You cannot visit vcenter.testall.local right now because the website sent scrambled credentials that Google Chrome cannot process

[abhi2302]

Dear Friends ,

On vmware work station I had install vcenter 6.7 on windows 2012 r2.  Then I install root certificate on my desktop browser for vcenter 6.7 . 

FQDN: vcenter.testall.local

After couple of weeks later I removed vcenter and installed again with same ip and FQDN name (vcenter.testall.local) . Installation was successful . But now when I am trying to connect vcenter by using google chrome browser from my desktop . I am getting following error. I guess root certificate is creating issue . Not able to understand what need to be done now ?

"Your connection is not private

Attackers might be trying to steal your information from vcenter.testall.local (for example, passwords, messages, or credit cards). Learn more

NET::ERR_CERT_INVALID

Help improve Chrome security by sending URLs of some pages you visit, limited system information, and some page content to Google. Privacy policy

ReloadHide advanced

vcenter.testall.local normally uses encryption to protect your information. When Google Chrome tried to connect to vcenter.testall.local this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be vcenter.testall.local, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Google Chrome stopped the connection before any data was exchanged.

You cannot visit vcenter.testall.local right now because the website sent scrambled credentials that Google Chrome cannot process. Network errors and attacks are usually temporary, so this page will probably work later."

[Alex_Romeo]

Hi,

You need to remove the certificate and install the one generated by the new vCenter installation.

ARomeo

[abhi2302]

Dear ARomeo,

I cant access vcenter server through webclient. Could you please tell me without access webclient how do I unistall certificate from vcenter server ?

Since I cant access vcenter server then how do I get root certificate from vcenter server ?

Regards

Abhimanyu

[Alex_Romeo]

Hi,

if you are using Windows vCenter Server, you won’t be able to download the certificate file, since there will be no link to download the archive with the certificate. This file is stored on vCenter Server (running Windows) in C:\ProgramData\VMware\SSL\. (C:\Programdata\VMware\VMware VirtualCenter\SSL in earlier versions.) The certificate from this directory has to be imported on a client.

Take it from the folder specified in the explanation (above) install it as a normal certificate.

ARomeo

[abhi2302]

Hello,

Thanks for the update : Yes I am using vcenter server on windows 2012 r2 . But I could not find the location mentioned by you " C:\ProgramData\VMware\SSL" There is no ssl folder .

[Alex_Romeo]

Hi,

you opened "c: \ ProgramFile" not "c: \ ProgramData".

"c: \ ProgramData" is a hidden folder, you have to enable the visualization in the control panel of Windows Server 2012.

ARomeo

[a_p_]

On vmware work station I had install vcenter 6.7 on windows 2012 r2.  Then I install root certificate on my desktop browser for vcenter 6.7 . 

FQDN: vcenter.testall.local

What you need to do is to uninstall the old vCenter Server's root certificate from your desktop, so that the browser doesn't use this old certificate anymore to en-/decrypt data for your new vCenter Server's connection.

As an alternative you could try, and access the new vCenter Server's web page by it's IP address.

André

[abhi2302]

How can I delete or  uninstall  root certificate of  the old vCenter Server from my  desktop? This is what I am traying to do last two days but not able to do . Can you send me any link for that ?

[a_p_]

Sorry, I thought that you know this, since you mentioned that you've installed it.

Open the MMC console to manage Certificates, and select the appropriate location (Local System, or User, depending on where you've installed the certificate). From there you should find the vCenter Server Certificate in the Trusted Root Certification Authorities. Not sure about it's name in case of vCenter Server for Windows, but the vCSA's root certificate is simply named "CA".

André

[imworkinonit]

How is this done on macOS? I can't find the old certificates in my Keychain and I'm still getting this error.

[TomKalabis]

same problem on MAC here. do you resolve this problem ?

the safari is OK, the chrome is problem.

[ErinMcGrath]

I am having this same issue. I can access vCenter on my MacBook Windows 10 VM, but on Chrome on the MacBook.

[tdubb123]

try this

Right click, select inspect element

click on console tab

Copy paste

sendCommand(SecurityInterstitialCommandId.CMD_PROCEED)

[ErinMcGrath]

Tada! That worked.

Thank you.