...
Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Server Certificate's thumbprint:CC:62:42:E1:9A:E0:40:E6:0A:67:C1:E9:12:FF:8C:A2:47:1D:B0:CFdoesn't match any of the Registered thumbprint Set:[06:26:65:80:AA:65:A7:83:C4:0C:C0:22:CB:45:1E:07:CD:02:BC:41]
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1959)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1514)
at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026)
at sun.security.ssl.Handshaker.process_record(Handshaker.java:961)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1316)
at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1291)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:250)
at com.vmware.vshield.vsm.inventory.vcoperations.impl.ResourcePoolVcOperationsImpl.pushFile_aroundBody0(ResourcePoolVcOperationsImpl.java:152)
... 20 more
Important things to note...
- vCenter, PSC and all Machine SSL Certificates have been changed
- NSX Manager SSL Certificate has been changed.
- All SSL Certificates are signed by a Intermediate Windows 2012 R2 CA. All are trusted.
- SSO NTP source identical to NSX Manager time source. Both show accurate time.
- Those SSL Cert thumbprints in the error are not the thumbprints of either my vCenter or NSX manager.
Spent nearly a day on this and its driving me crazy. Anyone seen this?
Cheers