VxRail: LCM Fails on Certificate Verify Step Due to Broken Docker Network

Summary: In VxRail Lifecycle Management (LCM) upgrade, reports missing TLS CA bundle causing verification failure and vxm‑agent start error, due to broken Docker network blocking deployment.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

From lcm-web.log:

2022-02-09 22:15:34,185 ERROR [LCM] [upgrade-task-0] c.v.l.c.c.f.UpdateNodeVersionTask [UpdateNodeVersionTask.java:62] Failed to update host version via host-do
com.dellemc.vxrail.lcm.data.provider.out.DataWriteException: Host-DO task 7e9e37b3-493c-450b-93a9-2deb104219c4 not completed with error message: Could not find a suitable TLS CA certificate bundle, invalid path: /certificate/lin
2022-02-09 22:15:48,287 ERROR [LCM] [upgrade-task-0] c.v.l.c.c.f.EnableM2mTask [EnableM2mTask.java:74] Failed to enable m2m  via host-do
com.dellemc.vxrail.lcm.data.provider.out.DataWriteException: Host-DO task c3ddd568-d1c5-4e35-9ca1-d8ca1f4b2036 not completed with error message: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)
2022-02-09 22:15:48,290 ERROR [LCM] [lcm-core-0] c.v.l.t.SimpleUpgradeTaskExecutor [SimpleUpgradeTaskExecutor.java:82] Failed to execute task EnableM2mTask.
java.util.concurrent.ExecutionException: com.vce.lcm.exception.LCMException: Failed to enable  m2m via host-do


From microservice_rpm.log:

ERROR: for vxm-agent  Cannot start service vxm-agent: network lusrjwsox9mrkknhc43b0tce5 not found
Encountered errors while bringing up the project.

Cause

When LCM is upgrading the micro services issues on the docker network cause vxm-agent deployment to fail.

Due to vxm-agent failing to deploy, the function of generating the vCenter and ESXi Certificate Revocation List (CRL) will not be available. The original CRL files were already deleted during previous LCM steps, which resulted in the LCM Could not find a suitable TLS CA certificate error.

Resolution

  1. SSH to the VxRail manager with the mystic user and then elevate to root.
  2. Go to data/store2/lcm/unpack/bundles/VXRAIL_Manager-<LCM_target_version>-updaterepo.zip/package-pool
  3. Find vxrail-microservices-xxxxxx.noarch.rpm
  4. Install the target version micro services again by command:
    rpm -U vxrail-microservices-xxxxxx.noarch.rpm --force
  5. Retry the upgrade.

Affected Products

VxRail, VxRail Appliance Series, VxRail Software
Article Properties
Article Number: 000196924
Article Type: Solution
Last Modified: 24 Dec 2025
Version:  3
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.