NSX Edge node deployment still fails after bypassing OVF validation

Products

• VMware NSX

Issue/Introduction

Due to a known issue OVF certificate used for validation is expired, resulting in NSX edge node deployment or re-deployment failure. 

However, after using the script provided from this KB, the deployment still fails. 

NSX manager has many expired certificates and some of them are for NSX API and NSX management cluster.

Environment

VMWare NSX

Cause

Despite the OVF validation was bypassed, the expired NSX API certificates triggered the exact same error message.

Resolution

To resolve this issue, please renew NSX certificates. 

If the certs are NSX self-signed certs, please check Using Certificate Analyzer, Results and Recovery (CARR) Script to fix certificate related issues in NSX

If the expired certs are signed by a CA, please check this KB for how to renew NSX 4.2.x cert  or manually using API call.