VMware Cloud Director Availability Deployment fails from Azure with error "Could not find SSL/X509 certificate from https:<VCDFQDN:443>api"

Products

• VMware Cloud Director

Issue/Introduction

Deployment of VMware Cloud Director Availability (VCDA) from a Microsoft Azure environment fails during the initial deployment stage. The deployment consistently halts and fails with the following error message:"Could not find SSL/X509 certificate from https:<VCDFQDN:443>api"

Environment

VMware Cloud Director Availability 4.x

Cause

The deployment failure is caused by an internal network connectivity restriction and NAT firewall misconfiguration that prevents the VCDA appliance from reaching the VMware Cloud Director (VCD) Public URL over HTTPS (port 443).

Resolution

To resolve this issue, review and correct the network connectivity between the VCDA appliance and the VMware Cloud Director Public URL by performing the following steps:

1. Ensure the VCD Public URL is fully reachable from the internal network where the VCDA appliance is being deployed.

2. Verify that HTTPS (port 443) connectivity is open and permitted outbound from the VCDA appliance.

3. Validate NAT firewall rules and internal network routing configurations to allow the required communication to the VCD endpoint.

4. Confirm there are no intermediate firewalls, web proxies, or security policies blocking access to the VCD endpoint.