The upgrade from vCenter Server 5.1 to vCenter Server 5.5 (5.5.0 and 5.5.0a) fails during the SSO installation with the following error message:
The existing ssl certificate is invalid
After verifying the certificate i could confirm that it is valid and not expired. After troubleshooting the update log I figured out that the problem was caused by a wrong registry entry. The old 5.1 installation was using an IP address instead of the vCenters FQDN.
Howto fix "The existing ssl certificate is invalid" error message during SSO Update
- Press Start -> Run...
- Type regedit and click OK
- Navigate to
HKEY_LOCAL_MACHINE\Software\VMware, Inc.\VMware Infrastructure\SSOServer\
- Edit the Key FQDNIP to reflect the vCenter Server FQDN
- Remove the folder CIS located at %ProgramData%\Vmware\
- Restart vCenter Server Services
The upgrade should now succeed without the invalid certificate error message.