Adding a certificate to vCenter Trusted Root to replace an expiring Intermediate CA certificate hangs with a spinning blue circle

Products

• VMware vCenter Server

Issue/Introduction

• There is an expiring certificate in the vCenter Server Trusted Root store.
• The certificate has already been refreshed on the device it belongs to, and the new cert is being added to vCenter Server Trusted Roots in an effort to replace the expiring Trusted Root certificate. 
• The UI takes the Add Certificate request, but the spinning blue wheel never progresses. 

Environment

vCenter Server 8.x

Cause

This happens when adding a new certificate to Trusted Root when there is already a certificate with the same Subject Key Identifier present. 

Resolution

Use the vCert tool to remove the soon to expire certificate from Trusted Root first, then upload the new Intermediate CA certificate.