Signature check of main upgrade bundle(mub) file failed

Products

• VMware NSX

Issue/Introduction

• Uploading upgrade bundle file (.mub), or upgrade pre-check bundle file (.pub) to the NSX manager fails 
• Error: Signature check of main upgrade bundle(mub) file failed. Tampering with downloaded bundle is not supported. 
• The downloaded file is not corrupted, MD5 checksum for the downloaded upgrade bundle is good
• You may see an error stating Bad XSRF token on the Check Upgrade Readiness page.
• You may see an alarm stating Http failure response for ../api/v1/upgrade/bundles?action=upload: 0 Unknown Error. 
• In the NSX Manager logs /var/log/auth.log, a message similar to the following in some cases is seen:
  
  2024-01-01T00:11:22.333Z <hostname> sudo - - -      root : Account or password is expired, reset your password and try again ; TTY=unknown ; PWD=/usr/tanuki/bin ; USER=root ; COMMAND=/usr/bin/gpg --homedir /root/.gnupg --verify /image/upgrade-coordinator/tmpz0xtrftn/VMware-NSX-upgrade-bundle-4.#.#.#.# -pre-check.tar.gz.sig /image/upgrade-coordinator/tmpz0xtrftn/VMware-NSX-upgrade-bundle-4.#.#.#.# -pre-check.tar.gz

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware NSX-T 3.x
VMware NSX 4.x

Cause

This issue can occur if the NSX manager appliance root user account password is expired. 

Resolution

To resolve this issue, follow the below steps below.

1. Reset the expired root password of all the NSX manager nodes by following NSX documentation, "Resetting the Passwords of an Appliance."
2. Restart the upgrade-coordinator service as root
   
   service upgrade-coordinator restart

   
   
3. Upload the NSX upgrade bundle again to the NSX manager

Additional Information

If you have forgotten the root user's password of the NSX manager appliances, you can reset it by following "Resetting the Passwords of an Appliance.".