"ovftool cannot be opened because the developer cannot be verified" while using VCSA UI Installer

Products

• VMware Aria Suite
• VMware vCenter Server

Issue/Introduction

Symptoms:
Running the VCSA UI Installer or other .iso based easy installers, you see the following error message on MacOS

ovftool cannot be opened because the developer cannot be verified

Environment

VMware vCenter Server Appliance 6.7.x

Cause

This is due to a security change in MacOS Catalina which now prevents non notarized apps from running.

Resolution

VMware is aware of this issue and working on a resolution.

Workaround:
Note: spctl has been updated in later versions of MacOS.  --master-enable | --master-disable have been changed to --global-disable | --global-enable.

Workaround 1: Disable the security until the vCenter Server deployment is completed.

1. Run the command

   sudo spctl --global-disable
   

2. In Security and Privacy settings set Allow apps download from to anywhere.
3. Run

   sudo xattr -r -d com.apple.quarantine Path_to_the_iso

Example:

sudo xattr -r -d com.apple.quarantine VMware-VCSA-all-6.7.0-Update-15132721

sudo xattr -r -d com.apple.quarantine VMware-VCSA-all-7.0.0-15952498.iso

4. Mount the ISO and open UI Installer
5. Install/Upgrade vCenter Server 6.7/7.0
6. Run the following command in your terminal

   sudo spctl --global-enable

Note: This will turn the security back on to protect against other unsigned/verified apps.

Workaround 2: Deploy the vCenter Server from a Microsoft Windows device.

Additional Information

Impact/Risks:
Aria Automation and Aria Lifecycle (formally vRealize Automation and vRealize Suite Lifecycle) Easy Installers and other .iso based installers may run into this issue.