VxRail: Node Add Failing with Status "Starting platform service…"

Summary: Node add is failing with error in UI "Starting platform service…"

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Node add is failing with error: "Starting platform service…"
 

Screenshot of node add error

/var/log/microservice/{dayone/short.term/long.term} logs you find the following signature: 
2021-10-26-12:24:33 microservice.do-host "[2021-10-26 12:24:33,318: ERROR/MainProcess] query is_ps_ready error"
2021-10-26-12:24:33 microservice.do-host "Traceback (most recent call last):"
2021-10-26-12:24:33 microservice.do-host "  File ""/home/app/do_host_app/graphql/runtime.py"", line 173, in resolve_is_ps_ready"
2021-10-26-12:24:33 microservice.do-host "    agent_info = await loader.load(('esxcli.vxrail.agent.get', host, auth))"
2021-10-26-12:24:33 microservice.do-host "  File ""/home/app/do_host_app/connector/esxcli/esxcli_dataloader.py"", line 63, in __run_aysnc"
2021-10-26-12:24:33 microservice.do-host "    with self.__get_esxcli_client(host, auth) as client:"
2021-10-26-12:24:33 microservice.do-host "  File ""/usr/local/venv/lib/python3.6/site-packages/do_common/esxcli/esxcli_client2.py"", line 34, in __enter__"
2021-10-26-12:24:33 microservice.do-host "    si = client.get_service_instance()"
..................
..................
..................
2021-10-26-12:24:33 microservice.do-host "  File ""/usr/customized/lib/python3.6/http/client.py"", line 1448, in connect"
2021-10-26-12:24:33 microservice.do-host "    server_hostname=server_hostname)"
2021-10-26-12:24:33 microservice.do-host "  File ""/usr/local/venv/lib/python3.6/site-packages/gevent/_ssl3.py"", line 120, in wrap_socket"
2021-10-26-12:24:33 microservice.do-host "    _session=session)"
2021-10-26-12:24:33 microservice.do-host "  File ""/usr/local/venv/lib/python3.6/site-packages/gevent/_ssl3.py"", line 312, in __init__"
2021-10-26-12:24:33 microservice.do-host "    raise x"
2021-10-26-12:24:33 microservice.do-host "  File ""/usr/local/venv/lib/python3.6/site-packages/gevent/_ssl3.py"", line 308, in __init__"
2021-10-26-12:24:33 microservice.do-host "    self.do_handshake()"
2021-10-26-12:24:33 microservice.do-host "  File ""/usr/local/venv/lib/python3.6/site-packages/gevent/_ssl3.py"", line 667, in do_handshake"
2021-10-26-12:24:33 microservice.do-host "    self._sslobj.do_handshake()"
2021-10-26-12:24:33 microservice.do-host "  File ""/usr/customized/lib/python3.6/ssl.py"", line 689, in do_handshake"
2021-10-26-12:24:33 microservice.do-host "    self._sslobj.do_handshake()"
2021-10-26-12:24:33 microservice.do-host "ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)"
2021-10-26-12:24:33 microservice.do-host "[2021-10-26 12:24:33,319: INFO/MainProcess] idrac not ready."
 

Cause

This can occur when the VMware Certificate Authority (VMCA) is not used to manage the ESXi certificates. In which case, ESXi is using thumbprint host certificates, instead of default VMCA certificates.
vCenter and VxRail Manager use the customer certificates, but the node uses the self-signed certificates.

Resolution

Starting from VxRail version 7.0.240, if the ESXi certificate is managed by 'custom' mode in vCenter, must manually download vCenter certificates to hosts and VxRail Manager. This is required to establish a trusted connection, if 'certificate_verification_enable' is 'true'.

Using the VMware Certificate Authority (VMCA), to manage certificates, would resolve this issue.

Alternatively, to work around this issue, check and disable certificate verification:
Check the certificate verification:

curl -X GET --unix-socket /var/lib/vxrail/nginx/socket/nginx.sock http://127.0.0.1/rest/vxm/internal/configservice/v1/configuration/keys/certificate_verification_enable
Disable certificate verification:

curl --unix-socket /var/lib/vxrail/nginx/socket/nginx.sock -X PUT -H "Content-Type: application/json" http://127.0.0.1/rest/vxm/internal/configservice/v1/configuration/keys/certificate_verification_enable -d '{"value": "false"}'
 

Affected Products

VxRail, VxRail Appliance Series, VxRail G Series Nodes, VxRail D Series Nodes, VxRail D560, VxRail D560F, VxRail E Series Nodes, VxRail E460, VxRail E560, VxRail E560F, VxRail E560N, VxRail E660, VxRail E660F, VxRail E660N, VxRail E665, VxRail E665F , VxRail E665N, VxRail G560, VxRail G560F, VxRail P Series Nodes, VxRail P470, VxRail P570, VxRail P570F, VxRail P580N, VxRail P670F, VxRail P670N, VxRail P675F, VxRail P675N, VxRail S Series Nodes, VxRail S470, VxRail S570, VxRail S670, VxRail Software, VxRail V Series Nodes, VxRail V470, VxRail V570, VxRail V570F, VXRAIL V670F, VxRail VD-4510C, VxRail VD-4520C, VxRail VD Series Nodes, VxRail VE-660, VxRail VE-6615, VxRail VE-670, VxRail VP-760, VxRail VP-7625, VxRail VP-770, VxRail VS-760 ...
Article Properties
Article Number: 000194178
Article Type: Solution
Last Modified: 02 Apr 2026
Version:  4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.