NSX manager UI inaccessible due to expired API certs

Products

• VMware NSX

Issue/Introduction

• You may observe that the NSX Manager UI inaccessible preventing all login and management operations via the UI due to expired API certificates across all manager nodes.
• You are using CA signed certificates for API on all nodes and MGMT_CLUSTER on VIP, Since these are CA signed certificates, usage of CARR script from KB is not possible as CARR is only used to replace self signed certificates.
• You are looking to replace the CA signed certificates to access the UI again.

Environment

• VMware NSX

Cause

• This issue occurs when the certificates used for the API and MGMT CLUSTER have reached their expiration date across all NSX Manager nodes and the Virtual IP (VIP), which results in the loss of UI access.

Resolution

• Follow the below KB for scripted method to replace the certificates and resolve the issue.
  Scripted process to replace expired or self-signed VMware NSX Manager Certificates with VMCA-Signed Certificates