VMware Cloud Community
salasos3
Enthusiast
Enthusiast
Jump to solution

VRA 7.5 remote console not working

Hi all,

We noticed that we can't open a remote console for a deployed VM from VRA web interface, we get the below error:

"Cannot connect to remote console. Verify that the machine is powered on and connected to the network."

The VMs are powered On, on Vcenter side the VMs look healthy.

This is what i have tried so far:

Ping from Host to vcenter where the VRA VM resides:

[root@host:~] ping vcenter
PING vcenter (10.93.104.30): 56 data bytes
64 bytes from 10.93.104.30: icmp_seq=0 ttl=64 time=0.186 ms
64 bytes from 10.93.104.30: icmp_seq=1 ttl=64 time=0.282 ms
64 bytes from 10.93.104.30: icmp_seq=2 ttl=64 time=0.343 ms

--- vcenter ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 0.186/0.270/0.343 ms

-Curl to port 902 from vRA to host works fine:

[replica] vra1:~ # curl -vvv telnet://host.domain.local:902
* Rebuilt URL to: telnet://host.domain.local:902/
* Trying 10.93.104.27...
* TCP_NODELAY set
* Connected to hosts.domain.local (10.93.104.27) port 902 (#0)
220 VMware Authentication Daemon Version 1.10: SSL Required, ServerDaemonProtocol:SOAP, MKSDisplayProtocol:VNC , VMXARGS supported, NFCSSL supported/t

-Connection to port 902 from vRA to host:

[root@host:~] esxcli network ip connection list | grep 902
tcp 0 0 10.93.104.27:902 10.245.253.3:40456 ESTABLISHED 67166 newreno busybox
tcp 0 0 :::902 :::0 LISTEN 67166 newreno busybox
tcp 0 0 0.0.0.0:902 0.0.0.0:0 LISTEN 67166 newreno busybox

In Security properties on VRA this is already set:

vra1:/etc/vcac # grep -i timeout security.properties
consoleproxy.timeout.connectionInitMs=20000

Infrastructure -> DEM status -> all are online

All services are up.

Infrastructure -> log:

Error:
The underlying connection was closed: An unexpected error occurred on a receive.

Inner Exception: Certificate is not trusted (RemoteCertificateChainErrors). Subject: C=US, CN=vm-vcenter.domain.local Thumbprint: DBDF5C8DDAF5C4AE34A55AB995DFF56C14B13181

Stack trace:

at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at VMware.vSphere.VimService.RetrieveServiceContent(ManagedObjectReference _this)
at DynamicOps.VMWareModel.Interface.VSphereSession.Connect(String userName, String password)
at DynamicOps.VMWareModel.Interface.VSphereInterface.ConnectToVCenter(Uri connectionUri, String userName, String password)
at DynamicOps.Web.VMRC.Vmrc.OnInit(EventArgs e)
Inner Exception: at DynamicOps.Common.GlobalCertificateValidationManager.ThrowUntrustedCertificateException(SslPolicyErrors sslPolicyErrors, X509Certificate certificate)
at DynamicOps.Common.GlobalCertificateValidationManager.ServerCertificateValidation(Object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors sslPolicyErrors)
at System.Net.ServerCertValidationCallback.Callback(Object state)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
at System.Net.ServerCertValidationCallback.Invoke(Object request, X509Certificate certificate, X509Chain chain, SslPolicyErrors sslPolicyErrors)
at System.Net.Security.SecureChannel.VerifyRemoteCertificate(RemoteCertValidationCallback remoteCertValidationCallback, ProtocolToken& alertToken)
at System.Net.Security.SslState.CompleteHandshake(ProtocolToken& alertToken)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.ConnectStream.WriteHeaders(Boolean async)

Time configuration is:

ESXI where VRA vm resides: MT

Vcenter where VRA vm resides: MT

VRA1,2,3: UTC(6 hours of difference)

Cluster Connection Status: Connected.

vra1: Replica UP/Async (This was the Master before upgrade to 7.5)

vra2: Master / UP

vra3: Replica UP/Async

I'm new to VRA and this is my first issue so not sure what all that means but seems a certificate issue what else can I do/check, could the time difference between vra and esxi/vcenter be the cause?

Reply
0 Kudos
1 Solution

Accepted Solutions
salasos3
Enthusiast
Enthusiast
Jump to solution

Cert issue across all VCs after VRA upgrade.

---------------------------------------------------------------------------------------------------------

Was it helpful? Let us know by completing this short survey here.

View solution in original post

Reply
0 Kudos
2 Replies
daphnissov
Immortal
Immortal
Jump to solution

Has it ever worked? Do you have the required port open to vRA? If the answers to these are both "yes", open a support case with GSS.

Reply
0 Kudos
salasos3
Enthusiast
Enthusiast
Jump to solution

Cert issue across all VCs after VRA upgrade.

---------------------------------------------------------------------------------------------------------

Was it helpful? Let us know by completing this short survey here.

Reply
0 Kudos