Solved: Re: Replace self signed certs with CA signed certs

crawfordm · ‎03-26-2015

I have a vCAC 6.1 environment. I am using the vCAC documentation to replace the self signed certs with certs. When I get to this step in the documentation it fails - vCloud Automation Center Documentation Center

Is the error below telling me there is a problem with the wstvcacapp01 cert? RemoteCertificateNameMismatch problem?

C:\Program Files (x86)\VMware\vCAC\Web API\ConfigTool>Vcac-Config.exe DownloadRootCertificates --Pkcs7CertPath "C:\Program Files (x86)\VMware\vCAC\Web API\SSO.p7b" -v

System.Data.Services.Client.DataServiceQueryException: An error occurred while processing this request. ---> System.Data.Services.Client.DataServiceClientException: <!DOCTYPE html>

<html>

<head>

<title>Certificate is not trusted (RemoteCertificateNameMismatch). Subject: CN=wstvcacapp01.cticore.local, OU=CTIW, O=NJVC, L=Ofallon, S=IL, C=US Thumbprint: 9A80D1EC61170B87C4203DBC8256FDB2326A8EA

C</title>

<style>

body {font-family:"Verdana";font-weight:normal;font-size: .7em;color:black;}

p {font-family:"Verdana";font-weight:normal;color:black;margin-top: -5px}

b {font-family:"Verdana";font-weight:bold;color:black;margin-top: -5px}

H1 { font-family:"Verdana";font-weight:normal;font-size:18pt;color:red }

H2 { font-family:"Verdana";font-weight:normal;font-size:14pt;color:maroon }

pre {font-family:"Consolas","Lucida Console",Monospace;font-size:11pt;margin:0;padding:0.5em;line-height:14pt}

.marker {font-weight: bold; color: black;text-decoration: none;}

.version {color: gray;}

.error {margin-bottom: 10px;}

.expandable { text-decoration:underline; font-weight:bold; color:navy; cursor:hand; }

@media screen and (max-width: 639px) {

pre { width: 440px; overflow: auto; white-space: pre-wrap; word-wrap: break-word; }

}

@media screen and (max-width: 479px) {

pre { width: 280px; }

}

</style>

</head>

<span><H1>Server Error in '/Repository' Application.<hr width=100% size=1 color=silver></H1>

<h2> <i>Certificate is not trusted (RemoteCertificateNameMismatch). Subject: CN=wstvcacapp01.cticore.local, OU=CTIW, O=NJVC, L=Ofallon, S=IL, C=US Thumbprint: 9A80D1EC61170B87C4203DBC8256FDB232

6A8EAC</i> </h2></span>

<b> Description: </b>An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated

in the code.

<b> Exception Details: </b>VMware.Cafe.UntrustedCertificateException: Certificate is not trusted (RemoteCertificateNameMismatch). Subject: CN=wstvcacapp01.cticore.local, OU=CTIW, O=NJVC, L=Ofal

lon, S=IL, C=US Thumbprint: 9A80D1EC61170B87C4203DBC8256FDB2326A8EAC<br><br>

<b>Source Error:</b> <br><br>

<tr>

<td>

<code>

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

</code>

</td>

</tr>

</table>

<br>

<b>Stack Trace:</b> <br><br>

<tr>

<td>

[UntrustedCertificateException: Certificate is not trusted (RemoteCertificateNameMismatch). Subject: CN=wstvcacapp01.cticore.local, OU=CTIW, O=NJVC, L=Ofallon, S=IL, C=US Thumbprint: 9A80D1EC61170B87C4203D

BC8256FDB2326A8EAC]

System.Net.TlsStream.EndWrite(IAsyncResult asyncResult) +8277683

System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar) +213

[WebException: The underlying connection was closed: An unexpected error occurred on a send.]

System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult) +8286956

System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar) +98

[HttpRequestException: An error occurred while sending the request.]

System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +144

System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +84

VMware.Cafe.<<GetResource>b__0>d__3.MoveNext() +601

System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +144

System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +84

VMware.Cafe.<RetryWebRequestWrapper>d__97.MoveNext() +1144

System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +144

System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +84

VMware.Cafe.<GetResource>d__7`1.MoveNext() +692

System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +144

System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +84

VMware.Cafe.<CreateSecurityTokenServiceAsync>d__2f.MoveNext() +366

System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +144

System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +84

VMware.Cafe.<GetHolderOfKeyTokenAsync>d__4.MoveNext() +321

System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +144

System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +84

VMware.Cafe.<CreateDefaultSecurityContextAsync>d__34.MoveNext() +306

System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +144

System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +84

VMware.Cafe.<CreateAsync>d__1d`1.MoveNext() +397

System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) +144

System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +84

VMware.Cafe.<CreateAsync>d__1a`1.MoveNext() +330

[AggregateException: One or more errors occurred.]

System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification) +5863512

DynamicOps.Repository.Runtime.SecurityModel.CafeSecurityProvider..ctor(SecurityModelContext currentContext) +172

DynamicOps.Repository.Runtime.SecurityModel.SecurityModelContext..ctor(String connectionString) +202

DynamicOps.Repository.Runtime.Common.RepositoryRuntime.Initialize() +812

[HttpException (0x80004005): One or more errors occurred.]

System.Web.HttpApplicationFactory.EnsureAppStartCalledForIntegratedMode(HttpContext context, HttpApplication app) +12639357

System.Web.HttpApplication.RegisterEventSubscriptionsWithIIS(IntPtr appContext, HttpContext context, MethodInfo[] handlers) +175

System.Web.HttpApplication.InitSpecial(HttpApplicationState state, MethodInfo[] handlers, IntPtr appContext, HttpContext context) +304

System.Web.HttpApplicationFactory.GetSpecialApplicationInstance(IntPtr appContext, HttpContext context) +404

System.Web.Hosting.PipelineRuntime.InitializeApplication(IntPtr appContext) +475

[HttpException (0x80004005): One or more errors occurred.]

System.Web.HttpRuntime.FirstRequestInit(HttpContext context) +12656404

System.Web.HttpRuntime.EnsureFirstRequestInit(HttpContext context) +159

System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context) +12496021

</pre></code>

</td>

</tr>

</table>

<br>

<b>Version Information:</b> Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.0.30319.34237

</font>

</body>

</html>

<!--

[UntrustedCertificateException]: Certificate is not trusted (RemoteCertificateNameMismatch). Subject: CN=wstvcacapp01.cticore.local, OU=CTIW, O=NJVC, L=Ofallon, S=IL, C=US Thumbprint: 9A80D1EC61170B87C4203

DBC8256FDB2326A8EAC

at System.Net.TlsStream.EndWrite(IAsyncResult asyncResult)

at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar)

[WebException]: The underlying connection was closed: An unexpected error occurred on a send.

at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)

at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)

[HttpRequestException]: An error occurred while sending the request.

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at VMware.Cafe.JsonRestClient.<>c__DisplayClass1`1.<<GetResource>b__0>d__3.MoveNext()

--- End of stack trace from previous location where exception was thrown ---

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at VMware.Cafe.JsonRestClient.<RetryWebRequestWrapper>d__97.MoveNext()

--- End of stack trace from previous location where exception was thrown ---

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at VMware.Cafe.JsonRestClient.<GetResource>d__7`1.MoveNext()

--- End of stack trace from previous location where exception was thrown ---

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at VMware.Cafe.ComponentRegistryClientFactory.<CreateSecurityTokenServiceAsync>d__2f.MoveNext()

--- End of stack trace from previous location where exception was thrown ---

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at VMware.Cafe.ComponentRegistryClientFactory.<GetHolderOfKeyTokenAsync>d__4.MoveNext()

--- End of stack trace from previous location where exception was thrown ---

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at VMware.Cafe.ComponentRegistryClientFactory.<CreateDefaultSecurityContextAsync>d__34.MoveNext()

--- End of stack trace from previous location where exception was thrown ---

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at VMware.Cafe.ComponentRegistryClientFactory.<CreateAsync>d__1d`1.MoveNext()

--- End of stack trace from previous location where exception was thrown ---

at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)

at VMware.Cafe.ComponentRegistryClientFactory.<CreateAsync>d__1a`1.MoveNext()

[AggregateException]: One or more errors occurred.

at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)

at DynamicOps.Repository.Runtime.SecurityModel.CafeSecurityProvider..ctor(SecurityModelContext currentContext)

at DynamicOps.Repository.Runtime.SecurityModel.SecurityModelContext..ctor(String connectionString)

at DynamicOps.Repository.Runtime.Common.RepositoryRuntime.Initialize()

[HttpException]: One or more errors occurred.

at System.Web.HttpApplicationFactory.EnsureAppStartCalledForIntegratedMode(HttpContext context, HttpApplication app)

at System.Web.HttpApplication.RegisterEventSubscriptionsWithIIS(IntPtr appContext, HttpContext context, MethodInfo[] handlers)

at System.Web.HttpApplication.InitSpecial(HttpApplicationState state, MethodInfo[] handlers, IntPtr appContext, HttpContext context)

at System.Web.HttpApplicationFactory.GetSpecialApplicationInstance(IntPtr appContext, HttpContext context)

at System.Web.Hosting.PipelineRuntime.InitializeApplication(IntPtr appContext)

[HttpException]: One or more errors occurred.

at System.Web.HttpRuntime.FirstRequestInit(HttpContext context)

at System.Web.HttpRuntime.EnsureFirstRequestInit(HttpContext context)

at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context)

-->

at System.Data.Services.Client.QueryResult.ExecuteQuery()

at System.Data.Services.Client.DataServiceRequest.Execute[TElement](DataServiceContext context, QueryComponents queryComponents)

--- End of inner exception stack trace ---

at System.Data.Services.Client.DataServiceRequest.Execute[TElement](DataServiceContext context, QueryComponents queryComponents)

at System.Data.Services.Client.DataServiceQuery`1.Execute()

at System.Data.Services.Client.DataServiceQuery`1.GetEnumerator()

at System.Linq.Enumerable.FirstOrDefault[TSource](IEnumerable`1 source)

at System.Data.Services.Client.DataServiceQueryProvider.ReturnSingleton[TElement](Expression expression)

at System.Linq.Queryable.FirstOrDefault[TSource](IQueryable`1 source)

at DynamicOps.Repository.CafeClientAbstractFactory.LoadComponentRegistryUri()

at System.Lazy`1.CreateValue()

at System.Lazy`1.LazyInitValue()

at DynamicOps.Repository.CafeClientAbstractFactory.get_CafeUri()

at VMware.Cafe.ComponentRegistryClientFactory..ctor(ICafeServiceClientFactoryFactory abstractFactory)

at DynamicOps.Repository.CafeClientAbstractFactory.CreateClientFactory()

at System.Lazy`1.CreateValue()

at System.Lazy`1.LazyInitValue()

at VMware.Cafe.Client.Registration.DownloadRootCertificates(String rootEncryptionCertPath, String rootSigningCertPath, String pkcs7Path)

at VMware.VcacConfig.ComponentRegistryCommands.DownloadRootCertificates.Execute(CommandLineParser parser)

Warning: Non-zero return code. Command failed.

------------------------------------------------------------------ If you found this answer useful please consider the use of the Helpful or Correct buttons to award points. Thanks, Marc Crawford CCNA, MCSE, MCTS, A+, Net+, Sec +, VCA-WM, VCA-DCV, VCA-Cloud, VCA-NV, VCP-NV, VCP-DCV, VCP, VCAP5-DCA http://gplus.to/marccrawford http://blog.marccrawford.com @uber_tech_geek

mdittbrenner · ‎03-26-2015

I could be totally off base, but first thing vcac appliances and the identity server need to be in pem format.

That looks like the root chain you are importing.

I would suggest following:

http://www.virtualizationteam.com/cloud/generating-certificates-for-the-identity-appliancevcac-appli...

This will tell you how to create the certificates and import them.

View solution in original post

mdittbrenner · ‎03-26-2015

I could be totally off base, but first thing vcac appliances and the identity server need to be in pem format.

That looks like the root chain you are importing.

I would suggest following:

http://www.virtualizationteam.com/cloud/generating-certificates-for-the-identity-appliancevcac-appli...

This will tell you how to create the certificates and import them.

crawfordm · ‎03-27-2015

I have looked at that article and followed the steps to create the correct certs. After the certs are correctly imported into the identity appliance and the vCAC appliance, I still recieve the same error when I am trying to Update the IaaS Servers with the Certificate for the Single Sign-On Server (vCloud Automation Center Documentation Center)

C:\Program Files (x86)\VMware\vCAC\Web API\ConfigTool>Vcac-Config.exe DownloadRootCertificates --Pkcs7CertPath "C:\Program Files (x86)\VMware\vCAC\Web API\SSO.p7b" -v

System.Data.Services.Client.DataServiceQueryException: An error occurred while processing this request. ---> System.Data.Services.Client.DataServiceClientException: <!DOCTYPE html>

<html>

<head>

<title>Certificate is not trusted (RemoteCertificateNameMismatch, RemoteCertificateChainErrors). Subject: CN=wstvcacapp01.cticore.local, OU=CTIW, O=NJVC, C=US Thumbprint: 234DBC007D1825BD3A8730C4C7

0D87F8128FFEC5</title>

<style>

body {font-family:"Verdana";font-weight:normal;font-size: .7em;color:black;}

p {font-family:"Verdana";font-weight:normal;color:black;margin-top: -5px}

b {font-family:"Verdana";font-weight:bold;color:black;margin-top: -5px}

H1 { font-family:"Verdana";font-weight:normal;font-size:18pt;color:red }

H2 { font-family:"Verdana";font-weight:normal;font-size:14pt;color:maroon }

pre {font-family:"Consolas","Lucida Console",Monospace;font-size:11pt;margin:0;padding:0.5em;line-height:14pt}

.marker {font-weight: bold; color: black;text-decoration: none;}

.version {color: gray;}

.error {margin-bottom: 10px;}

.expandable { text-decoration:underline; font-weight:bold; color:navy; cursor:hand; }

@media screen and (max-width: 639px) {

pre { width: 440px; overflow: auto; white-space: pre-wrap; word-wrap: break-word; }

}

@media screen and (max-width: 479px) {

pre { width: 280px; }

}

</style>

</head>

<span><H1>Server Error in '/Repository' Application.<hr width=100% size=1 color=silver></H1>

<h2> <i>Certificate is not trusted (RemoteCertificateNameMismatch, RemoteCertificateChainErrors). Subject: CN=wstvcacapp01.cticore.local, OU=CTIW, O=NJVC, C=US Thumbprint: 234DBC007D1825BD3A873

0C4C70D87F8128FFEC5</i> </h2></span>

<b> Description: </b>An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated

in the code.

<b> Exception Details: </b>VMware.Cafe.UntrustedCertificateException: Certificate is not trusted (RemoteCertificateNameMismatch, RemoteCertificateChainErrors). Subject: CN=wstvcacapp01.cticore.

local, OU=CTIW, O=NJVC, C=US Thumbprint: 234DBC007D1825BD3A8730C4C70D87F8128FFEC5<br><br>

<b>Source Error:</b> <br><br>

<tr>

<td>

<code>

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

</code>

</td>

</tr>

</table>

<br>

<b>Stack Trace:</b> <br><br>

<tr>

<td>

[UntrustedCertificateException: Certificate is not trusted (RemoteCertificateNameMismatch, RemoteCertificateChainErrors). Subject: CN=wstvcacapp01.cticore.local, OU=CTIW, O=NJVC, C=US Thumbprint: 234DBC007

D1825BD3A8730C4C70D87F8128FFEC5]