VMware

This Question is Possibly Answered

1 "correct" answer available (10 pts) 2 "helpful" answers available (6 pts)
5 Replies Last post: Aug 20, 2008 12:39 AM by JoJoGabor  

VC error - unable to decrypt passwords stored in the customization specification posted: Apr 14, 2008 6:32 AM

Click to view pb3's profile Novice 10 posts since
Apr 7, 2008
Hi Folks,

I'm a relative newbie to Vmware and this is my first post so please go easy on me :)

I'm using VC 2.5 / ESX 3.5

Now I recently went through the steps in an article I found in this community to configure VC to use a certificate issued by a Microsoft CA. This makes sense in our case as we have an internal Microsoft CA which is automatically trusted by our clients. I understand however that use of a Microsoft CA is not officially supported by VMware?

The change of certificate appeared to work and the usual certificate warning is no longer displayed on connection to the VC.

However I've just noticed that we are no longer able to deploy VMs using customization specifications. The deployment fails with an error "The VirtualCenter server is unable to decrypt passwords stored in the customization specification". We've tried creating a new customization template but had exactly the same results.

I suspect the problem is related to our changing the default VC certificate. I remember as part of process of changing the certificate you need to re-encrypt the password used for the database connection. This is proably a similar sort of thing. I not sure whether the use of the of a Microsoft CA plays any part in this.

So.. Has anyone had similar problems after changing the default VC certificate?

I've done a search and a couple of previous posts suggests a workaround of exporting the customization file and editing it to remove the password encryption setting. I'm not really happy with this workaround as the customization file contains administrator credentials.

Any help/advice appreciated!

Peter
Click to view fleeb's profile Enthusiast 38 posts since
Apr 18, 2006

I'm having this same issue, so any help would be much appreciated. I know I can export the cusotmization spec and store the passwords in plain text, that is just not optimal in our environment.


Thanks,
Mike

Click to view JoJoGabor's profile Expert 285 posts since
Apr 11, 2008
Did you ever resolve this issue? I've got exactly the same problem after updating the certs
Click to view steve31783's profile Hot Shot 178 posts since
Nov 8, 2006
Has anyone figured this out a solution to this? I am having this exact same issue.
Click to view JoJoGabor's profile Expert 285 posts since
Apr 11, 2008
I have recently applied update 2 but still have the same problem. This is a fairly big problem as we want to use the Citrix VDI broker which needs to have a trusted certificate to talk to the sdk and you also need to be able to provision new machines on the fly.

VMware Developer

SDKs, APIs, Videos, Learn and much more in the Developer community.

Learn More

Developer Sample Code

Increase your developer productivity with VMware API sample code.

Learn More

VMworld Sessions & Labs

Online access to the latest VMworld Sessions & Labs and online services.

Learn more

Purchase PSO Credits Online

Purchase credits to redeem training and consulting services online.

Buy Now

Community Hardware Software

View reported configurations or report your own.

Learn More

VMware vSphere

Come witness the next giant leap in virtualization.

Register Today

Communities