<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: VMWare TrueSSO unable to connect to certifcate server in Horizon Desktops and Apps</title>
    <link>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2970563#M99492</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;any update regarding your issue ?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;ame here, and export HZCS Cert with Private key, but same result ...&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;SubCA is on same server than HZES ......&lt;/P&gt;</description>
    <pubDate>Sat, 27 May 2023 05:17:57 GMT</pubDate>
    <dc:creator>Aso57</dc:creator>
    <dc:date>2023-05-27T05:17:57Z</dc:date>
    <item>
      <title>VMWare TrueSSO unable to connect to certifcate server</title>
      <link>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2214786#M59566</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi Al&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I have a very strange issue in that the VMware Truesso enrolment service is unable to connect to the issuing CA service even though they are on the same server instance. I am trying to setup the enrolment service to talk to a Horizon cloud platform; however the enrolment service isn't able to talk to the certificate service even though it has specific permissions to do so in the CA server configuration. From digging through all the logs the only thing of any relevance that appears within: "C:\ProgramData\VMware\VDM\logs"&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:47.859-07:00 TRACE (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] EnrollmentServices::GenerateAndSignPKCS10CMC(): Enter - Generate And Sign PKCS10CMC&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:47.875-07:00 TRACE (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] EnrollmentServices::GenerateAndSignPKCS10CMC(): Exit&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:47.875-07:00 TRACE (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] CertSrvPool::SubmitToCaQueue(): Enter - Submit Queue&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:47.875-07:00 DEBUG (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] CertSrvPool::SubmitToCaQueue(): No Connected CA - wait for one to connect Id=1&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:48.890-07:00 DEBUG (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] CertSrvPool::SubmitToCaQueue(): No Connected CA - wait for one to connect Id=1&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:49.906-07:00 DEBUG (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] CertSrvPool::SubmitToCaQueue(): No Connected CA - wait for one to connect Id=1&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:50.922-07:00 TRACE (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] CertSrvPool::SubmitToCaQueue(): Completed request id=1 - FAILED - elapsed=3047ms&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:50.922-07:00 TRACE (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] CertSrvPool::SubmitToCaQueue(): Exit&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:50.922-07:00 ERROR (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] EnrollmentServices::SubmitRequest(): &lt;STRONG&gt;Failed to locate a connected CA - ErrorCode = 2147944650 (0x00000000800708CA)&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:50.922-07:00 TRACE (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] EnrollmentServices::SubmitRequest(): Exit&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:50.922-07:00 TRACE (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] EnrollmentConnection::SubmitRequest(): Exit&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:50.922-07:00 ERROR (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] CertEnrollService::CertEnrollOperation::SubmitRequestHandler(): Failed to locate a connected CA - ErrorCode = 2147944650 (0x00000000800708CA)&lt;/P&gt;&lt;P&gt;2019-08-18T02:38:50.922-07:00 TRACE (0A58-1AEC) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] CertEnrollService::CertEnrollOperation::SubmitRequestHandler(): Exit&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Any ideas would be greatly appreciated as I need to stand this service up urgently; I have also been in contact with VMware support however they don't seem to understand why this isn't working either?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sun, 18 Aug 2019 09:41:53 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2214786#M59566</guid>
      <dc:creator>garyraife1</dc:creator>
      <dc:date>2019-08-18T09:41:53Z</dc:date>
    </item>
    <item>
      <title>Re: VMWare TrueSSO unable to connect to certifcate server</title>
      <link>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2214787#M59567</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I've been battling the same issue but I think I have it fixed now. I had to import the Connection Server certificate WITH the private key into the "VMware Horizon View Enrollment Server Trusted Roots" store on the Enrollment Server.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If you have anything to add please let me know, I'm continuing to test.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 29 Aug 2019 19:00:41 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2214787#M59567</guid>
      <dc:creator>VMntg</dc:creator>
      <dc:date>2019-08-29T19:00:41Z</dc:date>
    </item>
    <item>
      <title>Re: VMWare TrueSSO unable to connect to certifcate server</title>
      <link>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2931108#M97824</link>
      <description>&lt;P&gt;I am facing the same problem in the Azure deployment&lt;/P&gt;&lt;P&gt;SubmitRequest Failed&lt;BR /&gt;Response ErrorCode = "-2147022646"&lt;BR /&gt;ErrorText = "Failed to locate a connected CA"&lt;BR /&gt;FailureReason = "SubmitFailureMayRetry"&lt;/P&gt;</description>
      <pubDate>Thu, 29 Sep 2022 08:51:29 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2931108#M97824</guid>
      <dc:creator>sjsaravanan1</dc:creator>
      <dc:date>2022-09-29T08:51:29Z</dc:date>
    </item>
    <item>
      <title>Re: VMWare TrueSSO unable to connect to certifcate server</title>
      <link>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2970563#M99492</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;any update regarding your issue ?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;ame here, and export HZCS Cert with Private key, but same result ...&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;SubCA is on same server than HZES ......&lt;/P&gt;</description>
      <pubDate>Sat, 27 May 2023 05:17:57 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2970563#M99492</guid>
      <dc:creator>Aso57</dc:creator>
      <dc:date>2023-05-27T05:17:57Z</dc:date>
    </item>
    <item>
      <title>Re: VMWare TrueSSO unable to connect to certifcate server</title>
      <link>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2971385#M99515</link>
      <description>&lt;P&gt;Hi, did you export the correct Horizon Connection server certificate? It's not the "vdm" certificate you need, but the "vdm.ec" certificate.&lt;/P&gt;&lt;P&gt;see also:&amp;nbsp;&lt;A href="https://itpro.peene.be/vmware-horizon-authentication-using-azuread-with-multifactor-part-3-enrollment-servers/" target="_blank"&gt;VMware Horizon authentication using AzureAD (with multifactor) – Part 3: Enrollment Servers – MickeyByte IT Pro Blog (peene.be)&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 02 Jun 2023 09:17:38 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2971385#M99515</guid>
      <dc:creator>Mickeybyte</dc:creator>
      <dc:date>2023-06-02T09:17:38Z</dc:date>
    </item>
    <item>
      <title>Re: VMWare TrueSSO unable to connect to certifcate server</title>
      <link>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2984304#M99832</link>
      <description>&lt;P&gt;Did you ever resolve this? I have the same issue&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 28 Aug 2023 16:41:21 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2984304#M99832</guid>
      <dc:creator>eyeteegrunt</dc:creator>
      <dc:date>2023-08-28T16:41:21Z</dc:date>
    </item>
    <item>
      <title>Re: VMWare TrueSSO unable to connect to certifcate server</title>
      <link>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2984322#M99833</link>
      <description>&lt;P&gt;Solved for me :&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;If Enrollment Server is installed on SubCA Server : do this :&lt;/SPAN&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;On the enrollment server, add the following reg keys: &lt;/SPAN&gt;&lt;SPAN&gt;&amp;nbsp;&lt;BR /&gt;&lt;/SPAN&gt;&lt;SPAN&gt;&amp;nbsp;&lt;BR /&gt;&lt;/SPAN&gt;&lt;STRONG&gt;&lt;SPAN&gt;[HKEY_LOCAL_MACHINE\SOFTWARE\VMware, Inc.\VMware VDM\Enrollment Service]&lt;/SPAN&gt;&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;BR /&gt;&lt;/SPAN&gt;&lt;STRONG&gt;&lt;SPAN&gt;"UseNTLMAuthenticationToCa"="TRUE"&lt;/SPAN&gt;&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;BR /&gt;&lt;/SPAN&gt;&lt;STRONG&gt;&lt;SPAN&gt;"UseKerberosAuthenticationToCa"="FALSE"&lt;/SPAN&gt;&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;BR /&gt;&lt;/SPAN&gt;&lt;SPAN&gt;&amp;nbsp;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 28 Aug 2023 18:29:17 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2984322#M99833</guid>
      <dc:creator>Aso57</dc:creator>
      <dc:date>2023-08-28T18:29:17Z</dc:date>
    </item>
    <item>
      <title>Re: VMWare TrueSSO unable to connect to certifcate server</title>
      <link>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2984327#M99834</link>
      <description>&lt;P&gt;I already have those reg keys on my enrollment server which is already a subca :[&lt;/P&gt;&lt;P&gt;i see this in the debug logs of my enrollment server&amp;nbsp;&lt;/P&gt;&lt;P&gt;"&amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] EnrollmentServices::SubmitRequest(): The Request timed out - ErrorCode = 258 (0x0000000000000102)&lt;BR /&gt;2023-08-28T14:48:58.397-04:00 ERROR (0514-07E8) &amp;lt;MessageFrameWorkDispatch&amp;gt; [wsnm_certenroll] CertEnrollService::CertEnrollOperation::SubmitRequestHandler(): The Request timed out - ErrorCode = 258 (0x0000000000000102)"&lt;/P&gt;&lt;P&gt;if i run es_diag i get this&amp;nbsp;&lt;/P&gt;&lt;P&gt;Generate a PKCS10 Certificate Request&lt;BR /&gt;Send Cert-Request(s) to the enrollment service:&lt;BR /&gt;## Invalid RequesterName&lt;BR /&gt;## Invalid RequesterName&lt;BR /&gt;## Invalid RequesterName&lt;BR /&gt;## Invalid RequesterName&lt;BR /&gt;## Invalid RequesterName&lt;BR /&gt;## Invalid RequesterName&lt;BR /&gt;## Invalid RequesterName&lt;BR /&gt;## Invalid RequesterName&lt;BR /&gt;## Invalid RequesterName&lt;BR /&gt;## Invalid RequesterName&lt;BR /&gt;## Invalid RequesterName&lt;/P&gt;&lt;P&gt;everything in the horizon console is green&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 28 Aug 2023 18:52:46 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/Horizon-Desktops-and-Apps/VMWare-TrueSSO-unable-to-connect-to-certifcate-server/m-p/2984327#M99834</guid>
      <dc:creator>eyeteegrunt</dc:creator>
      <dc:date>2023-08-28T18:52:46Z</dc:date>
    </item>
  </channel>
</rss>

