Error while updating VCSA 8 – Unable to upgrade as VECS force refresh has failed.

I faced this issue while I was trying to update my vCenter Server appliance version 8 to update 3.

Because I renewed the certificate several times and changed the hostnames, some of the certificate was remaining and must be deleted.

I got this error as well in /var/log/vmware/vmafdd/vmafdd.log

2024-07-14T16:06:34.040 [vmafdd][INFO] VecsSrvDeleteCertificate: Failed to delete certificate (alias 6f4c637fdc3b3cc2048b1542c758dc4a3a718634) (line: 987) (file: ../../../server/vmafd/vecsserviceapi.c)2024-07-14T16:06:34.040 [vmafdd][ERROR] [Error - 1006, ../../../server/vmafd/rootfetch.c:590]2024-07-14T16:06:34.040 [vmafdd][ERROR] [Error - 1006, ../../../server/vmafd/rootfetch.c:889]2024-07-14T16:06:34.040 [vmafdd][ERROR] [Error - 1006, ../../../server/vmafd/rootfetch.c:266]

I tried to delete the alias which it was complaining about via this command:

/usr/lib/vmware-vmafd/bin/vecs-cli entry delete –store TRUSTED_ROOTS –alias 6f4c637fdc3b3cc2048b1542c758dc4a3a718634

as you see below after executing this command the problem solved and the errors no longer is appeared

and upgrade can be continued :

Reference: https://knowledge.broadcom.com/external/article/326288/removing-expired-ca-certificates-from-th.html