Important Update: Cohesity Products Knowledge Base Articles
All Cohesity Knowledge Base Articles are now managed via the Cohesity Support Portal: https://support.cohesity.com/s/searchunify. The Knowledge Base articles available here will not reflect the latest information or may no longer be accessible.
Problem
Adding Nutanix Cluster fails with "Credential validation failed. Provide correct AHV credentials, ensure that the backup host has Linux/Windows OS, verify that the backup host can access the AHV cluster, or the external CA is configured correctly."
Error Message
WebUI Error:"Credential validation failed. Provide correct AHV credentials, ensure that the backup host has Linux/Windows OS, verify that the backup host can access the AHV cluster, or the external CA is configured correctly."
bpVMutil error:14:22:51.701 [8320.8320] <2> Nutanix: CurlClient: CurlClient::processCompletedEasyHandle: STS error: 0, cURL error: 0, multi cURL error: 0, HTTP return value: 401
14:22:51.701 [8320.8320] <16> Nutanix: CurlClient: CurlClient::checkCompletedHandles : function processCompletedEasyHandle failed with error 2060029
14:22:51.701 [8320.8320] <2> Nutanix: : ntnxahv_RestRequest::ntxpgnGetClusterDetails Cluster details output: <!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style><script language="JavaScript" src="js/csrf.js?i=1005" type="text/javascript"></script> </head><body><h1>HTTP Status 401 – Unauthorized</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> Bad credentials</p><p><b>Description</b> The request has not been applied because it lacks valid authentication credentials for the target resource.</p><hr class="line" /><script type="text/javascript"> <!-- csrfInsert("csrfpId", "VlLj4kB4TxulmJcw__NcHknf_IPCmUoZNXZUMlcyZZyI9rXvXVKYWDsOiEmJGXQiurRYWhdbzAk="); //--> </script> </body></html>
Cause
They are several reasons this issue can occur, that can be seen below.
1. Invalid username.
2. Invalid domain name (if the account is local to Nutanix cluster then a domain value is not needed)
3. Invalid Password
4. A role was not mapped to the prism user.
5. Verify the account exist in Prism Element. If you are using Prism Central, you must go to the cluster and access the Prism Element UI to add a user.
Solution
Verify the user, domain, and password used.
A user maybe able to access the Prism WebUI, but may not have access to RestAPIs.
Check the prism_gateway.log from the Nutanix side for the real error:
https://portal.nutanix.com/page/documents/details?targetId=Prism-Central-Guide-Prism-v6_0:tro-pcvm-logs-r.html