I have built a few SDWAN Viptela labs on hardware and software and had a number of issues with creating certificates mainly on the 3 controllers.
After having to rebuild a lab again for similar reasons I have run into the same problem. What I have noticed is something which suggests it may be the problem. That is when vManage signs the controller CSR's via the cli and creates the certificates I noticed that vManage lists details contained in the rootca not specified when the root ca was created.
Although it successfully signs the CSR and creates the certificate it outputs a set of variables such as subject=/C=US/ST=California/L=San Jose/ etc up to the O= where it uses the one I specify but none of these other variables were used when the root ca was created. I am in the UK so know this is not correct.
When I then try to install the cert even though vmanage successfully signs via cli I get the 'Failed to decrypt common name from certificate...' error.
