Unable to upload new certificate on NSX standby manager

Products

• VMware NSX

Issue/Introduction

The following error is received when importing a service-type certificate on the standby GM, despite the user being logged in as an admin user with full permissions. 

Environment

NSX-T 3.x

NSX 4.1.x

NSX 4.2.x

Cause

 Importing a service-type certificate is not allowed by the system because service certificates are replicated and should only be changed through the active GM.

Resolution

 Importing a service-type certificate through the active GM. 

Additional Information

NSX 4.2 allows standby GM import certificates via UI.   But importing a service-type certificate is still not allowed on standby GM. 

https://knowledge.broadcom.com/external/article?articleNumber=369274