Symptoms
Compute manager is configured in NSX-T with trust, service account and full access right.Converting the cluster from non-vLCM to vLCM fails with the error:
Error occurred while checking whether NSX-T Data Center is enabled on this cluster.
In the NSX-T reverse-proxy logs, errors similar to the following are present:
reverse-proxy.log-2021-07-09T06:21:07.629Z ERROR https-jsse-nio-10.65.117.148-443-exec-99 ExceptionUtils 5991 - [nsx@6876 comp="nsx-manager" errorCode="MP98" level="ERROR" subcomp="http"] Uncaught exception reverse-proxy.log:org.springframework.security.oauth2.provider.token.store.jwk.JwkException: Duplicate JWK found in Set: 8274AB53A1D39A44E92281846F466D7858F9D2AE (kid)
Cause
Two or more entries are present for the same KID (Key ID) in vCenter's JWK (JSON Web Key) set.
Resolution
This issue is resolved in NSX-T Data Center 3.2.
Workaround
Apply resolution section in the KB
https://kb.vmware.com/s/article/76719
Restart the reverse-proxy on each manager one by one, log in as root to carry out these steps:
systemctl stop proxy
Check that it is stopped with:
systemctl status proxy
Then start:
systemctl start proxy
