Installing a SSL Cert on VMware View

[kkitzul]

I followed the following steps exactly:

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=100870...

When i start the vmware view connection server service it stops after 15 or so seconds. When i rename the locked.properties files it will start without issue.

Here is the vmware view log that appears to be causing it to stop.

Message: Couldn't create SSL socket factory com.vmware.vdi.ice.server.q.b(SourceFile:359) java.io.IOException: failed to decrypt safe contents entry: javax.cry

Type: Error

Time: 10/15/09 10:40:36 AM

Module: q

Thread: Thread-1

Additional details:

Couldn't create SSL socket factory com.vmware.vdi.ice.server.q.b(SourceFile:359)

java.io.IOException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded

at com.sun.net.ssl.internal.ssl.PKCS12KeyStore.engineLoad(Unknown Source)

at java.security.KeyStore.load(Unknown Source)

at com.vmware.vdi.ice.server.q.b(SourceFile:340)

at com.vmware.vdi.ice.server.q.b(SourceFile:129)

at com.vmware.vdi.ice.server.f.a(SourceFile:115)

at com.vmware.vdi.ice.server.Ice.startServer(SourceFile:674)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

at java.lang.reflect.Method.invoke(Unknown Source)

at com.sun.jmx.mbeanserver.StandardMetaDataImpl.invoke(Unknown Source)

at com.sun.jmx.mbeanserver.MetaDataImpl.invoke(Unknown Source)

at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(Unknown Source)

at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(Unknown Source)

at com.vmware.vdi.ice.server.JMXServer.main(SourceFile:165)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

at java.lang.reflect.Method.invoke(Unknown Source)

at net.propero.workspace.windowsinfrastructure.tunnelservice.TunnelService.run(SourceFile:34)

at java.lang.Thread.run(Unknown Source)

Caused by: javax.crypto.BadPaddingException: Given final block not properly padded

at com.sun.crypto.provider.SunJCE_h.b(DashoA12275)

at com.sun.crypto.provider.SunJCE_h.b(DashoA12275)

at com.sun.crypto.provider.SunJCE_ac.b(DashoA12275)

at com.sun.crypto.provider.PKCS12PBECipherCore$PBEWithSHA1AndRC2_40.engineDoFinal(DashoA12275)

at javax.crypto.Cipher.doFinal(DashoA12275)

... 21 more

[kkitzul]

Noone has seen this issue before or has any insight?

[mittim12]

Have you verified the password specified in the locked properties is indeed the one used when creating the cert? What about recreating the cert again?

If you found this or any other post helpful please consider the use of the Helpful/Correct buttons to award points

[AndreTheGiant]

See:

http://www.tcpdump.com/kb/virtualization/virtual-desktop/installing-ssl-certificates-in-vmware-view/...

Andre

[kkitzul]

Thank you.

The site you gave me Andre fixed he problem. I had to make one modification. Because the cert i receieved did not come in PKCS7 format I had to do 1 more step.

In case anyone else has this issue I did the following:

Exporting into the PKCS7 format

To export into the PKXS7 format:

1. Open the certificate file.

2. Click Details > Copy to File.

3. Click PKCS7, then select Include Details of Certificate.

Taken from http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=100870...

Thanks!

[DSeaman]

Take note that on VMware View 5.1, the SSL certificate configuration process is completely different. The references above work for View 5.0 and earlier, but you will need the new procedure for View 5.1. You can find the new process here:

http://derek858.blogspot.com/2012/05/vmware-view-51-installation-part-1-view.html