Applying local manager certificate fails with error code 600

Products

• VMware NSX

Issue/Introduction

• Applying the certificate to the local manager via the API fails. The system generates an error code 600, indicating the requested object is not found.
• API command used to replace the certificate: curl -l -k -u 'admin' -H 'Content-Type: application/json' -H 'X-Allow-Overwrite: true' -X POST "https: //localhost/api/v1/trust-management/certificates/<newcertificateID>?action=apply_certificate&service_type=LOCAL_MANAGER"

Error Response:

{
  "httpStatus" : "NOT_FOUND",
  "error_code" : 600,
  "module_name" : "common-services",
  "error_message" : "The requested object : Certificate/<newcertificateID> could not be found. Object identifiers are case sensitive."
}

• Use the following API to check if the certificate exists

curl -l -k -u 'admin' -X GET 'https://localhost/api/v1/trust-management/certificates'

Environment

VMware NSX

Cause

The certificate was incorrectly generated with the service certificate option enabled. Local manager certificates require the service certificate parameter to be disabled.

Resolution

To resolve this issue, regenerate the certificate with the correct parameters:

1. Regenerate the certificate: Ensure the service certificate option is set to "No".
2. Re-apply the certificate: Execute the API call again using the corrected certificate ID.

curl -l -k -u 'admin' -H 'Content-Type: application/json' -H 'X-Allow-Overwrite: true' -X POST "https: //localhost/api/v1/trust-management/certificates/<newcertificateID>?action=apply_certificate&service_type=LOCAL_MANAGER"

Additional Information

Manually replace expired local manager certificate with self signed certificate & cleanup the expired certificate