CERTIFICATE_VALIDATION_HAS_FAILED "Public key in CSR and server certificate are not matching" -Validation

Products

• VMware SDDC Manager / VCF Installer

Issue/Introduction

When Importing a Certificates in SDDC that has been signed by an external Certificate authority validations fails with: 

Validation failed! Could not import. Check information below and try again. 

{"code":"CERTIFICATE_VALIDATION_HAS_FAILED","args":["FQDN","Public key in CSR and server certificate are not matching,"]}

Environment

VCF 5.x

Cause

There was a problem or mixup in the generation of the keys

or

Also see KB 410363

Resolution

Verify Key Match (CLI): Ask the customer to run MD5/SHA256 hash checks on the vCenter/SDDC Manager appliance to confirm the mismatch between the Private Key, CSR, and the Certificate.

• • CSR: openssl req -noout -modulus -in [csr_file] | openssl sha256
  • Private Key: openssl rsa -noout -modulus -in [key_file] | openssl sha256
  • Certificate: openssl x509 -noout -modulus -in [cert_file] | openssl sha256

If the keys do not match for all 3 then the CSR request should be regenerated and sent to the CA.