Error while renewing certificates on Avi - "Can only renew ssl certificates with management profiles attached"

Products

• VMware Avi Load Balancer

Issue/Introduction

When attempting to renew an SSL/TLS certificate directly from the Avi Controller UI, the operation fails. After navigating to the certificate details and clicking the Renew button, the system displays the following error message:

Can only renew ssl certificates with management profiles attached.

Error screenshot from the Avi UI:

Cause

This error indicates that the certificate is not associated with an SSL/TLS Certificate Management Profile, which is a prerequisite for using the built-in renewal feature.

 

Resolution

The following guide provides the steps required to manually renew self-signed SSL/TLS certificates:

https://techdocs.broadcom.com/us/en/vmware-security-load-balancing/avi-load-balancer/avi-load-balancer/22-1/vmware-avi-load-balancer-administration-guide/access-settings/certificates/how-to-renew-default-self-signed-certificates-on-nsx-advanced-load-balancer.html 

The following guide provides the steps to configure a certification management profile on Avi (such as LetsEncrypt):

https://techdocs.broadcom.com/us/en/vmware-security-load-balancing/avi-load-balancer/avi-load-balancer/22-1/vmware-avi-load-balancer-administration-guide/access-settings/certificates/certificate-management-integration-for-csr-automation/configuring-certificate-management-integration.html