VMware Horizon Community
robsisk1972
Enthusiast
Enthusiast
Jump to solution

Preparing the Master Image with App Vol agent

Grettings all,

So every time my test users logon, they see this:

pastedImage_1.png

Although they see this message, All app stacks are attached and functional so I know the desktop is connecting to the App Volumes Server.  I'm calling this message a liar but I still want it to go away!

I think it is related to my master image and the fact that I am releasing the IP address before creating a snapshot to deploy.  Once I release the IP on the master, it can no longer communicate with the App volumes server.   Then I shut the Master down to take a snapshot.   I think this error is being captured on the master and being displayed to the users once the snapshot from this master is deployed.   Anyone have the same issue?  Are you releasing the IP before you shutdown your Master to create a snapshot?  Are you killing the App Volumes agent before shutting down the master?

Thanks
Rob

1 Solution

Accepted Solutions
Anandakrishnan
VMware Employee
VMware Employee
Jump to solution

Hey Rob,

You are Welcome.

Even with cert validation disabled it is still using SSL and is SAFE correct?

Yes. When you install App Volumes Manager, default self-signed certificate is installed. App Volumes agents use SSL to communicate with the App Volumes Manager and validate the certificate. Also SSL certificate validation is enabled by default when you install the App Volumes agent.

When you disable certificate validation, untrusted App Volumes Manager certificates are not validated , but communication between App Volumes Manager and agent still occurs over SSL.

For More Information :

Managing SSL Between App Volumes Manager and Agent

I hope this gives you a solution for your issue.

View solution in original post

Reply
0 Kudos
8 Replies
jlenag
Enthusiast
Enthusiast
Jump to solution

While we do not release the IP before taking a snapshot we do stop the AppVolumes service before we shut down.  I would definitely try stopping the service before you release the IP and see if that makes a difference.

Ray_handels
Virtuoso
Virtuoso
Jump to solution

Hey,

I would do that suggestion indeed. Also check the svservice.log file on the agent VDI machine. You would also see it connecting there.

What we do saw before is that the agent took to long to merge the appstacks and when Windows logon was finished it was still attaching/merging appstacks and throw out a similar error.

If it is just this, you could hide the popup using this key

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\svservice\Parameters\HidePopups=1 (DWORD)

Off course this is just fooling the agent to not show the message. I would still suggest looking into the svservice.log

PatrickBonich
Contributor
Contributor
Jump to solution

I had  case in with support for this same issue.  The problem appears to be fixed in 2.14.2.

Reply
0 Kudos
Anandakrishnan
VMware Employee
VMware Employee
Jump to solution

Hi,

Are you using any certificate for your AppVol manager ?

If not then "Disable certificate validation with App Volumes manager" while you installing agent on the VMs

Reply
0 Kudos
robsisk1972
Enthusiast
Enthusiast
Jump to solution

I am using a certificate and I see nothing in the agent logs that make me believe it is a cert issue.    Also, I am on the latest agent.   I have proved it is not an image issue by unassigning all app stacks and the error goes away.  I can duplicate this on demand by stopping and starting the App Volumes Service.   As soon as I restart the service, the message pops up immediately.   It's almost as if it is programmed to show this message when the service starts.   I am using port 443 with enable cert validation and want to continue this.   Curios if someone grabs just a normal vm in their environment and stops and starts the App Volumes Service on the desktop.   Do you immediately get the pop up of "connection Error Unable to contact App Volumes Manager.   Virtualization is disabled"?   The message pops up before it could possibly go out and attempt to connect to the App Volumes Manager.   It is instantaneous.

Reply
0 Kudos
Anandakrishnan
VMware Employee
VMware Employee
Jump to solution

Hello,

I would recommend you to try disabling certificate test check against AppVol manager and check still the error is repeating.

If pop-up is not coming then there is a communication issue with your certificate. By doing above steps we can get some ideas of what being wrong.

Reply
0 Kudos
robsisk1972
Enthusiast
Enthusiast
Jump to solution

Anandakrishnan

Thanks for the reply!

So I did what you suggested just on one machine and disabled the SSL Certificate validation in the registry.  Used this:

HKLM\System\CurrentControlSet\Services\svservices\Parameters

EnforceSSlCertificateValidation key to 0.

I also enable Popups again from the registry so I could see if the popup message was occurring.

I stopped the App Volumes service....NO Message

I started the App Volumes service....NO Message.

I guess this proves that it is a cert problem now....Any Ideas on how to fix or should I disable Cert Validation on the master and call it a day?   Even with cert validation disabled it is still using SSL and is SAFE correct?

Reply
0 Kudos
Anandakrishnan
VMware Employee
VMware Employee
Jump to solution

Hey Rob,

You are Welcome.

Even with cert validation disabled it is still using SSL and is SAFE correct?

Yes. When you install App Volumes Manager, default self-signed certificate is installed. App Volumes agents use SSL to communicate with the App Volumes Manager and validate the certificate. Also SSL certificate validation is enabled by default when you install the App Volumes agent.

When you disable certificate validation, untrusted App Volumes Manager certificates are not validated , but communication between App Volumes Manager and agent still occurs over SSL.

For More Information :

Managing SSL Between App Volumes Manager and Agent

I hope this gives you a solution for your issue.

Reply
0 Kudos