NSX VIBs signature not available in ESXi host

Products

• VMware vSphere ESXi 8.0
• VMware NSX

Issue/Introduction

• PSOD when enable secure boot with error messages:
  UEFI Secure Boot failed at:
Failed to verify signatures of the following vib(s): [nsx-adf nsx-cfgagent nsx-content-mux nsx-cpp-libs nsx-esx-datapath nsx-exporter nsx-host nsx-ids nsx-monitoring\

• Disable secure boot then ESXi host can boot successfully but NSX VIBs signature are not available with the command 'esxcli software vib signature verify | grep nsx'
  Signature Not available: Host may have been upgraded from an older ESXi version

Environment

VMware vSphere ESXi 8.0.x
VMware NSX 4.x

Cause

NSX VIBs signature corrupted due to installing mismatching VIBs. The VIBs version must match the NSX Manager version. The correct upgrade methods can be found from the KB ESXi upgrade to vSphere 8.0 with NSX-T Data Center 4.1

Resolution

1. Put the ESXi host into maintenance mode.
2. Remove NSX configuration from the ESXi host in NSX Manager.
3. Reinstall ESXi host with the steps in Installation and Upgrade Scripts Used for ESXi Installation
4. Then in NSX Manager prepare the ESXi host again in Prepare ESXi Cluster Hosts as Transport Nodes