NSX Upgrade pre-check fails with error: The certificate with id <certificate ID> failed to parse with error: java.io.IOException: Header and footer do not match

Products

• VMware NSX

Issue/Introduction

NSX Upgrade pre-check fails with following error for the NSX Manager component:

Error: 
The certificate with id <cert ID> failed to parse with error: java.io.IOException: Header and footer do not match: -----BEGIN CERTIFICATE----- -----END CERTIFICATE--------------------------------------------------------. Please delete (if unused) or replace this certificate prior to upgrading

Environment

VMware NSX 4.X

Cause

The issue occurs when the certificate ID mentioned in the error contains extra delimiters in the certificate:

 Certificates MUST be encoded and appear between the following delimiters:

            -----BEGIN CERTIFICATE-----
            -----END CERTIFICATE-----

Resolution

Since the certificate with the error is already mapped to a management node, edit operation on the certificate is not allowed.

Kindly use the documentation to Import and Replace Certificates

Importing and Replacing Certificates

Once the import and replace operation is performed, please delete the old/problematic certificate and re-run the pre check on NSX Manager.