OTV NFS datastore creation immediately shows operation fails

Applies to

• ONTAP tools for VMware vSphere v10.5
• NFSv3 and NFSv4.1 datastores
• Environments with custom ONTAP service policies and multiple LIFs (data/management)

Issue

• When attempting to create an NFS datastore via ONTAP Tools for VMware vSphere (OTV), the operation fails at the mount phase.

An error occurred during host configuration. Operation failed, diagnostics report: Mount failed: Unable to complete Sysinfo operation. Please see the VM kernel log file for more details.: The NFS server denied the mount request: VSI node (5001:)

• The following errors are observed in logs:
• vSphere/ESXi:

Status: The mount request was denied by the NFS server. Check that the export exists and that the client is permitted to mount it.
vim.fault.PlatformConfigFault
Mount failed: Unable to complete Sysinfo operation. Please see the VMkernel log file for more details.: The NFS server denied the mount request: VSInode(5001:)

• OTV logs:

PreMountTraditionalDatastore started mountData: { ... "NfsServerIp":"xx.xx.xx.xx", ... }
Trying TLS/SSL connection with VCTruststore. Message: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Failed to mount or provision the Datastore. Received error:: [No host IPs found matching with the whitelisted IPs. Failing the mount operation]

• ONTAP CLI (net int show -fields service-policy,firewall-policy):

vserver     lif                      service-policy      firewall-policy
------------------------------------------------------------------------
TEST_NFS01  TEST_NFS01_admin_lif1    custom-data-1000    mgmt-nfs
TEST_NFS01  TEST_NFS01_lif1          custom-data-100     data
TEST_NFS01  TEST_NFS01_lif2          custom-data-101     data