vCloud Director 5.5.3 - console disconnected on Chrome

[florindespa]

Hello all,

  I have an issue with vCD 5.5.3 and Chrome console . It popus up and immediately goes to disconnected . From the same PC , Firefox and IE console both work . There is no vmware-vmrc folder created , so I don't know how to get the logs of what might be wrong.

  Both http and console certificate were imported into Trusted root certificate authority , opened in Chrome https://vcd-console , it is trusted .

Any ideeas on what might be , or how to get the logs ?

Thank you.

[florindespa]

Well, some additional info :

I've tried VMware KB: Cannot connect to vCloud Director HTML5 console with Mac OS X using Mozilla Firefox or Go... ( which also applies on Windows )  -> https://developer.chrome.com/devtools/docs/console

In javascript console, I've noticed that Chrome actually tries to open the console using the IP instead of the FQDN . I've tried to open https://ip-of-console , and of course I get a warning regarding the certificate , as it was created for FQDN , and it tries on IP .

Your connection is not private

Attackers might be trying to steal your information from xxx.xxx.xxx.xxx (for example, passwords, messages, or credit cards).

So in the end is related to Certificate , have to see if there is a DNS issue or what . If you have any ideas, feel free to share.

Thank you.

[florindespa]

And ... fixed it . Went in System -> Administration -> Public Addresses and set the fqdn to VCD public Console .

[IamTHEvilONE · Accepted solution]

There are some key points here that are the common "gotchas"

1. If there is no public address for Console Proxy, the cell will take the locally configured IP address for Console Proxy and send this to the client.

2. The console proxy is stateless, in that a client going through a load balancer might not hit the cell you got the session information from.  Therefore, ensure all certificates are the exact same on each cell for the Console Proxy.

3. Follow the KB mentioned if you are using Chrome, to make an exception for the certificate if it is not signed by a Certificate Authority

florindespa - do you mind taking a minute to mark any response here as correct?  that'll help people searching the forums to know there was a solution found in the thread.