Horizon Connection server cant connect to vcenter - Certificate Validation Failed

[AndreasWangen]

Hello, trying to setup a test environment for horizon

And when im connecting to vcenter im getting this "Certificate Validation Failed"

Found this kb article https://kb.vmware.com/s/article/86414?lang=en_US

But all trafic on port 443 is ok between the servers and im able to reach the webui of vcenter from horizon server

[Jubish-Jose]

Are you using a self signed certificate? If yes, when you tried to add vCenter to Horizon, did you get a prompt warning that the certificate is not trusted and did you accept it? 

If its a CA signed certificate and vCenter is not connecting, its likely to be a network/port issue.

[AndreasWangen]

Self signed on horizon

CA signed on vcenter

I cant see any rejected trafic on 443

Does it use any other ports than 443? 

[vBritinUSA]

@AndreasWangen The CA that you used for the vCenter, have you added the root-ca cert to the Connection server so it will trust the vCenter Cert?

[AndreasWangen]

Yes root-ca cert is added to connection server so it is trusted

Does the self signed cert for the connection server have anything to say here? 

[AndreasWangen · Accepted solution]

After talking with vmware support we found that is was the user not having access to vcenter

[subashv4u]

Connect the ViewADAM DB and Clear the old Certificate thumbprint of the vcenter.

https://kb.vmware.com/s/article/2012377

Under ViewAdam -

DC=vdi,dc=vmware,dc=int --

OU= Properties

OU= VitualCenter

right click and properties look for the below key and clear the value

pae-VCSslCertThumbprint

Goto the View admin page and accept the Certificate.

[Nemkell_]

Hello!

You mean no access at all, or just don't have enough privileges? I'm asking because I can't access to the vcenter either although we created a user with the necessary rights regarding this article: Privileges Required for the vCenter Server User Without Instant Clones (vmware.com), but when I want to connect the Horizon Server to the vCenter, the "certificate validation failed" message appears. I tried with my own user and it worked, but I'd like to use the service user instead.