Unable to apply Microsoft CA custom certificate: Certificate replacement for appliance ### has failed. Failed to perform specified operation. Import certificate for Operations failed.

Products

• VCF Operations

Issue/Introduction

• Microsoft CA has been integrated with Fleet Management in VCF Operations 9.0.
• Attempting to replace the VCF Operations certificate with a configured CA certificate fails with the following error message:

  Certificate replacement for appliance ######## has failed. Failed to perform specified operation. Import certificate for Operations failed.

Environment

VCF Operations 9.0.0

Cause

• The issue is a known limitation in VCF Fleet Management 9.0 appliance.
• Specifically, there is a gap in the Fleet Manager’s handling of certificates generated using Microsoft Certificate Authority (CA).
• When generating certificates via Microsoft CA, only the root certificate and the signed leaf certificate are included in the chain. Intermediate certificates are omitted, leading to the failure in replacing the certificate.

Resolution

This issue has been fixed in VCF 9.0.1.

 

Workaround to use this functionality in VCF 9.0.0:

Manually replace the certificate: Replace a Certificate with an External CA-Signed Certificate