vCenter import fails at pre-checks with error message "Cause: Certificate for doesn't match any of the subject alternative names: #.#.#.#

Products

• VMware NSX
• VCF Operations

Issue/Introduction

• 'Import a vCenter' workflow in VCF 9.0.1 fails with error message:
• Existing components validation failed due to errors. Cannot connect to <fqdn name>
Cause: Certificate for doesn't match any of the subject alternative names: [#.#.#.#] 
  

Environment

VCF 9.0.1 

Cause

The certificate(s) for the NSX managers and the VIP does not contain all of the correct Common Name, Subject Alternative name or IP Addresses.

Resolution

• Generate a new certificate and ensure that the correct Common Name, Subject Alternative name and IP Addresses are provided
  
• Apply the new certificate to the NSX managers (API/MGMT_CLUSTER)
• Run the 'Import a vCenter' workflow again