While deploying the SSP installer using the Review Details screen, there is a warning displayed that says:
“The OVF package contains advanced configuration options, which might pose a security risk. Review the advanced configuration options below. Click Next to accept the advanced configuration options.”
Additionally, the vSphere Client displays the error:
“The Certificate is Expired.”
Affected builds :
SSP 5.0:
VMware-Security-Services-Platform-Installer-5.0.0.0.0.24631123.ova
SSP 5.1:
VMware-Security-Services-Platform-Installer-5.1.0.0.0.25048619.ova (5.17 GB)
VMware-NDR-Sensor-appliance-5.1.0.0.0.25008725.ova (5.55 GB)
This behavior may cause concern during deployment but does not indicate a runtime ,security issue like vulnerability, data integrity, or platform security.
This issue may be encountered in scenarios involving SSP installer OVF deployment, including greenfield deployments or restore operations from backup.
NOTE: This warning does not impact the ability to deploy SSP installer if you choose to ignore the warning.
SSP 5.0 and SSP 5.1
The signing certificate used during the SSP OVA build process expired on January 3, 2026. As a result, new deployments using the affected SSPi OVA files show certificate-related warnings/errors when deployed via vSphere Client or OVF Tool.
This is a known issue affecting SSP versions 5.0 and 5.1.
Broadcom has released Express Patch update for both versions. These patches updates the expiration date of the signature on the Security Services Platform Installer (SSPI) OVA file, resolving the warning during deployment.
Note:
The Express Patch applies only to the SSPI OVA signature and does not modify runtime components.
Security Services Platform: Release 5.0.0.1 | January 5, 2026
Contains the following:
Security Services Platform Installer build: 25142035
Security Services Platform: Release 5.1.0.1 | January 5, 2026
Contains the following:
Security Services Platform Installer build: 25141948
NDR Sensor build: 25142441
Here are the links: