"The certificate with id failed to parse with error: null" warning in upgrade pre-checks for expired LocalManager certificate

Products

• VMware NSX

Issue/Introduction

• You performed an upgrade pre-check and received a warning for NSX Managers:
  The certificate with id ######-####-####-####-########## failed to parse with error: null. Please delete (if unused) or replace this certificate prior to upgrading.

• From the UI, navigate to System > Certificates and look for the id mentioned in the warning.
• The certificate matching the ID is an expired LocalManager certificate.
• The environment does not use NSX Federation.

Environment

VMware NSX 4.0.x
VMware NSX-T Data Center 3.2.x

Cause

The upgrade pre-check verifies certificate validity and reports back if there are issues, for example expired or unsupported certificates.

Resolution

• Replace the expired certificate:
  Replacing local manager certificate in brownfield non federated VMware NSX-T
• Once replaced you will be able to delete the expired LocalManager certificate from the UI:

1. 1. Navigate to: System > Certificates
   2. Click the 3 vertifical elipses left of the expired Local Manager certificate and click 'Delete'

• •  

Additional Information

• Starting with NSX 4.1, generates only when Local Manager servers are in the NSX Federation environment. The certificate gets deleted if the Local Manager moves out of the NSX Federation environment.
• The LocalManager certificate is the PI certificate for this specific Local Manager.
• Certificates for NSX and NSX Federation