VMware Support Community
Auxiliary-Team
Contributor
Contributor
Jump to solution

Skyline Appliance 3.0 Inactive (T20220105.0551)

The collector is unable to communicate with the cloud. The password had to be reset and afterwards was rebooted. Console reporting "Currently the Collector cannot reach Skyline Cloud. This might be due to the lack of network connectivity caused by changed networking infrastructure (proxy settings, firewall rules, etc.). Please make sure your configuration reflects networking requirements in your environment." ran commands 'systemctl status systemd-networkd' and 'systemctl status systemd-networkd.socket', both reporting active and running.

Logs reporting the following:

2022-03-07 19:05:40,058 ERROR [qtp1415469015-19] c.v.s.c.a.RegistrationProviderImpl [RegistrationProviderImpl.java:121] [] While testing connectivity using provided connectivity settings [com.vmware.skyline.configuration.local.NetworkConfig@11b789], got response code 500 and response is Couldn't perform test registration due to: UploadException: Failed to upload due to exception >>> HttpRequestException: Certificate is not trusted >>> CertificateException: Certificate is not trusted. This connection cannot continue >>> ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target >>> SunCertPathBuilderException: unable to find valid certification path to requested target

... 41 common frames omitted

at java.base/java.security.cert.CertPathBuilder.build(Unknown Source)

at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)

at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source)

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

... 33 common frames omitted

at com.vmware.skyline.http.client.ConnectionSSLContextBuilder$TrustManagerDelegate.checkServerTrusted(ConnectionSSLContextBuilder.java:103)

The Collector is using default cert

The Collector is using default certificate

As a side note, when attempting to update the creds used with two vcenter servers, receive message "The certificate with thumbprint [DB:11:93:FF:7E:B8:C0:A4:32:D4:46:67:B9:73:76:67:B9:60:41:90], provided by your vCenter Server is not valid due to error: "Certificate is not trusted. This connection cannot continue"
Press "CONTINUE" if you would like to proceed updating the vCenter Server with invalid certificate."

Tried curl -v https://vcsa.vmware.com, the connection is made, however there appears to be an issue with the SSL certificate and unable to get local issuer certificate.

Any thoughts on how to get our collector working again with Skyline Cloud?

Capture.PNG

RE: T20220105.0551

Labels (3)
0 Kudos
2 Solutions

Accepted Solutions
yharsh
VMware Employee
VMware Employee
Jump to solution

Hello @Auxiliary-Team 

 

Welcome to Skyline Communities!

 

We request you to kindly raise a Support Request with VMware. 

 

Thanks and Regards,

Harsh Yadav

View solution in original post

0 Kudos
Auxiliary-Team
Contributor
Contributor
Jump to solution

Issue was related to SSL inspection on the firewall. Once *.vmware.com was excluded from SSL inspection, Skyline was able to reach VMware cloud to check in.

View solution in original post

0 Kudos
2 Replies
yharsh
VMware Employee
VMware Employee
Jump to solution

Hello @Auxiliary-Team 

 

Welcome to Skyline Communities!

 

We request you to kindly raise a Support Request with VMware. 

 

Thanks and Regards,

Harsh Yadav

0 Kudos
Auxiliary-Team
Contributor
Contributor
Jump to solution

Issue was related to SSL inspection on the firewall. Once *.vmware.com was excluded from SSL inspection, Skyline was able to reach VMware cloud to check in.

0 Kudos