topic Re: AppVol 2.12.1 - Certificate has not been verified in App Volumes

AppVol 2.12.1 - Certificate has not been verified

Erossman — Mon, 29 May 2017 12:51:39 GMT

Hi guys,

can anyone of you confirm that the vcenter certificate verfication in appvol manager get lost again after few days?

We have the vmware self-signed certificate on our vcenter server. We also accept this certificate in appvolumes 2.12.1 with click on accept (machine managers).

After that I can see the message: "Certificate: Using administrator trusted certificate"

If I check this setting after few days its again lost and I have to accept the certificate again. It's doesn't impact the appvol functionality, but I will create a lot of log entries.....

Validating SSL certificate for "VCA.domain.local": Rejected because certificate is neither verified nor trusted

Failed to connect to vSphere at "domain\srvappvol@VCA.domain.local": SSL_connect returned=1 errno=0 state=error: certificate verify failed

Regards,

VM-Master

Re: AppVol 2.12.1 - Certificate has not been verified

Ray_handels — Mon, 29 May 2017 13:59:55 GMT

Yes we have the exact same issue, it's a known issue for as far as I'm aware. Just make sure to raise a ticket with VMware, they are aware.

Re: AppVol 2.12.1 - Certificate has not been verified

Erossman — Mon, 29 May 2017 15:31:02 GMT

I reconized that this happens after rebooting the vcenter server.

Why are these "known issues" are not public documented?

Re: AppVol 2.12.1 - Certificate has not been verified

Ray_handels — Tue, 30 May 2017 07:32:24 GMT

Indeed restarting the Vcenter triggers it. Strange thing is that we, at first sight, could not reproduce it on our acceptance environment.

Re: AppVol 2.12.1 - Certificate has not been verified

techguy129 — Tue, 30 May 2017 12:58:51 GMT

The current workaround for this is:

Steps:

1:- set env variable AVM_DISABLE_VCENTER_SSL_VALIDATION with value 1 on Management servers

2:- restart the manager service.

Re: AppVol 2.12.1 - Certificate has not been verified

Erossman — Tue, 30 May 2017 15:55:09 GMT

Hi techguy129,

can you please describe how to set this value on the appvolumes managers?

I open a command prompt and typed in....

"set env variable AVM_DISABLE_VCENTER_SSL_VALIDATION=1"

Is there an option to check this setting?

Re: AppVol 2.12.1 - Certificate has not been verified

techguy129 — Tue, 30 May 2017 17:30:54 GMT

Open Control Panel
Select System
Click the Advanced system settings link.
Click Environment Variables. In the section System Variables, Click New.
In the New System Variable window, specify the value of Variable Name as AVM_DISABLE_VCENTER_SSL_VALIDATION and specify the Variable Value as 1
Click OK. Close all remaining windows by clicking OK.

Re: AppVol 2.12.1 - Certificate has not been verified

LVANDUIJN — Thu, 01 Jun 2017 13:20:05 GMT

Had same issue.. this is even more fun when running multiple vCenters under the same SSO...
Then you get the intermediate cert presented instead of the vCenter certs. Causing duplicate cert entry in the database.
This even causes that only one vCenter will work and the others will fail to even mount App Stacks.
Thankfully this quick bypass solves it and will be patched in 2.13

Re: AppVol 2.12.1 - Certificate has not been verified

Erossman — Fri, 02 Jun 2017 07:00:05 GMT

Thanks a lot techguy129! This seems to solve the issue.

Re: AppVol 2.12.1 - Certificate has not been verified

Lieven — Wed, 26 Jul 2017 09:03:33 GMT

I just heard from VMware that this is indeed a know bug.

A hot patch is available, but needs to be requested separately from VMware Global Support.

The issue will be resolved in a future version of App Volumes

Re: AppVol 2.12.1 - Certificate has not been verified

Ray_handels — Wed, 26 Jul 2017 13:26:22 GMT

If it is the 2.12.3.11 hotfix no need to ask for it. We tested it on our managers but still see this specific error message popping up.

We are now running 2.12.3.11 agent (which works quite well just not with all 2.9 appstacks) and 2.12.1.103 manager. For me it seems to be the most stable and quickest combination until now. And believe me I have seen a few .

Re: AppVol 2.12.1 - Certificate has not been verified

julatoski — Fri, 23 Feb 2018 17:24:14 GMT

This issue has been addressed and deploying the most recent version of App Volumes would provide a more secure option.

Jeff Ulatoski

Senior Product Manager, App Volumes