VCF Automation installation fails with LCMCOMMON80067

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Installation of VCF Automation fails with:

Error Code: LCMCOMMON80067
Environment Data validations failed.
Data validation failed
 
com.vmware.vrealize.lcm.common.exception.EngineException: Data validation failed at com.vmware.vrealize.lcm.drivers.commonplugin.task.ValidateEnvironmentDataTask.execute(ValidateEnvironmentDataTask.java:126) at com.vmware.vrealize.lcm.automata.core.TaskThread.run(TaskThread.java:62) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

Fleet manager logs at /var/log/vrlcm/vmware_vrlcm.log shows that it is failing on the Certificate Validation: 

      "checkName" : "Certificate validation for cluster virtual IP ####:####",
      "checkType" : "ERROR",
      "status" : "FAILED",
      "recommendations" : [ "Use a valid SAN certificate with all hostnames present for product nodes or use a wildcard certificate", "In case of SAN certificate make sure following hostname(s) are present: VCFA_VIP.example.com" ],
      "resultDescription" : "The hosts in the certificate doesn't match with the provided/product hosts"

Environment

• VCF Automation 9

Cause

Certificate is using the incorrect Subject Alternative Name. This applies to both Self-Signed and Certificate Authority generated certificates. 

Resolution

Redeploy and ensure the the certificate used has the VIP included in the Subject Alternative Name, as well as the IP addresses for the VIP and Appliance(s)