Workspace ONE Access connector Virtual Apps collection sync issue

[JMW83]

Hi

I'm trying to replace the Workspace One Access connector v19.03.0.0 with v21.08.0.1.

I'm in preview mode and testing the Virtual Apps Collection sync but receive the following error:

Enterprise service connectorhostname.domain.local(EIS) response: Unable to get certificate from the URL: https://horizonconnectionserver.domain.local:443/SAML/metadata/sp.xml

When I visit the above URL from the connector server it loads a web page showing the self-signed certificate for horizonconnectionserver.

In the Virtual App Service logs I can see the following:

Failed to get ssl certificate from <horizon connection server>:443/SAML/metadata/sp.xml

SSLHandshakeException: No subject alternative DNS name matching <horizon connection server> found

I re-ran the Horizon Connector setup and chose to install the self-signed cert, which didn't fix the issue. 

I also used keytool to manually import the self-signed cert, then verified it existed, but this again did not resolve the problem.

Does the self-signed cert need a SAN configured perhaps? This isn't documented anywhere if it does.

Any help much appreciated.

[Noordan]

my guess based on the error message is that you need a SAN attribute for the certificate used for your horizon connection server.

several modern browsers and services requires that nowadays. 

[bigjohn111]

I'm having the same issue.. Anyone else have this.. with the old version there is no issue

[Noordan]

Please make sure that you have the FQDN in the SAN attribute in the certificate used for Horizon.