The NSX Intelligence user interface is no longer visible when it was previously available.

Problem

If the NSX Manager Unified Appliance node or cluster certificate has expired, you cannot see the NSX Intelligence user interface.

Cause

If the certificate used by the NSX Manager Unified Appliance node or cluster is invalid or expired, the license enforcement feature disallows access to the NSX Intelligence user interface.

Solution

  1. For an expired NSX Manager Unified Appliance cluster certificate, use the following steps.
    1. Using an HTTP client, such as Postman or cURL, use the following REST API call to change the NSX Manager Unified Appliance cluster certificate, where <cert-id> is the new cluster certificate. 
      /api/v1/cluster/api-certificate?action=set_cluster_certificate&certificate_id=<cert-id>
    2. Obtain the PEM data from the newly applied NSX Manager Unified Appliance cluster certificate.
    3. Log in to your NSX Intelligence appliance using the CLI admin credentials and use the following command to update the manager-cluster certificate information, where <pem> is the PEM data you obtained in the previous step. 
      set intelligence manager-cluster cert-b64-encoded-pem <pem>
  2. For an expired NSX Manager Unified Appliance node certificate, use the following steps.
    1. Using an HTTP client, use the following REST API call to change the NSX Manager Unified Appliance node certificate, where <cert-id> is the new cluster certificate. 
      /api/v1/node/services/http?action=apply_certificate&certificate_id=<cert-id>
    2. Obtain the IP address of the NSX Manager Unified Appliance node and the PEM data from the newly applied NSX Manager Unified Appliance node certificate.
    3. Log in to your NSX Intelligence appliance using the CLI admin credentials and use the following command to obtain the certificate UUID for the manager-node. 
      get intelligence certificates | json
    4. Copy the UUID value, which is used by the NSX_UA_NODE property in the CLI output in the previous step.
    5. From the same NSX Intelligence appliance CLI session, use the following command to update the manager-node certificate information, where <nsx-mgr-ip-address>, <uuid>, and <pem> are values you obtained in the previous two steps. 
      set intelligence manager-node <nsx-mgr-ip-address> cert-id <uuid>
cert-b64-encoded-pem <pem>