Dear Friends ,
On vmware work station I had install vcenter 6.7 on windows 2012 r2. Then I install root certificate on my desktop browser for vcenter 6.7 .
FQDN: vcenter.testall.local
After couple of weeks later I removed vcenter and installed again with same ip and FQDN name (vcenter.testall.local) . Installation was successful . But now when I am trying to connect vcenter by using google chrome browser from my desktop . I am getting following error. I guess root certificate is creating issue . Not able to understand what need to be done now ?
Attackers might be trying to steal your information from vcenter.testall.local (for example, passwords, messages, or credit cards). Learn more
vcenter.testall.local normally uses encryption to protect your information. When Google Chrome tried to connect to vcenter.testall.local this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be vcenter.testall.local, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Google Chrome stopped the connection before any data was exchanged.
You cannot visit vcenter.testall.local right now because the website sent scrambled credentials that Google Chrome cannot process. Network errors and attacks are usually temporary, so this page will probably work later."
Hi,
You need to remove the certificate and install the one generated by the new vCenter installation.
ARomeo
Dear ARomeo,
I cant access vcenter server through webclient. Could you please tell me without access webclient how do I unistall certificate from vcenter server ?
Since I cant access vcenter server then how do I get root certificate from vcenter server ?
Regards
Abhimanyu
Hi,
if you are using Windows vCenter Server, you won’t be able to download the certificate file, since there will be no link to download the archive with the certificate. This file is stored on vCenter Server (running Windows) in C:\ProgramData\VMware\SSL\. (C:\Programdata\VMware\VMware VirtualCenter\SSL in earlier versions.) The certificate from this directory has to be imported on a client.
Take it from the folder specified in the explanation (above) install it as a normal certificate.
ARomeo
Hello,
Thanks for the update : Yes I am using vcenter server on windows 2012 r2 . But I could not find the location mentioned by you " C:\ProgramData\VMware\SSL" There is no ssl folder .
On vmware work station I had install vcenter 6.7 on windows 2012 r2. Then I install root certificate on my desktop browser for vcenter 6.7 .
FQDN: vcenter.testall.local
What you need to do is to uninstall the old vCenter Server's root certificate from your desktop, so that the browser doesn't use this old certificate anymore to en-/decrypt data for your new vCenter Server's connection.
As an alternative you could try, and access the new vCenter Server's web page by it's IP address.
André
How can I delete or uninstall root certificate of the old vCenter Server from my desktop? This is what I am traying to do last two days but not able to do . Can you send me any link for that ?
Sorry, I thought that you know this, since you mentioned that you've installed it.
Open the MMC console to manage Certificates, and select the appropriate location (Local System, or User, depending on where you've installed the certificate). From there you should find the vCenter Server Certificate in the Trusted Root Certification Authorities. Not sure about it's name in case of vCenter Server for Windows, but the vCSA's root certificate is simply named "CA".
André
How is this done on macOS? I can't find the old certificates in my Keychain and I'm still getting this error.
same problem on MAC here. do you resolve this problem ?
the safari is OK, the chrome is problem.
I am having this same issue. I can access vCenter on my MacBook Windows 10 VM, but on Chrome on the MacBook.
try this
Right click, select inspect element
click on console tab
Copy paste
sendCommand(SecurityInterstitialCommandId.CMD_PROCEED)
Tada! That worked.
Thank you.