VMware Cloud Community
rchaubey
Enthusiast
Enthusiast

Adding vCenter instance to vRO8.1 looks unhealthy

Hello Expert,

Adding vCenter instance to vRO 8.1 completes but the inventory has below messages. Please help to resolve this issue.

https://vcenter-infra.infra.net/sdk (unusable: java.lang.RuntimeException: Do not know how to handle token of type class com.vmware.o11n.security.csp.CspExpiringAuthenticationTokenAdapter)

pastedImage_0.png

Storage Policies (unusable: PBM error: java.lang.RuntimeException: java.lang.RuntimeException: Do not know how to handle token of type class com.vmware.o11n.security.csp.CspExpiringAuthenticationTokenAdapter)

Storage Policy Components (unusable: PBM error: java.lang.RuntimeException: java.lang.RuntimeException: Do not know how to handle token of type class com.vmware.o11n.security.csp.CspExpiringAuthenticationTokenAdapter)

Reply
0 Kudos
1 Reply
iiliev
VMware Employee
VMware Employee

Hi,

What the error says is that vRO is trying to communicate with vCenter server instance passing CSP tokens for authentication. Unfortunately, vCenter cannot work with this type of token, hence the calls will fail.

vRO server can be configured with two distinct types of authentication - vSphere (SAML tokens) or vRA (CSP tokens). When you execute the workflow 'Add vCenter server instance, there is an option to choose to use either 'session-per-user' or 'shared session' mode. In the former case, vRO will use authentication tokens that match the vRO server authentication configuration, and if the vRO is configured with vRA authentication (CSP tokens), it will not be able to communicate with vCenter.

The fix is easy - in deployments where vRO is configured with vRA authentication, you'll need to add the vCenter server instance using 'shared session' mode.