Weird TrueSSO behaviour Horizon 7.4

[johandijkstra]

We have a very strange situation.
Customer has built a Horizon 7.4 environment with TrueSSO enabled.

They are using CPA (Cloud Pod Architecture) and they have a CA and an enrollement server, the CA is on the Enrollmentserver.
There is however another CA server in the domain. But VMware says to have the CA as close to the ES as possible and for this instance we want to have it separated.

So 1 CA & 1 ES.

We have 1 CPA, 2 PODS / Sites, every POD/site has 2 connection servers.

So we have Site A & Site B.

What is happening.

In Site A we have 2 connection servers, and they are monitoring the following about TrueSSO:

Site A:

Connection Server 1:

Connection Server 2:

Site B:

Connection Server 3:

Connection Server 4:

When checking Site A, I see something strange about the connection servers in the remote Pod (Site B)

When clicking on CS03 :

When checking Remote Pods in Site B I see the following:

When Clicking on CS02:

So in Site A we see:

Connection Server 1 : OK

Connection Server 2 : 1 fault

Remote Pod : Communication Fail

In Site B we See:

Connection Server 3 : 4 faults

Connection Server 4 : 4 faults

Remote Pod : Communication OK

Any thoughts about this?

[techguy129]

You best option would be to open a ticket with support to go over the logs to see what is the issue. Not enough information above to know what exactly is the problem. I've setup SSO a few times and each time it went flawlessly as long as you follow the steps with exactly.

If you don't have support:

You start by:

- Reviewing the enrollment server & connection server logs for errors

- Triple checking the vdmUtil configuration settings. I suspect its probably a misconfiguration

- Double check firewall settings

- Vmware fling for testing truesso: True SSO Diagnostic Utility

- Check out this blog and make sure their steps match what was done: https://blogs.vmware.com/euc/2016/04/true-sso-setting-up-in-a-lab.html