IT48220: VCENTER PLUGIN GVM5110E ERRORS UPON CONNECTION ATTEMPT TO THE VMWARE VCENTER SERVER.

APAR status

• Closed as requirement.

Error description

• Data protection for VMware vCenter plugin stops working and can
  no longer connect to the vCenter.
  
  The following error is seen when clicking on any vCenter object
  --> Configure --> IBM Storage Protect -->
  
  GVM5110E: Data protection settings are not available because an
  error occurred connecting to the Platform Services Controller.
  Ensure that the Platform Services Controller listed is running
  as expected.
  
  The following scheduler and mount proxy information retrievals
  are failing due to the VMware Platform
  
  Services Controller (PSC) in vSphere not validating the custom
  CA certificates during API calls.
  
  messages.log
  
  [Timestamp] 0000aeb4 SystemOut  O Request
  complete->getSchedules
  .. Received request->getSchedules
  .. [1069] RestBase.handleRequest() START
  .. [1070] validationConnection() START
  .. [1070] validationConnection() END, 0.000 seconds
  .. ** TsmServerManager.getServer() - session is null,
     will attempt to use saved TSM server **
  .. O Exception getting vCloud Connection: https://xxxxx:443/api
    invocation failed with
    "javax.net.ssl.SSLHandshakeException:
     PKIX path building failed: sun.security.provider.certpath.
     SunCertPathBuilderException:
     unable to find valid certification path to requested
     target"
  .. com.tivoli.tsm.unifrecov.exception.PscConnectException
  ..   at ...
  Retrieving Mount Proxies Requests:
  .. O Received request->getMountProxyList
  .. O [812] RestBase.handleRequest() START
  .. O [813] validationConnection() START
  .. O [813] validationConnection() END, 0.000 seconds
  .. O ** TsmServerManager.getServer() - session is null,
       will attempt to use saved TSM server **
  .. O getVeConfig() Enter.
  .. O Entering multiserver inquire config wait
  .. O VMCLI CMD START [135]: vmcli -f inquire_config
    -n TSMVE_VMCLI -s xxxxx -p 1500 -v xxxxx
  .. O Exception getting vCloud Connection: https://xxxxx:443/api
    invocation failed with
    "javax.net.ssl.SSLHandshakeException:
     PKIX path building failed:
     sun.security.provider.certpath.SunCertPathBuilderException
     : unable to find valid certification path to requested
       target"
  .. R com.tivoli.tsm.unifrecov.exception.PscConnectException
  .. R   at ..
  
  Since the CA certificates are rejected, the PSC connection fail.
  
  
  
  IBM Storage Protect Versions Affected:
  
  IBM Storage Protect for Virtual Environments - Data Protection
  for VMware version 8.1.23 and later on all supported platforms.
  
  Additional Keywords: SP, TSM , SP4VE, PSC, vCenter, plugin,
  TS018513008
  

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

• After installation of Data protection for VMware post version
  8.1.23 customer is not able to visualise schedule in the plugin
  loaded in vcentre due to java 21 update went in 8.1.23 which
  leads to rejects of the truststore of vcentre leading to
  PscConnectException
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels