Adding VM to CDP Protection Plan is failing with "Failed to retrieve or parse the version of Veritas IO filter"

Problem

When trying to add a VM to a Continuous Data Protection (CDP) protection plan, the following error is seen on the WebUI "Failed to retrieve or parse the version of Veritas IO filter".

Error Message

Error in WebUI:
Failed to retrieve or parse the version of Veritas IO filter

nbwebservice:
03/11/2022 13:34:16.205 [Debug] NB 51216 nbwebapi 495 PID:82286 TID:236 File ID:495 [No context] 1 [com.netbackup.config.cct.util.CctHostValidatorHelper] nbcctd service error VM instance UUID:<VM_UUID> VM server:<vCenter_server>.Failed to retrieve or parse the version of Veritas IO filter.
...
03/11/2022 13:34:16.307 [Debug] NB 51216 nbwebapi 495 PID:82286 TID:255 File ID:495 [No context] 1 [com.netbackup.intraapi.RestClient] Intra API call for method POST on URL : /config/policies returned error. Exception :org.springframework.web.client.HttpServerErrorException$InternalServerError: 500 : [{"errorCode":4780,"errorMessage":"Failed to retrieve or parse the version of Veritas IO filter.","attributeEr
rors":{},"fileUploadErrors":[],"errorDetails":[]}]

bpVMutil:
13:34:16.189 [158351.158351] <8> CallbackChecker::cbc_ssl_callback: Failed to verify certificate, returning
13:34:16.189 [158351.158351] <16> CallbackChecker::cbc_ssl_callback: Failed to verify cert in callback
13:34:16.189 [158351.158351] <4> VAIOHttpClient::SendHttpRequest: Curl Code : 60
13:34:16.189 [158351.158351] <16> VAIOHttpClient::SendHttpRequest: perform the URL https://<vCenter_server>:5989 failed, <60>: SSL peer certificate or SSH remote key was not OK. Error_no = 8604
13:34:16.189 [158351.158351] <2> VAIOHttpClient::SendHttpRequest: Response Header: (null)
13:34:16.189 [158351.158351] <2> VAIOHttpClient::SendHttpRequest: Response Body: (null)
13:34:16.189 [158351.158351] <2> VAIOHttpClient::SendHttpRequest: Returning rc: 8604
13:34:16.189 [158351.158351] <2> ThreadSafeFileLock::release: Releasing file lock on /usr/openv/tmp/<vCenter_server>.lock. lockType = 1.

Cause

The CDP Gateway was not configured to communicate with the vSphere environment.  In most cases it is as simple as setting up VIRTUALIZATION_HOSTS_SECURE_CONNECT_ENABLED.

Solution

Verify if the vCenter server requires validation of virtualization server certificates using its root or intermediate certificate authority (CA) certificates.

If no, then configure VIRTUALIZATION_HOSTS_SECURE_CONNECT_ENABLED=NO

If Yes, review the VMware Administrator's Guide section on "Validating VMware virtualization server certificates in NetBackup".

# nbsetconfig
VIRTUALIZATION_HOSTS_SECURE_CONNECT_ENABLED=NO

To escape on UNIX, press:
<ctl-D>

To escape on Windows, press:
<ctl-Z>