Auto Deploy certificate showing "NO SKID" in vCert tool output

Products

• VMware vCenter Server

Issue/Introduction

Output when running option 1 in the vCert tool shows output similar to:

Checking Certificate Status
-----------------------------------------------------------------
Checking Machine SSL certificate                            VALID
Checking Solution User certificates:
   machine                                                  VALID
   vsphere-webclient                                        VALID
   vpxd                                                     VALID
   vpxd-extension                                           VALID
   hvc                                                      VALID
   wcp                                                      VALID
Checking SMS self-signed certificate                        VALID
Checking SMS VMCA-signed certificate                        VALID
Checking data-encipherment certificate                      VALID
Checking Authentication Proxy certificate                   VALID
Checking Auto Deploy CA certificate                       NO SKID
Checking BACKUP_STORE entries:
Checking BACKUP_STORE_H5C entries:                  
Checking VMDir certificate                                                                                                                                        VALID
Checking VMCA certificate                                   VALID

Environment

vCenter Server 7.x
vCenter Server 8.x

Cause

This is caused by the /etc/vmware-rbd/ssl/rbd-ca.crt for auto deploy not having a skid.

Running the following command results in no output:
openssl x509 -in /etc/vmware-rbd/ssl/rbd-ca.crt -text -noout | grep "Subject Key Identifier"

Resolution

If using Auto Deploy in the environment the certificate should be replaced with one that has a SKID as it is defined in the RFC for certificates.  Please see the documentation.

Prepare Your System for vSphere Auto Deploy (version 7.x)
Use Custom Certificates with Auto Deploy (version 8.x)

Additional Information

SKID in the RFC: https://datatracker.ietf.org/doc/html/rfc5280#page-28