9 Replies Latest reply on Jan 13, 2014 9:15 AM by rooster147

    Connection Server's certificate is not trusted

    nzorn Hot Shot

      This morning around 4:13am all of our View Connection servers lost communication with Composer, and possibly vCenter. When logging into the View Admin page I noticed the Connection Servers and View Composer Server had a Red status instead of Green.

      I clicked on the View Composer Server Details and it displayed the following:

       

      Untrusted Certificate (Verify)
      For self-signed certificate, click Verify. If the View Composer Server certificate can be validated, make sure that the trusted store on the View Composer Server system has the correct Certificate Authorities.
      SSL Certificate: Invalid

       

      Once I clicked Verify the status changed to Green.

       

      I clicked on the Connection Server Details and it displayed the following:
      Status: Server's certificate is not trusted
      SSL Certificate: Invalid

       

      Status is still Red on the Connection Server, but it does not appear to be affecting any functionality. I opened ticket #13335675306 with VMware, and they suggested we replace the certificates and/or try disabling certificate revocation checking. They also informed me that another customer had the same issue over this last weekend, and that ticket is still open.

       

      To disable certificate revocation checking create a string (REG_SZ) value CertificateRevocationCheckType, under HKLM\Software\VMware, Inc.\VMware VDM\Security, and set this value to 1. More information can be found here: http://pubs.vmware.com/view-51/index.jsp?topic=%2Fcom.vmware.view.installation.doc%2FGUID-D1190AE8-1677-4637-9345-BEE0F39507DF.html

       

      Has anyone else seen this issue where certificates randomly stop being trusted?  I am going to try rebooting my Connection servers tonight and see what happens.