There are issues with the site's certificate Chain

[snochico1]

Hi All,

I am having an issue where I made the PSC a Windows Subordinate.  The VMCA is now an intermediate.  I can see the certificate chain is proper on the PSC and vCenter.  However when I use the open console in the Webclient when the page opens https://vcenter.FQDN:9443/vsphere-client/webconsole.html.....  I get "There are issues with the site's certificate chain.  When I look at the certification path, I do not see the root and subordinate.  The odd thing is the certificate is the same as the one on vCenter.  I verified this based on the serial number and thumbprints match just the certification paths do not. 

Any help would be great.   I have regenerated the certificates still no success.

Guess I should have included what vCenter version.  This is vCenter 6.0 U2 deployed using the the appliance. This is a green field and is an all new configuration.

Thank you,

Message was edited by: snochico1

[hussainbte]

From What I understand

1) you have a Microsoft CA in your environment

2) THe VMCA is deployed as a intermediate CA mode.

Please elaborate on "I can see the certificate chain is proper on the PSC and vCenter" where have you verified this?

Also please let me know if you can open the console from vSphere thick client.

[snochico1]

Apparently this is a known issue.  See the below kb link.

https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=21291...