Unable to delete expired ui certificate in Certificate Library in VMware Cloud Director Provider portal

Products

• VMware Cloud Director

Issue/Introduction

• Expired certificate email alerts are received by Cloud Director users.
• You observed a message similar to the following stating:

    Your certificate library item restbaseuri.0 (id: 59c6####-####-####-####-######7791, description: null) expired ## day(s) ago at <date>T<time>[E####/K####]

• The expired ui certificate in Certificate Library in the Provider portal does not have delete option.
• You may receive ACCESS_TO_RESOURCE_IS_FORBIDDEN or another error when deleting the certificate by API, even if executed by a System Administrator user.

Environment

VMware Cloud Director 10.6

Cause

• This issue can occur when the ui cert is configured in public addresses.
• There are stale entries present in the Cloud Director database for that certificate. 

Resolution

Delete expired certificate using API Explorer : https://<VCD>/cloudapi/1.0.0/ssl/certificateLibrary

If the issue persists and you cannot delete the certificate, please contact technical support and note this Knowledge Article ID (376536) in the problem description. For more information, see How to Submit a Support Request