topic Re: i can't access horizon7 administrator console. in Horizon Desktops and Apps

i can't access horizon7 administrator console.

RWEQRWQ — Tue, 11 Aug 2020 08:39:06 GMT

if i click the horizon7 administrator console.

show me "this site can't be reached. ERR_CONNECTION_REFUSED "

all browser show me same symptom.

I attach a debug log and . Please help me.

Re: i can't access horizon7 administrator console.

vBritinUSA — Tue, 11 Aug 2020 21:25:26 GMT

Is this a new setup, Has something been upgraded, certs replaced?

I see a lot of "Certificate thumbprint verification failed, no matching thumbprint"

What cert do you have installed on the Horizon Connection Server, self signed or your own? if its not the self signed have you set the private key to be exportable, friendly name etc?

I created a blog post as I keep seeing cert issues not being correctly setup and installed.

https://www.vbrit.net/certificates

Check it out if you have your own cert.

Re: i can't access horizon7 administrator console.

RWEQRWQ — Tue, 11 Aug 2020 23:11:00 GMT

The certificate is in the first generated connection server vm of the test server.

I never upgraded connection server

i never replaced certificate.

Re: i can't access horizon7 administrator console.

vBritinUSA — Tue, 11 Aug 2020 23:46:10 GMT

Have you tried to uninstall and reinstall? (Don't uninstall the LDAP) is it happening to any other Connection Servers?

Re: i can't access horizon7 administrator console.

nachogonzalez — Wed, 12 Aug 2020 15:51:29 GMT

Can you check if the certificate is expired?

Re: i can't access horizon7 administrator console.

Shreyskar — Fri, 14 Aug 2020 20:15:47 GMT

In logs I see:

2020-08-11T17:38:14.193+09:00 ERROR (1084-147C) <SwiftMQ-ConnectorPool-5> [JMSTunnelSSLSocketFactory] Certificate thumbprint verification failed, no matching thumbprint. Presented identity: router/hcs

2020-08-11T17:38:14.193+09:00 ERROR (1084-147C) <SwiftMQ-ConnectorPool-5> [JMSTunnelSSLSocketFactory] General error occurred: Unexpected certificate: router/hcs

2020-08-11T17:38:14.195+09:00 DEBUG (1084-1458) <Outbound JMS Forwarder Thread> [JMSRouter] Error creating topic config for topic: IceTunnelTopic com.vmware.vdi.logger.Logger.debug(Logger.java:44)

javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: General error occurred: Unexpected certificate: router/hcs

Please check VMware Knowledge Base

If issue still persist, Take a backup/Snapshot of connection server >uninstall connection server > Delete all certs from 'VMware horizon view certs store' (not from personal store) > Reinstall connection server.

Re: i can't access horizon7 administrator console.

nachogonzalez — Sat, 15 Aug 2020 00:11:49 GMT

Hey, your certificates are expired.

Try this: https://www.carlstalhood.com/vmware-horizon-7-connection-server/