NSX installation on a host failed with a ‘exception:java.rmi.RemoteException: VI SDK invoke exception:javax.net.ssl.SSHHandshakeException'

Products

• VMware NSX
• VMware vSphere ESXi

Issue/Introduction

• ESXi host is in vSphere maintenance mode. 
• The NSX VIB installation fails to proceed beyond "Preparing Installation" stage.
• NSX VIB installation failed on a host with following error: "java.rmi.RemoteException: VI SDK invoke exception:javax.net.ssl.SSLHandshakeException: PKIX path building failed: java.security.cert.CertPathBuilderException: Unable to find certificate chain."

Environment

VMware NSX

VMware ESX

Cause

Invalid certificate chain on the ESXi host

Resolution

• Fix the certificate chain, by following this ESXi cert renewal procedure. 
• Follow the resolve workflow for the failed host. (Navigate to the NSX manager UI > System > Fabric > Hosts > click on 'Install failed' > click 'Resolve')