Failed to generate CSR due to ERROR "I/O error on GET request"

Products

• VMware SDDC Manager

Issue/Introduction

• Generate CSRs for resources in SDDC Manager fails with "CSR Generation - FAILED"
• In the subtask you see the following error "Failed to generate CSR for <hostname> due to: I/O error on GET request for <https://FQDN/api/v1/cluster/nodes/deployments>": Certificate for <fqdn> doesn't match any of the subject alternative names: [fqdn].

Environment

SDDC Manager 5.2.1.1
SDDC Manager 5.x

Cause

SDDC Manager certificate validation fails when attempting to generate a CSR for the node because the Common Name (CN) and the Subject Alternative Name (SAN) field values do not match.

Resolution

Install a certificate on the node that includes the node’s fully qualified domain name (FQDN) in both the Common Name (CN) and the Subject Alternative Name (SAN) fields.

• For NSX Manager, See Replace Certificates Through NSX Manager