"[500] SSO error: Could not parse certificate: java.io.IOException: java.lang.IllegalArgumentException: Input byte array has incorrect ending byte at 3208" while configuring PSC in HA

Products

• VMware vCenter Server
• VMware NSX

Issue/Introduction

Symptoms:

• Unable to configure Platform Service Controller in HA when NSX as load balancer.
• In the vSphere Web Client, you see this error:
  
  [500] SSO error: Could not parse certificate: java.io.IOException: java.lang.IllegalArgumentException: Input byte array has incorrect ending byte at 3208 Check the vSphere Web Client server logs for details.
   
• In the /var/log/vsphere-client/logsvsphere_client_virgo.log file (VCSA) or C:\ProgramData\VMware\vCenterServer\logs\vsphere-client\logs\vsphere_client_virgo.log file (Windows), you see this error:
  
  [2017-05-01T19:39:24.067Z] [ERROR] http-bio-9090-exec-5 com.vmware.vise.vim.security.sso.impl.SsoServiceImpl Error when fetching sts root certificates java.util.concurrent.ExecutionException: java.security.cert.CertificateException: Could not parse certificate: java.io.IOException: java.lang.IllegalArgumentException: Input byte array has incorrect ending byte at 1336

Environment

VMware vCenter Server Appliance 6.0.x
VMware vCenter Server Appliance 6.5.x

Cause

This issue occurs due to change in the /usr/lib/vmware-sso/bin/UpdateLsEndpoint.py file between vCenter Server 6.5 GA and vCenter Server 6.5.0d.

Resolution

This issue is resolved in vCenter Server 6.5 U1, available at VMware Downloads.

To work around this issue if you are unable to upgrade, copy the /usr/lib/vmware-sso/bin/UpdateLsEndpoint.py file from 6.5 GA for updating the end points.