The collector is unable to communicate with the cloud. The password had to be reset and afterwards was rebooted. Console reporting "Currently the Collector cannot reach Skyline Cloud. This might be due to the lack of network connectivity caused by changed networking infrastructure (proxy settings, firewall rules, etc.). Please make sure your configuration reflects networking requirements in your environment." ran commands 'systemctl status systemd-networkd' and 'systemctl status systemd-networkd.socket', both reporting active and running.
Logs reporting the following:
2022-03-07 19:05:40,058 ERROR [qtp1415469015-19] c.v.s.c.a.RegistrationProviderImpl [RegistrationProviderImpl.java:121] [] While testing connectivity using provided connectivity settings [com.vmware.skyline.configuration.local.NetworkConfig@11b789], got response code 500 and response is Couldn't perform test registration due to: UploadException: Failed to upload due to exception >>> HttpRequestException: Certificate is not trusted >>> CertificateException: Certificate is not trusted. This connection cannot continue >>> ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target >>> SunCertPathBuilderException: unable to find valid certification path to requested target
... 41 common frames omitted
at java.base/java.security.cert.CertPathBuilder.build(Unknown Source)
at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)
at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source)
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
... 33 common frames omitted
at com.vmware.skyline.http.client.ConnectionSSLContextBuilder$TrustManagerDelegate.checkServerTrusted(ConnectionSSLContextBuilder.java:103)
The Collector is using default cert
The Collector is using default certificate
As a side note, when attempting to update the creds used with two vcenter servers, receive message "The certificate with thumbprint [DB:11:93:FF:7E:B8:C0:A4:32:D4:46:67:B9:73:76:67:B9:60:41:90], provided by your vCenter Server is not valid due to error: "Certificate is not trusted. This connection cannot continue"
Press "CONTINUE" if you would like to proceed updating the vCenter Server with invalid certificate."
Tried curl -v https://vcsa.vmware.com, the connection is made, however there appears to be an issue with the SSL certificate and unable to get local issuer certificate.
Any thoughts on how to get our collector working again with Skyline Cloud?
RE: T20220105.0551
Hello @Auxiliary-Team
Welcome to Skyline Communities!
We request you to kindly raise a Support Request with VMware.
Thanks and Regards,
Harsh Yadav
Issue was related to SSL inspection on the firewall. Once *.vmware.com was excluded from SSL inspection, Skyline was able to reach VMware cloud to check in.
Hello @Auxiliary-Team
Welcome to Skyline Communities!
We request you to kindly raise a Support Request with VMware.
Thanks and Regards,
Harsh Yadav
Issue was related to SSL inspection on the firewall. Once *.vmware.com was excluded from SSL inspection, Skyline was able to reach VMware cloud to check in.