"Validations failed for certificate" error when trying to import new VMware Identity Manager certificate.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

When you attempt to deploy a new VMware Identity Manager (vIDM) environment using Aria Suite Lifecycle 8.18.0.0, the certificate import process fails. You see the following error message in the user interface during the Install Identity Manager > globalenvironment > Import Certificate stage: Validations failed for certificate.

Environment

Aria Suite Lifecycle 8.18.x

VMware Identity Manager 3.3.7

Cause

This issue occurs if the certificate is incorrectly issued or if the certificate chain is assembled in an unsupported sequence. Aria Suite Lifecycle validation routines perform strict checks on certificate attributes (such as Subject Alternative Names or Key Usage extensions) and the chain of trust. If these attributes are missing or if the Server, Intermediate, and Root certificates are improperly concatenated, the validation fails.

Resolution

To resolve this issue, you must recreate the certificate with the required attributes and assemble the PEM chain in the specific order required by the application.

1. Recreate the Certificate: Ensure the new certificate request includes all required attributes for VMware Identity Manager, including correct Subject Alternative Names (SAN) and Key Usage extensions.
2. Assemble the Certificate Chain: Concatenate the certificate components into a single file using the following exact sequence:
   • Server Certificate (End-entity)
   • Intermediate CA Certificate
   • Root CA Certificate
3. Retry Import: Upload the newly assembled certificate chain in the Aria Suite Lifecycle Locker and re-attempt the environment deployment.

For detailed steps on certificate requirements and generation, see Replace Your VMware Identity Manager Certificate.