The certificate is expired error displayed when deploying the OVA for VMware Cloud Director Availability

Products

• VMware Live Recovery

Issue/Introduction

• When using the Deploy OVF Template option to deploy a VMware Cloud Director Availability appliance OVA via VMware Virtual Center, a warning similar to the following is displayed on step 4 Review Details:
  
  The certificate is expired.
  
  
  
  
  
  
• Attempts to select Next to continue with the deployment result in the following error:
  
  Please acknowledge by ignoring the warnings before proceeding.
  
  
  

Environment

VMware Cloud Director Availability 4.7.3.x
VMware Cloud Director Availability 4.7.4

Cause

The OVA file was packaged with a certificate containing the following details:

 

        Version: 3 (0x2)
        Serial Number:
            a1:fb:c4:bb:70:32:a4:99
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = US, ST = California, L = Palo Alto, O = "VMware, Inc."
        Validity
            Not Before: Feb 26 22:17:41 2010 GMT
            Not After : Jan  3 22:17:41 2026 GMT
        Subject: C = US, ST = California, L = Palo Alto, O = "VMware, Inc."

 

Once the end validity date has elapsed, the certificate will trigger expiration compliance warnings in Virtual Center.

Resolution

This is a known issue that is impacting the available versions of VMware Cloud Director Availability and there is currently no resolution.

In order to work around this limitation, select the Ignore link in the warning banner to acknowledge the acceptance of this certificate and click Next.

Please note: this certificate is only related to the OVA file itself and will have no impact on the functionality or configuration of the appliances that are being deployed.

Additional Information

For additional validation of the certificate, the following can be performed:

1. Click the VMware, Inc. link in the Publisher field to download a copy of the certificate (typically named VMware, Inc..cer).
2. Review the thumbprint for the certificate to ensure that it matches either of the following:
   
   

   SHA1 Fingerprint	53:D8:32:35:CE:BC:C5:5D:70:AD:D0:3A:3E:46:2A:F3:B2:D9:6F:2F
   SHA256 Fingerprint	EC:CE:45:FD:03:B6:72:27:CA:E1:46:F3:A1:C3:2D:19:41:9D:E5:4E:95:54:7A:1C:11:59:C7:F1:DD:47:CD:A4