VMware Cloud Community
tdubb123
Expert
Expert

web console to VM - HTTP Status 500 - internal server error

I am unable to open the web console to a vm and getting this

HTTP Status 500 – Internal Server Error

Type Exception Report

Message An exception occurred processing JSP page [/webconsole.html] at line [9]

Description The server encountered an unexpected condition that prevented it from fulfilling the request.

Exception

  • org.apache.jasper.JasperException: An exception occurred processing JSP page [/webconsole.html] at line [9]

any idea?

Reply
0 Kudos
13 Replies
tdubb123
Expert
Expert

what port is needed to open the web console from the client to the VM console on vcenter? 9443?

Reply
0 Kudos
tdubb123
Expert
Expert

this seems to be only happening with google chrome

Reply
0 Kudos
rakeshpattu
Contributor
Contributor

HI All, 

Good Evening, 

Trust you all doing well. 

Issue: HTTP Status 500 - internal server error

Solution : 
Check the Certificate expiry date from the Vcenter Appliance and Renew the service certificates. 

Steps given below. 


1) Check the Validity of the Certificate by using the given below command 

for store in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list | grep -v TRUSTED_ROOT_CRLS); do echo "[*] Store :" $store; /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $store --text | grep -ie "Alias" -ie "Not After";done;

2) Login to the vCenter Appliance via SSH 
3) /usr/lib/vmware-vmca/bin/certificate-manager ( This will prompt you to Generate the Certificate option) 

4)  *** Welcome to the vSphere 6.8 Certificate Manager *** |
| -- Select Operation -- |
| 1. Replace Machine SSL certificate with Custom Certificate |
| 2. Replace VMCA Root certificate with Custom Signing |
| Certificate and replace all Certificates |
| 3. Replace Machine SSL certificate with VMCA Certificate |
| 4. Regenerate a new VMCA Root Certificate and |
| replace all certificates |
| 5. Replace Solution user certificates with |
| Custom Certificate |
| NOTE: Solution user certs will be deprecated in a future |
| release of vCenter. Refer to release notes for more details.|
| 6. Replace Solution user certificates with VMCA certificates |
| 7. Revert last performed operation by re-publishing old |
| certificates |
| 8. Reset all Certificates 
Select the option 4 to regenrate the certificates. 

 

Note: Kindly provide the SSO password to proceed further. 

 

Enjoy Stay safe stay healthy 
Rakesh Magesh 

edgarquadros
Contributor
Contributor

Hello Rakesh!

Well, I tried exactly as you described, but without success. After choosing option 4, I'm receiving this message:

Option[1 to 8]: 4
Do you wish to generate all certificates using configuration file : Option[Y/N] ? : y

Please provide valid SSO and VC privileged user credential to perform certificate operations.
Enter username [Administrator@vsphere.local]:administrator@vcenter.wecom
Enter password:

Please configure certool.cfg with proper values before proceeding to next step.

Certificate Manager tool do not support vCenter HA systems

But, curiously I have no HA systems.

I saw another post suggesting creating the directory /var/tmp/vmware but this path already exist and have files inside.

I saw another post suggesting try renaming the file /etc/vmware-vcha/vcha.cfg if its available, but I don't have this file with this extension .cfg, I just have /etc/vmware-vcha/vcha.cfg.tlp. I tried to rename but without success.

 

Have another idea?

 

 

 

 

Reply
0 Kudos
vmkfix-SSA
Contributor
Contributor

edgarquadros
Contributor
Contributor

Yes, it worked for me here too!

Thanks!

Reply
0 Kudos
Chirag235
Enthusiast
Enthusiast

  1. Hi, If your certificate is not expire, then you can try to check start the vAPI Endpoint service.
  2. Open VAMI console and start it this service. I fixed same issue on my vCenter Server

Chirag235_0-1693478060137.png

 

Chirag235_1-1693478261322.png

 

Reply
0 Kudos
miladmeh8
Hot Shot
Hot Shot

I faced same issue, did you solve the problem?

Reply
0 Kudos
Chirag235
Enthusiast
Enthusiast

Hi,

Yes, In my setup, I resolve the issue. I perform steps which I mentioned in my post.

miladmeh8
Hot Shot
Hot Shot

Super @Chirag235 

Reply
0 Kudos
jaipraksh
Enthusiast
Enthusiast

What is the vCenter version? Check the disk usage with df -h via SSH and try to start the services manually.

Start all services: service-control --start --all

 You can check the logs of the services that won't start to have an indication. Location : /storage/log/VMware/"service"/"service.log"

(Ignore this if it's a new deployed vCenter) check if the certificates are still valid:

vCenter Appliance: Run the following command in a console window or SSH session to the vCenter VM:

for store in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list | grep -v TRUSTED_ROOT_CRLS); do echo "[*] Store :" $store; /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $store --text | grep -ie "Alias" -ie "Not After";done;

https://kb.vmware.com/s/article/2015600

Alsof check sts certificate with thé script in attachment:

https://kb.vmware.com/s/article/79248

VRO123
Enthusiast
Enthusiast

Check VPXD logs, and if you VMCA issued certificates are expired, choose option 8 in certificate manager to reset all the certificates!

click on the lock icon and check your SSL certificate expiry details.
Example:

VRO123_0-1695817209652.png

 

  

Regards,
vRO123
Reply
0 Kudos