1 Reply Latest reply on Jul 18, 2017 11:20 PM by ex1ferra

    A server error occurred. [500] SSO error: null Check the vSphere Web Client server logs for details.

    ex1ferra Lurker

      I've been playing with  /usr/lib/vmware-vmca/bin/certificate-manager and was not able to fix this issue when trying to login into my vcenter.

      Let me describe it a little bit further:

      I have an SSO Appliance and a Virtual Center Server (Running on Nutanix although not relevant).

      And we are decommissioning a Windows domain, so I changed the DNS settings and machines suffixes and configured authentication towards the new domain.

      Authentication using the new domain was working fine but when checking the SSL certificate via browser I could see it was using the previous FQDN so I played with the certificate-manager and ended up screwing things as you can see.

      I've tried option 2,4,8 (and of course I didn't take a snapshot) although if needed I can probably restore from Nutanix, this is the DR site so I don't have VMs here (besides those two appliances).

      Version is 6.0.0.30200

      SSO old name = srv-adl-usr-vsso.OldWinDomain.local

      SSO new name = srv-adl-usr-vsso.NewWinDomain.local

       

      VCenter old name =srv-adl-usr-vcs.OldWinDomain.local

      VCenter new name =srv-adl-usr-vcs.NewWinDomain.local

       

      On /var/log/vmware/vsphere-client/logs/vsphere_client_virgo.log I can see those error messages

      Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching srv-adl-usr-vsso.OldWinDomain.local found.

      Caused by: java.security.cert.CertificateException: No subject alternative DNS name matching srv-adl-usr-vsso.OldWinDomain.local found.

      Caused by: com.vmware.vim.sso.client.exception.ServerCommunicationException: Error communicating to the remote server https://srv-adl-usr-vsso.OldWinDomain.local/sts/STSService/vsphere.local

       

      I can ping the server using the new FQDN though.

       

      Thoughts?