Error: "The certificate used to sign the OVF package is not valid (Invalid)" during VCDA deployment in AVS

Products

• VMware Live Recovery

Issue/Introduction

• Deployment of VMware Cloud Director Availability (VCDA) Provider appliance fails during deployment in Azure VMware Solution (AVS)
• Deployment may fail with API error:
  
  The long-running operation failed. 400; Import-VApp

• The failure occurs during the Import-VApp / Deploy OVF Template stage
• The following error is observed in the UI or deployment workflow:
  
  The certificate used to sign the OVF package is not valid (Invalid)
  
  
• The virtual machine deployment is initiated but subsequently fails or is cancelled during validation
• This issue may be encountered when deploying VCDA Provider appliance using AVS Run Command

Environment

• VMware Cloud Director Availability 4.7.3
• VMware.VCDA.AVS PowerShell Module 1.0.4
• Azure VMware Solution (AVS)

 

Cause

This issue can occur when the VCDA OVA package is signed with an expired OVF certificate.

In standard VMware vCenter environments, deployments with expired or untrusted OVF certificates can proceed by manually accepting or ignoring the certificate warning.

However, in Azure VMware Solution (AVS):

• OVF deployment is executed via automated workflows (e.g. Run Command)
• Certificate validation is strictly enforced
• There is no option to bypass or ignore certificate warnings

As a result, the deployment fails during the Import-VApp stage when the OVF certificate is considered invalid.

Resolution

• Deploy using VMware Cloud Director Availability (VCDA) 4.7.4 or later
• Use VMware.VCDA.AVS PowerShell module 1.0.5 or later
• Ensure the OVA package used is from the updated release

 

Additional Information

Older VCDA versions (e.g. 4.7.3 / 4.7.3.1) may fail deployment in AVS due to expired OVF certificates
There is no supported method to bypass OVF certificate validation in Azure VMware Solution (AVS)
Ensure compatibility between VCDA version and VMware.VCDA.AVS module version before deployment