Error "Unable to perform upgrade: SSL error: Unexpected error: the trustAnchors parameter must be non-empty" when attempting to upgrade VMware Cloud Director Database

Products

• VMware Cloud Director

Issue/Introduction

• When attempting to upgrade VMware Cloud Director database, the task fails with error "Unable to perform upgrade: org.postgresql.util.PSQLException: SSL error: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty"

Environment

VMware Cloud Director 10.x

Cause

• The cell fails to establish SSL connection with JDBC due to expired certificates.
• It can be caused by expired cell or https (Public) or JMX certificates. 

Resolution

Ideally, as a part of the pre-upgrade checks, it is recommended to ensure all the VMware Cloud Director components hold valid certificates.

• In case of upgrade failure with the same error, revert to snapshots taken prior upgrade. Regenerate and apply new certificates on the cell and public https certificate.
  • Replace VMware Cloud Director Public/https Certificate 
  • SSL Certificate Creation and Management of Your VMware Cloud Director Appliance
  • Certificate Management in the VMware Cloud Director Appliance
• Once valid certificates are in place. retrigger the upgrade. Upgrade Your VMware Cloud Director Database

If no snapshots are available, which were taken prior the upgrade was initiated. Kindly reach out to Broadcom Support  referencing this KB article 409450, as a workaround configuration may be required to be put in place temporarily to proceed with the upgrade