vCenter update fails with error "Verification of the machine SSL certificate failed due to an invalid trusted root certificate chain"

Products

• VMware vCenter Server

Issue/Introduction

• vCenter Update precheck fails with the following error as shown in the screenshot.
  
• vCenter is using a custom signed certificate

Environment

vCenter 8.0

Cause

This precheck error occurs if the Signing Certificate of the Machine SSL Certificate is missing in the vCenter VECS Store.

Resolution

Get the Signing Certificate and add it to the TRUSTED_ROOTS Certificate Store.

Ref: Add a Trusted Root Certificate to the Certificate Store Using the vSphere Client