Unable to deploy OVA in vCenter with error: "A fatal error has occurred to continue"

Products

• VMware vCenter Server

Issue/Introduction

• Failed to deploy OVA in vCenter. The operation terminates with the error: 'A fatal error has occurred. Unable to continue.'
  

• service-control --status --all shows below output

  Running:

 lookupsvc lwsmd observability-vapi pschealth vc-ws1a-broker vlcm vmafdd vmcad vmdird vmonapi vmware-analytics vmware-certificateauthority vmware-cis-license vmware-content-library vmware-eam vmware-envoy vmware-envoy-hgw vmware-envoy-sidecar vmware-infraprofile vmware-perfcharts vmware-postgres-archiver vmware-rhttpproxy vmware-sca vmware-stsd vmware-trustmanagement vmware-vapi-endpoint vmware-vmon vmware-vpostgres vmware-vpxd vmware-vsan-health vmware-vsm vtsdb

Stopped:

 applmgmt observability vmcam vmware-certificatemanagement vmware-hvc vmware-imagebuilder vmware-netdumper vmware-pod vmware-rbd-watchdog vmware-sps vmware-topologysvc vmware-updatemgr vmware-vcha vmware-vdtc vmware-vpxd-svcs vsphere-ui vstats wcp

• Services not starting manually.

Environment

vCenter 8.x

Cause

vpxd-svcs and other core services could not initialize due to a hostname mismatch within the SSL certificates. Below is the log excerpt from vmon.log file:

Wa(03) host-xxxxxx <vpxd-svcs> Service pre-start command's stderr:     self.do_handshake()
Wa(03)+ host-xxxxxx  File "/usr/lib/python3.10/ssl.py", line 1341, in do_handshake
Wa(03)+ host-xxxxxx
Wa(03) host-xxxxxx <vpxd-svcs> Service pre-start command's stderr:     self._sslobj.do_handshake()
Wa(03)+ host-xxxxxx
Wa(03) host-xxxxxx <vpxd-svcs> Service pre-start command's stderr: ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'VCENTER PNID/HOSTNAME'. (_ssl.c:997)
Wa(03)+ host-xxxxxx
Er(02) host-xxxxxx <vpxd-svcs> Service pre-start command failed with exit code 1.

Resolution

• Update/Replace the Machine SSL certificate: by using the vCert script: 385107 - vCert - vCenter certificate replacement script
• Re-initialize the services: service-control --start --all
• Re-deploy the OVA.