Unable to upload Prepackaged Volumes in App Volumes

[spinja77]

I have set up a App Volumes server (v.2.14) and have it configured to correctly see the vCenter and the associated hosts and datastores.  The problem is that I can't get it upload the Prepackaged Volumes.  I keep getting the same error message(s).

In the Web GUI, I get the following error message

Unable to connect to 'root@esxi.mydomain.local' with the credentials provided

In the Activity -> System Messages, I get more clarification

Validating SSL certificate for "esxi.mydomain.local": Rejected because certificate is neither verified nor trusted

Failed to connect to vSphere at "root@esxi.mydomain.local": SSL_connect returned=1 errno=0 state=error: certificate verify failed

Unable to establish connection to Hypervisor <VMware ESX#33638920 root@esxi.mydomain.local>

Validating SSL certificate for "esxi.mydomain.local": Rejected because certificate is neither verified nor trusted

I have followed the following KB articles with no success.  It seems to like the vCenter, but not the individual host certificate

I've installed the certificates into the Microsoft Certificate MMC as explained here

I've inserted the certificates into the cacert.pem file on the server as explained here

I've disabled SSL Validation following the steps outlined here

Is it an issue with 2.14 and would it be worth re-installing with an older version?  vSphere is running 6.5U2c

Thank you for any feedback.

[spinja77]

Not sure if anyone else will run into this, but figured I would pass along what I figured out.

There is a Palo Alto that is doing SSL decryption.  It was not liking the certificates and using the Untrusted Root certificate.  App Volumes did not trust this certificate.  I first had the decryption excluded.  Once that was done, I was able to upload 1 volume.  Then I had the VCSA Certificate Authority added as a trusted root, so that it would decrypt and not use the Untrusted Root certificate. I was able to upload another volume without issue.