If you’re a system administrator or IT professional working with VMware Aria Suite Lifecycle Manager, you might have hit a roadblock when trying to import a VMware Aria Operations for Networks instance. The error in question? LCMVRNICONFIG90115. Here’s what it looks like:
Error Code: LCMVRNICONFIG90115
Invalid credentials provided for Console user. Please retry with correct console password.
Invalid credentials provided for Console user. Please retry with correct console password.On the surface, this error screams “wrong password!” But even if you’re certain the credentials are spot-on, the issue might persist. Spoiler alert: the fix lies in enabling FIPS mode on the Aria Suite Lifecycle appliance. In this blog post, I’ll break down why this error happens, how FIPS mode resolves it, and provide a step-by-step guide to get you back on track.
What’s Behind Error LCMVRNICONFIG90115?
When importing a VMware Aria Operations for Networks instance into VMware Aria Suite Lifecycle Manager, the process relies on an SSH connection to authenticate using the console user account (typically “consoleuser”). The error suggests that the credentials for this user are invalid, but the real culprit might not be the password itself.
Recent updates to VMware Aria Suite Lifecycle—part of the VMware by Broadcom portfolio—have tightened security by hardening SSH settings. These updates enforce stronger cryptographic algorithms, which is great for security but can cause compatibility hiccups with products like VMware Aria Operations for Networks. If the SSH client (Lifecycle Manager) and SSH server (Aria Operations for Networks) can’t agree on compatible algorithms, the connection fails. This failure can masquerade as an authentication error, even if your console user password is correct.
The Fix: Enable FIPS Mode
To resolve this, you need to enable FIPS mode (Federal Information Processing Standards) on the Aria Suite Lifecycle appliance. FIPS mode restricts the appliance to using FIPS-compliant cryptographic algorithms, aligning the security settings between Lifecycle Manager and Aria Operations for Networks. This ensures the SSH connection succeeds, and the import operation can proceed without throwing the LCMVRNICONFIG90115 error.
How to Enable FIPS Mode: Step-by-Step
Follow these steps to implement the fix:
- Log in to VMware Aria Suite Lifecycle
Use your administrator credentials to access the Lifecycle Manager interface. - Navigate to Settings
From the main dashboard, go to Lifecycle Operations > Settings > System Details. - Enable FIPS Mode
Locate the FIPS Mode Compliance option and check the box to enable it. - Apply the Changes
Click the SAVE button. This will save the configuration and restart the Lifecycle Manager services to apply FIPS mode. - Retry the Import
Once the services are back online, return to the import wizard and attempt to add the VMware Aria Operations for Networks instance again.
That’s it! With FIPS mode enabled, the SSH connection should now use compatible, secure algorithms, allowing the credentials to be verified successfully.
Troubleshooting Tips and Considerations
Before you celebrate, here are a few extra steps and considerations to ensure everything goes smoothly:
- Double-Check the Console User Password
Even though the error might stem from SSH settings, it’s worth verifying that the console user password is correct. Open an SSH client (like PuTTY or a terminal) and try logging into the VMware Aria Operations for Networks instance manually using the “consoleuser” account. If it works, the password isn’t the issue. - Confirm SSH Connectivity
Ensure the Aria Operations for Networks instance is reachable from the Lifecycle Manager appliance over SSH (port 22). Firewalls, network policies, or downtime could block the connection. - Understand FIPS Mode’s Impact
Enabling FIPS mode enhances security by limiting cryptographic algorithms to FIPS-compliant ones. However, this could affect other products managed by Lifecycle Manager. If you’re overseeing a broader VMware by Broadcom environment, check compatibility with other instances before flipping the switch.
Why Does FIPS Mode Work?
You might be wondering: If the error says “invalid credentials,” why does FIPS mode fix it? Great question! When SSH settings are misaligned, the connection can fail before the credentials are even validated, resulting in a misleading error message. By enabling FIPS mode, VMware Aria Suite Lifecycle Manager adjusts its SSH client behavior to use a secure, standardized set of algorithms that VMware Aria Operations for Networks can accept. This resolves the underlying compatibility issue, letting the authentication process complete successfully.
Wrap-Up
The LCMVRNICONFIG90115 error in VMware Aria Suite Lifecycle Manager can be a head-scratcher, especially when your credentials seem fine. By enabling FIPS mode on the Aria Suite Lifecycle appliance, you tackle the root cause—SSH connection mismatches—and get back to managing your VMware by Broadcom environment with ease.
