VMware Cloud Community
nebb2k8
Enthusiast
Enthusiast
Jump to solution

Chrome v105+ has broken Enhanced Authentication Plugin

Anyone else noticed this? Anyone got a fix? v104 or lower has no issues

0 Kudos
1 Solution

Accepted Solutions
nebb2k8
Enthusiast
Enthusiast
Jump to solution

Figured it out. Chrome introduced its own root certificate store in v105. So you can disable this via GPO/policy to use Windows root store to which the VMware Plugin automatically adds its certificate.

https://chromeenterprise.google/policies/?policy=ChromeRootStoreEnabled

GPO

Computer Configuration / Policies / Administrative Templates / Google / Google Chrome / Determines whether the Chrome Root Store and built-in certificate verifier will be used to verify server certificates = Set to "Disabled"

View solution in original post

5 Replies
nebb2k8
Enthusiast
Enthusiast
Jump to solution

It seems to be related to the fact Chrome does not automatically accept the plugins self signed certificate @ https://vmware-plugin:8094. Where Firefox does.

Every VM with the plugin installed has its own. So cannot import into the certificate store.

Tags (1)
0 Kudos
nebb2k8
Enthusiast
Enthusiast
Jump to solution

#allow-insecure-localhost

This chrome flag could of worked. But VMware adds vmware-plugin dns record into the host file. So Chrome does not ack that its a localhost/127.0.0.1 request for the flag to permit use.

0 Kudos
nebb2k8
Enthusiast
Enthusiast
Jump to solution

Figured it out. Chrome introduced its own root certificate store in v105. So you can disable this via GPO/policy to use Windows root store to which the VMware Plugin automatically adds its certificate.

https://chromeenterprise.google/policies/?policy=ChromeRootStoreEnabled

GPO

Computer Configuration / Policies / Administrative Templates / Google / Google Chrome / Determines whether the Chrome Root Store and built-in certificate verifier will be used to verify server certificates = Set to "Disabled"

lmagna
Enthusiast
Enthusiast
Jump to solution

I have solved this problem by openning https://vmware-plugin:8094 in chrome and typing "thisisunsafe"

Disabling Chrome Root Store is not a long-term solution as it will no longer be possible from version 113.

DanRobinson
Contributor
Contributor
Jump to solution

I found a easier solution that doesn't require disabled Chrome's certificate store. Simply add the address of "https://vmware-plugin:8094/" to the allowed sites to show insecure content. You can get there from settings > Privacy and Security > Site Settings > Additional Content Settings > Insecure Content. 

0 Kudos