vCAC 6 inaccessible from IE 8 on Windows XP

[oldfashioned]

Hello, can anyone tell me if they have successfully accessed vCAC 6 using IE 8 on a Windows XP client? When we try and access vCAC 6 from a Windows XP client running IE 8 the login page does not load. If we try the same test using Chrome the page loads successfully. The problem only seems to relate to Windows XP and IE 8, as the same test works from a Windows 7 client running IE 8.

[VirExprt]

Hey there!!!

Please check VCAC Compatibility Matrix for the support for IE8 which states that with comparability Mode can cause Blank pages.

http://www.vmware.com/pdf/vcloud-automation-center-60-support-matrix.pdf

Br,

MG

[oldfashioned]

Hello, thanks for your assistance. However, this is not the issue. We believe it's due to Windows XP not supporting the cipher that vCAC 6 requires.

[DarrenGoff2]

Hi Oldfashioned,

You are correct, this is due to Windows XP not supporting the default cipher in the Identity Appliance and vCAC Appliance. I hit this issue recently and GSS provided the information below to lower the cipher on the Identity Appliance and vCAC Appliance. They stated this as supported (assuming you have a supprt agreement in place) but not recommended.

On the vCAC Appliance >

1)      edit:  /etc/apache2/vhosts.d/vcac.conf

2)      replace: "SSLCipherSuite HIGH:!aNULL!ADH:!EXP:!MD5:!3DES:!CAMELLIA:!PSK:!SRP:@STRENGTH" with "SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL"  (Both of these options already exist in the file, we just # the original one out and remove the # on the one we now want to use)

3)      type: service apache2 reload

On the vCAC Identity Appliance

1)      edit:  /usr/lib/vmware-sts/conf/server.xml

2)      add: SSL_RSA_WITH_RC4_128_SHA to list of supported ciphers.

3)      service vmware-stsd restart