NSX upgrade pre-check warning: "The certificate with ID ### failed validation. The certificate has expired. Please delete or replace this certificate prior to upgrading."

Products

• VMware NSX

Issue/Introduction

• A pre-check has been performed for an NSX upgrade.
• The pre-check results include a warning on the manager component indicating "The certificate with ID ### failed validation.  The certificate has expired.  Please delete or replace this certificate prior to upgrading."
• From the NSX UI in System->Settings->Certificates, there are one or more expired certificates.

Environment

• VMware NSX-T Data Center
• VMware NSX

Cause

A local certificate at an NSX Manager has expired.  The certificate must be replaced to allow the pre-check warning to clear.

Resolution

Please consult KB 369034: Using Certificate Analyzer, Results and Recovery (CARR) Script to fix certificate related issues in NSX to resolve issues with expired and self-signed certificates.