Signature check of main upgrade bundle(mub) file failed

Products

• VMware NSX

Issue/Introduction

• Uploading upgrade bundle file (.mub), or upgrade pre-check bundle file (.pub) to the NSX manager fails 
• Error: Signature check of main upgrade bundle(mub) file failed. Tampering with downloaded bundle is not supported. 
• The downloaded file is not corrupted, MD5 checksum for the downloaded upgrade bundle is good
• The error look like the one in the below screenshot

• In the NSX Manager logs /var/log/auth.log, a message similar to the following may be seen:
  1970-01-01T00:11:22.333Z MYNSXMANAGER01 sudo - - -      root : Account or password is expired, reset your password and try again ; TTY=unknown ; PWD=/usr/tanuki/bin ; USER=root ; COMMAND=/usr/bin/gpg --homedir /root/.gnupg --verify /image/upgrade-coordinator/tmpz0xtrftn/VMware-NSX-upgrade-bundle-4.X.X.X.X.XXXXXXXX-pre-check.tar.gz.sig /image/upgrade-coordinator/tmpz0xtrftn/VMware-NSX-upgrade-bundle-4.X.X.X.X.XXXXXXXX-pre-check.tar.gz

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Cause

This issue can occur if the nsx manager node root user account password is expired

Resolution

To resolve the issue, update the expired root user account password on the NSX manager node. Once the expired password is reset, upload the upgrade bundle again.