"The Certificate is Expired" warning during HCX Manager OVF deployment

Products

• VMware HCX

Issue/Introduction

HCX Manager deployment fails when using the Deploy OVF Template wizard on vCenter with the following errors:

The OVF package contains advanced configuration options, which might pose a security risk. Review the advanced configuration options below. Click next to accept the advanced configuration options.

The additional certificate errors seen on the vSphere Client:

On vSphere 8 and 9:  "The Certificate is Expired"
On vSphere 7: "The Certificate is not trusted"

Environment

VMware HCX

Cause

The Signing Certificate used for the HCX Manager Appliance OVF during the build process expired on January 3, 2026. Consequently, New HCX Manager installations using vCenter Deployment will fail.

Resolution

This is a known issue affecting all HCX versions during HCX Manager deployment or installation.
There is no impact to the HCX Manager upgrade, Service Mesh/Fleet IX/NE appliance redeploy or upgrade, or OSAM/Sentinel software (Linux/Windows) installation. All services remain fully operational.

Workaround:
During the deployment phase, navigate to vSphere Client and click "Ignore" to acknowledge the warning. The Deploy OVF wizard will proceed, and the HCX Manager appliance deployment via the UI will complete successfully.