A certificate can only be applied to one node for service-type: CBM_CORFU.

Products

• VMware NSX

Issue/Introduction

• Replacing the Corfu certificate with a CA-signed certificate fails with the following error
• • A certificate can only be applied to one node for service-type: CBM_CORFU. This certificate is already being used by another node: UUID
    
    
• The certificate replacement succeeds on the first NSX manager node. 
• On attempting to use the same certificate for the second NSX manager node, the system throws an error 
• This issue is observed in NSX version 4.2.2.1
• The error appears as shown in the screenshot below.

       

Environment

VMware NSX 4.2.X

Cause

This issue occurs when you try to apply the same CA-signed certificate to more than one NSX Manager node for the Corfu (CBM_CORFU) service, which requires a unique certificate per node.

Resolution

• To resolve this issue, ensure that each NSX Manager node uses a unique certificate for the Corfu service. The same certificate cannot be shared across multiple nodes for the CBM_CORFU service type
  
  
• For more information on the certificate sharing guidelines and replacement process, please refer to the documentation below: 
  
  Certificate Sharing Guidelines and minimum number of certificates needed for NSX 4.2.x and Above
  
  Apply Certificate to a Service

Additional Information

If this KB article do not resolve the issue, raise a support ticket with Broadcom support selecting NSX as the product. 

Handling Log Bundles for offline review with Broadcom support.

• Collect Support Bundles for Troubleshooting VMware NSX
• Uploading files to cases on the Broadcom Support Portal
• Creating and managing Broadcom support cases