Error: An SSL error occurred

[niceguy001]

as shown in figure below.

i'm doing VDI session test but some of the remote desktop session can't be established and the Horizon Client show such message.

here's my lab's settings:

1. vSphere version:6.7U3

2. Horizon version:7.10

3. Horizon client version:5.2

4. windows 10 is utilized for client and target desktop VMs and the horizon client is installed in all the client VMs.

5. the client and target desktop pools' type: instant clone, floating assignment

6. the "Do not verify server identity certificates" is configured in all the Horizon clients.

7. all the infrastructure and VMs are utilizing the same and the only one VLAN, does not need routing.

i also turned off all the firewalls on Horizon Connection server, client VMs and target VMs, however, when i perform the automatic VDI session test, some of the client VMs (randomly) always cannot connect to the target VMs.

since only some of the client VMs cannot connect to the Horizon Connection server, I doubt that there's truly networking issues?

can anyone provide some clues for troubleshooting ?

[NathanosBlightc]

Run the MMC and add the snap-in of certificates (for the local machine) in your client and Remove all related certificates (machine, web, ...) of the VDI servers from your client. Most of them are probably self-signed, So let it trust them again if you require, and next try to connect to the desktop pool. Tell us the result

[niceguy001]

hi Amin,

thanks for answering!

i have a question,

my VDI test tool will automatically create some Active Directory users and control the client desktops' local admin account, which is already logged in, to use these AD users access the Horizon Client for further testing.

so this SSL error issue seemed to be the client desktops' problem? not the AD users which are created for Horizon Client login?

i'm wondering about whether i should add the certificate snap-in of either "my user account" or "computer account" in the client desktop...

[NathanosBlightc]

not the AD users which are created for Horizon Client login?

I don't think it's related to the AD Users, However you may need check the Horizon-side (Connection Servers) and Client-side logs and events more carefully.

i'm wondering about whether i should add the certificate snap-in of either "my user account" or "computer account" in the client desktop...

Add it for the Computer Account when you add the certmgr.msc in the MMC.

[niceguy001]

Hi Amin,

I did some work recently:

1. I followed this post's instructions, and a self-signed certificate is installed on horizon connection server and the details of it in the connection server console is shown in figure below.

however, my VDI session tests' results were not perfect and some client windows VMs still have the SSL error.

note that my client windows VMs are provisioned by the Horizon too.

so is it possible that the SSL error problem persist due to the "untrusted certificate"??

2. do I need to import the connection server's certificate into all the client VMs' MMC?

3. I checked the Horizon Client's logs on different windows desktops that had this "SSL error" and they all showed similar errors, as listed below:

ERROR (0750) [WinCDK] utils::ParseServerUrl : Unexpectedly unable to parse URL ''.

ERROR (077C) [WinCDK] UpdateMgrCDS::CdsLogCallback : CdsUtil_RemoveFile: Unable to remove file C:\Users\user\AppData\Local\Temp\cdstmp_1692_0

ERROR (077C) [WinCDK] UpdateMgrCDS::CdsLogCallback : Failed to finish active transfer for https://softwareupdate.vmware.com/horizon-clients/index.xml: CDS_HTTP_HOST_RESOLVE_ERROR

INFO (0750) [WinCDK] BaseServices::ErrorCallback : Error(Taskname:CdkSetLocaleTask, domain:54, code:35) Callback: Entry.

ERROR (0750) [WinCDK] DefaultErrorHandler::ProcessError : DefaultErrorHandler process error 'Error: An SSL error occurred' (code=35).

ERROR (0468) [WinCDK] UpdateMgrCDS::CdsLogCallback : CdsUtil_RemoveFile: Unable to remove file C:\Users\user\AppData\Local\Temp\cdstmp_7824_0

2019-10-28T20:26:35.526-07:00| host-1128| I125: DictionaryLoad: Cannot open file "C:\ProgramData\VMware\VMware Horizon View\config.ini": The system cannot find the file specified.

2019-10-28T20:26:35.526-07:00| host-1128| I125: [msg.dictionary.load.openFailed] Cannot open file "C:\ProgramData\VMware\VMware Horizon View\config.ini": The system cannot find the file specified.

2019-10-28T20:26:35.526-07:00| host-1128| I125: PREF Optional preferences file not found at C:\ProgramData\VMware\VMware Horizon View\config.ini. Using default values.

2019-10-28T20:26:35.541-07:00| host-1128| I125: DictionaryLoad: Cannot open file "C:\ProgramData\VMware\VMware Horizon View\settings.ini": The system cannot find the file specified.

2019-10-28T20:26:35.541-07:00| host-1128| I125: [msg.dictionary.load.openFailed] Cannot open file "C:\ProgramData\VMware\VMware Horizon View\settings.ini": The system cannot find the file specified.

2019-10-28T20:26:35.541-07:00| host-1128| I125: PREF Optional preferences file not found at C:\ProgramData\VMware\VMware Horizon View\settings.ini. Using default values.

2019-10-28T20:26:35.541-07:00| host-1128| I125: DictionaryLoad: Cannot open file "C:\ProgramData\VMware\VMware Horizon View\config.ini": The system cannot find the file specified.

2019-10-28T20:26:35.541-07:00| host-1128| I125: [msg.dictionary.load.openFailed] Cannot open file "C:\ProgramData\VMware\VMware Horizon View\config.ini": The system cannot find the file specified.

2019-10-28T20:26:35.541-07:00| host-1128| I125: PREF Optional preferences file not found at C:\ProgramData\VMware\VMware Horizon View\config.ini. Using default values.

2019-10-28T20:26:35.541-07:00| host-1128| I125: DictionaryLoad: Cannot open file "C:\Users\user\AppData\Roaming\VMware\config.ini": The system cannot find the file specified.

2019-10-28T20:26:35.541-07:00| host-1128| I125: [msg.dictionary.load.openFailed] Cannot open file "C:\Users\user\AppData\Roaming\VMware\config.ini": The system cannot find the file specified.

2019-10-28T20:26:35.541-07:00| host-1128| I125: PREF Optional preferences file not found at C:\Users\user\AppData\Roaming\VMware\config.ini. Using default values.

I attached the logs but I don't think these error messages truly help.

can anyone provide some clues?

[NathanosBlightc]

1. Yes, that's still a possible cause of the issue. Time, DNS, Certificate are most likely root of such as these problems

2. If you request your certificate from a valid internal CA server that is one of root CA inside all your computers (for example an enterprise CA integrated by AD), then no it doesn't need to import them manually. They can automatically trust all certificates generated by their trusted CA.

3. However, you can configure your horizon client to don't verify the certificate ... Did you ever test it? I Suggest it because I want to be ensured about the reason for your problem

[niceguy001 · Accepted solution]

I checked the time sync between servers, hosts and desktops and corrected, unfortunately this did not help.

all the Horizon Clients are configured with "Do not verify server identity certificate" but the SSL error still occurred on dozens of windows client VMs randomly.

Now I believe that I found the ultimate solution:VMware Horizon View Client URI's and SSL Issues

This post just saved my ass, according to my VDI test results.

By configuring the group policy of Horizon Client security setting in the golden image and use it for the desktop pool, the "SSL error" problem can be minimized or even solved completely.

if anyone knows a better solution please share.

@Amin thanks again for your professional answers, these are valuable for troubleshooting !