NSX Upgrade Precheck Fails Due to Expired Certificate on Global Manager

Products

• VMware NSX

Issue/Introduction

During upgrade of NSX Global Manager, the precheck fails due to an expired certificate.

• Precheck error indicates presence of an expired certificate.
• A new valid CA-signed certificate is already available in the environment.
• Customer is unable to delete the expired certificate (Delete Option Greyed Out).

Environment

NSX

Cause

• The expired certificate is still actively associated with NSX services.
• The CARR script does not replace CA-signed certificates.
• As a result, even though a new certificate exists, the system continues to reference the expired certificate.

 

Resolution

If you are unable to:

• Replace the certificate successfully, or
• Delete the expired certificate after replacement

Please raise a support request with Broadcom Support for further assistance.