VMware Cloud Community
alphons
Contributor
Contributor
Jump to solution

esxi 6.7.0 Chrome 80.* webinterface problems, failed to connect console

Esxi: 6.7.0 Update 3 (Build 14320388)

---------------------------------------------------

Chrome 80.0.3987.87 (Official build) (64-bits)

===================================

Console -> main.js:414 WebSocket connection to

'wss://192.168....../ticket/1fa296e4224b133a' failed:

Error in connection establishment: net::ERR_CERT_AUTHORITY_INVALID

FireFox 72.0.2 (64-bits)

==================

Console no problem

InternetExplorer 11.592.18362.0

==================

Console no problem

1 Solution

Accepted Solutions
alphons
Contributor
Contributor
Jump to solution

The Chrome error has to do with changing security on the new Chrome webbrowser (as of version 80.*)

So, we have to generate/install a certificate on the esxi host and install the ca certificate on the client machine.

- navigate to your ESXi host,

- open Networking -> TCP/IP stacks -> Default TCP/IP stack

  in url https://<current-hostname>/ui/#/host/networking/netstacks/defaultTcpipStack

- edit settings:

  set Host-name (example: esxbig) and Domain-name (example: lan.local)

  and save.

- ssh to your esxi host

# cd /etc/vmware/ssl

# /sbin/generate-certificates

- copy castore.pem to your client computer and install it on 'Trusted Root Ceritifaction Authorities'

On windows platform;

- rename file castore.pem to castore.pem.cer so it can be easily installed by doubleclick

- select intall certificates

- select Local Machine

- select manaual, browse...

- select: Trusted Root Ceritifaction Authorities

- Ok, Next, Done

# /etc/init.d/hostd restart

Navigate to your esxi host via https://<hostname.domain.name/

and check if certificate is accepted and validated

The console connections (and other stuff) will work again.

Hope this helps.

View solution in original post

1 Reply
alphons
Contributor
Contributor
Jump to solution

The Chrome error has to do with changing security on the new Chrome webbrowser (as of version 80.*)

So, we have to generate/install a certificate on the esxi host and install the ca certificate on the client machine.

- navigate to your ESXi host,

- open Networking -> TCP/IP stacks -> Default TCP/IP stack

  in url https://<current-hostname>/ui/#/host/networking/netstacks/defaultTcpipStack

- edit settings:

  set Host-name (example: esxbig) and Domain-name (example: lan.local)

  and save.

- ssh to your esxi host

# cd /etc/vmware/ssl

# /sbin/generate-certificates

- copy castore.pem to your client computer and install it on 'Trusted Root Ceritifaction Authorities'

On windows platform;

- rename file castore.pem to castore.pem.cer so it can be easily installed by doubleclick

- select intall certificates

- select Local Machine

- select manaual, browse...

- select: Trusted Root Ceritifaction Authorities

- Ok, Next, Done

# /etc/init.d/hostd restart

Navigate to your esxi host via https://<hostname.domain.name/

and check if certificate is accepted and validated

The console connections (and other stuff) will work again.

Hope this helps.