Aria Automation 8.18.1 to VCF Automation 9.x Upgrade Fails Due to Expired Ingress TLS Certificate

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

During the upgrade precheck from Aria Automation 8.18.1 to VCF Automation 9.x, the pre-validation fails with the following error:

The ingress TLS certificate chain is invalid or incomplete.

Running the command below confirms an expired certificate in the TLS chain:

vracli certificate ingress --parse

Output Error:

Unable to validate the following certificate: <Certificate> certificate has expired

Environment

VCF Automation 9.x

Aria Automation 8.18.1

Cause

The existing ingress TLS certificate (or an intermediate/root certificate within the chain) configured in Aria Automation 8.x has expired, preventing the upgrade installer from validating trust across the ingress endpoint.

Resolution

1. Generate or import a new, valid TLS certificate chain (including all required intermediate and root CA certificates) for Aria Automation 8.x.

2. Replace the existing certificate in Aria Automation 8.x using the KB : How to replace Aria Automation ingress certificates when Aria Suite Lifecycle 8.x is inaccessible

3. Verify the new certificate status using vracli certificate ingress --parse to ensure all certificates in the chain are valid and non-expired.

4. Retry the VCF Automation 9.x upgrade precheck.