"The certificates of Supervisor <Name> (domain-#) are expiring on <Date>" error in vCenter

Products

• VMware Tanzu Platform

Issue/Introduction

An error similar to The certificates of Supervisor <Name> (domain-#) are expiring on <Date>" appears in the banner of the vCenter Web Client

Environment

vSphere with Tanzu vCenter

Cause

The certificates of a vSphere with Tanzu supervisor cluster are nearing their expiration date. 

Resolution

The vSphere with Tanzu Supervisor Cluster certificates have a limited life span. 
See the following knowledge base article for guidance on the Supervisor certificates: vSphere with Tanzu Certificate Guide

From the KB above, use the following command while accessing the Supervisor Cluster to identify certificate expiry timeframe:
 
# find / -type f \( -name "*.cert" -o -name "*.crt" \)  -print 2>/dev/null | egrep -v 'ca.crt$|ca-bundle.crt$|kubelet\/pods|var\/lib\/containerd|run\/containerd' | xargs -L 1 -t -i bash -c 'openssl x509 -noout -text -in {}|grep After'

Any certificates expiring within 30 days will cause an alert within the vCenter to trigger. 

There are two methods for refreshing the Supervisor Clusters certificates. 
1) Perform an upgrade of the Supervisor Cluster
 - See the following documentation for instructions on updating your vSphere with Tanzu Supervisor Clusters
vSphere Supervisor 7.0 - Upgrade a Supervisor Cluster
vSphere Supervisor 8.0 - Update the Supervisor

2) The certificates can be refreshed using the following instructions and the wcp_cert_manager tool
Replace vSphere with Tanzu Supervisor Certificates