Error: "LCMCOMMON80074 - Certificate properties not available' when replacing Fleet certificate in VCF Operations

Products

• VCF Operations

Issue/Introduction

• Replacing a certificate for Fleet Management through Fleet Management using a CSR generated via API fails with error:

Error Code: LCMCOMMON80074
Certificate replace operations for VCF Operations Fleet Management Failed 
Certificate properties not available 

• Fleet logs (/var/log/vrlcm/vmware_vrlcm.log) show error:

2026-06-25T09:58:03.321Z INFO vrlcm[1292] [pool-3-thread-57] [c.v.v.l.l.s.p.PKIStoreServiceImpl]  -- Reading certificate '########-####-####-####-##########' from [PKIStoreService]
2026-06-25T09:58:03.323Z INFO vrlcm[1292] [pool-3-thread-57] [c.v.v.l.p.a.s.Task]  -- Injecting task failure event. Error Code : 'LCMCOMMON80074', Retry : 'true', Causing Properties : '{ CAUSE :: certificate ===  }'
com.vmware.vrealize.lcm.common.exception.LcmException: Certificate properties not available.
        at com.vmware.vrealize.lcm.drivers.commonplugin.task.LcmInstallCertificateTask.execute(LcmInstallCertificateTask.java:84) [vmlcm-commonplugin-core-9.0.2.0-SNAPSHOT.jar!/:?]
        at com.vmware.vrealize.lcm.automata.core.TaskThread.run(TaskThread.java:62) [vmlcm-engineservice-core-9.0.2.0-SNAPSHOT.jar!/:?]
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [?:?]
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:?]
        at java.base/java.lang.Thread.run(Unknown Source) [?:?]
2026-06-25T09:58:03.332Z INFO vrlcm[1292] [scheduling-1] [c.v.v.l.r.c.RequestProcessor]  -- Updating the Environment request status to FAILED for request ID : ########-####-####-####-########## with request type : REPLACE_PRODUCT_CERTIFICATE.

Environment

VCF Operations 9.0.2 

Resolution

To resolve the issue, follow the below steps:

1. Access Fleet Management API as per KB How to Authorize VCF Operations Fleet Management API 
2. Select private-internal-API from the drop down box.
3. To generate the CSR for Fleet, use:
   

   POST /lcm/locker/api/v3/certificates/csr

4. Request CA signed certificate via PKI/CA process using the CSR file created in step 3
5. Login to VCF Operations and navigate to Fleet Management -> Certificate -> Select the Fleet Instance -> Import Certificates.
6. Import the certificate generated in step 4
7. Select the Fleet instance and click Replace with Imported Certificates 
8. Select the imported certificate in step 6 and submit.