DL VM content libraries cannot be created or updated due to expired signing certificate

Products

• VMware Cloud Foundation
• VCF Private AI Services
• VCF Automation

Issue/Introduction

The signing key used for every published Deep Learning VM Image releases expired on January 3, 2026.

These images can no longer be synced to or uploaded to content libraries that are configured to enforce certificate validity, i.e. have a Security Policy enabled.
This issue will not occur if the content library doesn't have a security policy enforced.

Environment

VMware Deep Learning VM 9.0.2
VMware Deep Learning VM 9.0.1
VMware Deep Learning VM 9.0
VMware Deep Learning VM 1.2
VMware Deep Learning VM 1.1
VMware Deep Learning VM 1.0.1
VMware Deep Learning VM 1.0

Cause

The signing key used to publish the Deep Learning VM images has expired.

Resolution

Engineering teams are aware of this issue and are working on a permanent fix. This KB article will be updated when a fix is available.

As a workaround, 

• If you are creating a Deep Learning VM Image content library, ensure the Content Library has the "Apply Security Policy" unchecked while navigating the New Content Library wizard (this option is not checked by default).
  
  
  
  
• If you have an existing Deep Learning VM Image content library, Edit the content library, From the vCenter Server UI, select Home -> Content Libraries and then select Edit Settings. Uncheck the "Apply Security Policy" and then click "OK" to save this change.