NSX upgrade pre-check failed due to REPO_SYNC failed due to API certificate expiration

Products

• VMware NSX

Issue/Introduction

• NSX upgrade pre-check failed Error message:
  [x.x.x.x] Unable to connect to File /repository/4.2.3.0.0.24866349/Manager/ovf/nsx-unified-appliance-secondary.vmdk on source x.x.x.x. Please verify that file exists on source and install-upgrade service is up.
  x.x.x.x are nsx manager IPs.
• REPO_SYNC status is Failed. Press Resolve could not resolve this issue.
• /var/log/proton/nsxapi.log has following error:
  INFO RepoSyncThread Command to check if remote file exists for https://x.x.x.x:443/repository/4.2.3.0.0.24866349/Manager/ovf/nsx-unified-appliance-secondary.vmdk returned result Command ResultImpl [commandName=null, pdi=xxxxx, status=FAILED, errorCode=60, errorMessage=curl_wrapper: (60) certificate has expired, commandOutput=null]
ERROR RepoSyncThread Unable to start repository sync operation. See logs for more details.

Environment

VMware NSX

Cause

API certificates are expired. So manager node could not sync repository with the manager which upgrade-coordinator is running on.

Resolution

Refer document https://techdocs.broadcom.com/us/en/vmware-cis/nsx/vmware-nsx/4-1/administration-guide/certificates/importing-certificates/replace-certificates-through-api.html to replace API certificates.