When adding certificate in PKCS12 format, first you have to extract a private key and certificate from PKCS12 file using OpenSSL. To do this, you have to:
keys_out.pem
" file.
When you insert certificate and private key to NSX edge, you get error: "Error - Invalid Passphrase
", even though passphrase is correct.
In the NSX Manager vsm.log file, you see entries similar to:
2019-08-29 13:00:17.191 GMT WARN http-nio-127.0.0.1-7441-exec-9 RemoteInvocationTraceInterceptor:87 - Processing of VsmHttpInvokerServiceExporter remote call resulted in fatal exception: com.vmware.vshield.vsm.truststore.facade.TrustStoreFacade.addCertificates com.vmware.vshield.vsm.truststore.exceptions.InvalidDataException: core-services:2017:Invalid passphrase
This issue is resolved in VMware NSX Data Center for vSphere 6.4.6.
Workaround:
openssl rsa -in key.pem -out serv.key
serv.key