Error When Replacing AD over LDAPS Certificate: "Cannot configure identity source due to Certificate is not valid: NotAfter:"

Products

• VMware vCenter Server

Issue/Introduction

Environment

VMware vCenter Server

Cause

An expired certificate resides within the LDAPS certificate store. This will prevent the GUI from replacing the certificates when trying to import new ones: 

Resolution

Use the vCert tool to check and remove the expired LDAPs certificate:

1. To check certificates use "1. Check current certificate status". 
2. If an expired LDAPS certificate appears, follow these steps to get into your LDAPS certificate store and remove the expired cert(s).
   • 3. Manage certificates
   • 11. LDAPS Identity Source certificates
   • 2. Remove Certificate