Got into the same error, updating with custom certifate failed along the way.
I was able to revert to the VMware default certificates, but this error remains.
I suspect the STS certificate chain in the SSO configuration is invalid.
But without access to the web client,, I cannot check.
Any ideas?
Regards,
@hharold