VDT reports "No SAN detected!" for SDDC Manager certificate

Products

• VMware SDDC Manager

Issue/Introduction

VDT will indicate that the SDDC Manager certificate lacks the Subject Alternative Name (SAN) field.

[FAIL] Certificate Trust Check

Root Cert is missing from keystore "/etc/vmware/vcf/commonsvcs/trusted certificates.store" and "/etc/alternatives/jre/lib/security/cacerts".

Documentation: https://kb.vmware.com/s/article/86131 

Notes: Refer to the KB above to add the Root Certificate to the keystores.

[PASS] Expiration Check

Server Certificate expires in #### days

[FAIL] Subject Alternative Name Check

No SAN detected!

Cause

Subject Alternative Name (SAN) field in the SDDC Manager certificate was missing.

Resolution

• To resolve this issue, renew the SDDC Manager certificate using one of below articles
  • OpenSSL: Install OpenSSL-signed Certificates using SDDC Manager
  • Microsoft CA: Install Microsoft CA-Signed Certificates using SDDC Manager
  • Third Party: Install Third-Party CA-Signed Certificates Using Server Certificate and Certificate Authority Files