Upgrade from VCSA 8 to 9.0 GA blocked with the error "failed to get sso server certificate" during precheck

Products

• VMware vCenter Server 8.0

Issue/Introduction

During upgrade, the precheck step reports "failed to get sso server certificate" and the upgrade cannot proceed.

Environment

vCenter upgrade from 8.x to 9.0 GA

Cause

This error is triggered when the primary network identifier (PNID) is a static IP instead of fully qualified domain name (FQDN) on the source vCenter 8.x appliance.

Resolution

1. Copy the script attached to this article (fix-upgrade-ssoservercert.py) to the source vCenter 8.x appliance using WinSCP or similar utility.

2. From an SSH session, run the script (leave the SSH session open).

   • python fix-upgrade-ssoservercert.py

3. Perform the upgrade

Additional Information

Attachment details:

Filename	MD5 SUM	SHA256 SUM
fix-upgrade-ssoservercert.py	0d734a069b4cad9888d881e04bfbd0d6	92add7c468ed9a2dc6971976a3187f4c02a0f0532acc900fb9ccafb28e708dec