NSX-T restore from backup fails with a certificate validation error

Products

• VMware NSX Networking

Issue/Introduction

Symptoms:

• NSX-T 3.0.x
• On initiating a restore from backup, the restore may fail reporting a certificate validation error similar to
  •      Restore from backup process failed. Error while restoring certificates.
  •      Error while updating tomcat certificate <UUID> failed. Certificate validation failed.
• There may be different failure reasons, for example
  •      Certificate was not verifiably signed
  •      Certificate does not verify with supplied key
  •      CRL check failed: No CDP specified in the certificate

Environment

VMware NSX-T Data Center 3.x
VMware NSX-T Data Center

Cause

A certificate validation checks runs during the restore process.
Sometimes this may result in a validation failure.
Since certificates on a running system have already been validated, there should be no certificate validation during the restore process.

Resolution

This issue has been resolved in NSX-T Data Center 3.1.0, available from VMware Downloads.

Workaround:
If you are experiencing this issue in a DR restore scenario, please open a Support Request with VMware Support and request assistance referencing this KB.

Additional Information

Impact/Risks:
This issue has been resolved in NSX-T Data Center 3.1.0, available from VMware Downloads .