The upgrade from vCenter Server 5.1 to vCenter Server 5.5 (5.5.0 and 5.5.0a) fails during the SSO installation with the following error message:
The existing ssl certificate is invalid
After verifying the certificate i could confirm that it is valid and not expired. After troubleshooting the update log I figured out that the problem was caused by a wrong registry entry. The old 5.1 installation was using an IP address instead of the vCenters FQDN.
Howto fix "The existing ssl certificate is invalid" error message during SSO Update
- Press Start -> Run...
- Type regedit and click OK
- Navigate to
HKEY_LOCAL_MACHINE\Software\VMware, Inc.\VMware Infrastructure\SSOServer\
- Edit the Key FQDNIP to reflect the vCenter Server FQDN
- Remove the folder CIS located at %ProgramData%\Vmware\
- Restart vCenter Server Services
The upgrade should now succeed without the invalid certificate error message.
I to reflect the vCenter Server FQDN ,and restart server but I have still the same problem.
The second issue is that I don't have a folder CIS located at %ProgramData%\Vmware\
I agree with Jarek. I performed these steps and was ot able to move forward. I am still receiving the same error message.
I had this issue. For me it turns out that the issue was that the FqdnIp was set to 127.0.0.1. It apparently doesn't like this. I changed it to the IP address of the server and tried the updater again. This time it worked.
As the other commenters have stated, i didn't have any CIS folder and I did not have to restart any services. Just changed the FqdnIp registry key to the non-localhost IP of the server and relaunched the update process.
i followed the same step instead of FQDN IP, I tried to insert the hostname instead of IP of and installation succeded