Upgrading the vCenter Server from 5.5 to 6.0 fails at the pre-checks with the error message “vCenter CA certificate not verified. Stopping”
Recently I encountered an issue on one of the customer’s environment where customer was upgrading the environment from 5.5 to 6.0 and the pre-checks fails with the below error message as displayed in the screenshot.
The error looked pretty complex but the resolution seemed to be pretty simple. During upgrade the vCenter was expecting chain of vCenter and the actual root certificate under below location.
We followed the below procedure to get past the issue.
Copy vCenter certificate, intermediate cert(if any)and root certificate on the same location as mentioned above.
Copy the content (open the certificate in notepad) of the certificates and add it to the one single file where vCenter certificate would follow by intermediate (if any) ending with root certificate. For the better understanding you can find the below format.
Ew5tbm5leHQtQUQtMS1DQTAeFw0xMzAyMDExNjAxMDNaFw0xNTAyMDExNjExMDNa <—–vCenter Cert
GXaS5/YCv5B4q4T+j5pa2f+a61ygjN1YQRoZf2CHLe7Zq89Xv90nhPM4foWdNNkr <—–Intermediate Cert
GXaS5/YCv5B4q4T+j5pa2f+a61ygjN1YQRoZf2CHLe7Zq89Xv90nhPM4foWdNNkr <—–Root Cert
Save the above file has cacert.pem under C:\ProgramData\VMware\VMware VirtualCenter\SSL.
We later went ahead re-ran the upgrade and it just proceeded further to complete successfully.
Hope this article was helpful. Watchout for more.