New certificate import in NSX UI fails with "Error: Non-CA certificate uploaded with "purpose" set to "signing-ca". (Error code: 6101)"

Products

• VMware NSX

Issue/Introduction

• Importing CA signed certificate (NSX UI > System > Certificates > Import > CA Certificate) fails with Error: Non-CA certificate uploaded with "purpose" set to "signing-ca". (Error code: 6101)
  
  

Environment

VMware NSX

Cause

The imported certificate chain was incomplete.

Resolution

For CA-signed certificates, submit the complete certificate chain as a single, continuous input block. The components must be sequenced in the following order: Server Certificate --> Intermediate Certificate(s) --> Root Certificate.

-----BEGIN CERTIFICATE-----
[Server Certificate]
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
[Intermediate certificate ]
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
[Root Certificate]
-----END CERTIFICATE-----

Additional Information

Please refer Import a CA Certificate and How to Replace NSX Manager Certificates Using CA-Signed Certificates in NSX 4.x for more information.