About reconstruction and reconnection when external PSC is broken

[networlddsg]

Hello.

There is a configuration where vCenter is connected to external PSC.

※ vCenter and PSC are one

When the external PSC is broken, a new PSC is constructed

Is it possible to connect an existing vCenter with a new PSC?

I reconnected and the following error occurred

root@vc [ ~ ]# /bin/cmsso-util repoint --repoint-psc psc2.vm.local

Validating Provided Configuration ...

Falied to open connection https://psc2.vm.local:443/websso/ Error: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)>

Please check the configuration and retry

Is it better to delete the node and clean up the old vmdir data with "msso-util unregister" command?

About reconstruction and reconnection when external PSC is broken

[daphnissov · Accepted solution]

You cannot repoint a vCenter to a PSC which is not in the same SSO domain as the one which broke. Even if the SSO domain name is "vsphere.local", if you had not prior configured replication between the two PSCs (thus, in the same SSO domain), you cannot repoint to that other PSC.

[networlddsg]

Thank you!