OPERATIONAL DEFECT DATABASE
...
...
Viewdbchk --scanMachines fails with the following error: EBUG com.vmware.vdi.ssl.CertMatchingTrustManager [] - invalid certificate (as expected) for vcenter.vmware.com:443 InvalidCertificateException[reasons:notTrusted;cantCheckRevoked; subject:'C=US, CN=vcenter.vmware.com' message:'ValidateCertificate Chain Result: FAIL, EndEntityReasons: cantCheckRevoked, ChainReasons: partialChain, noTrust'] DEBUG com.vmware.vdi.vcsupport25.ServiceConnection25 [] - Problem connecting to VirtualCenter at https://vcenter.vmware.com:443/sdk javax.xml.ws.WebServiceException: Could not send Message. at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:150) ~[cxf-rt-frontend-jaxws-3.1.15.jar:3.1.15] at com.sun.proxy.$Proxy77.retrieveServiceContent(Unknown Source) ~[?:?] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_161] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_161] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_161] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_161] at com.vmware.vdi.vcsupport25.VimPortProxy$InternalVimPortTypeInvocationHandler.invoke(VimPortProxy.java:104) ~[viewdbchk.jar:?] at com.sun.proxy.$Proxy78.retrieveServiceContent(Unknown Source) ~[?:?] at com.vmware.vdi.vcsupport25.ServiceConnection25.init(ServiceConnection25.java:522) [viewdbchk.jar:?] at com.vmware.vdi.vcsupport25.ServiceConnection25.<init>(ServiceConnection25.java:348) [viewdbchk.jar:?] at com.vmware.vdi.vcsupport25.ServiceConnection25.createInstanceOrFail(ServiceConnection25.java:309) [viewdbchk.jar:?]
This is caused when validation of vCenter certificate fails.
To resolve this error, perform the following steps. Go to https://vcenter_fqdn/.Click on Download trusted root CA certificates at lower left in the window.Save download.zip in the machine. If the file has no extension (ex. "download"), rename it and add ".zip" at the end.Expand download.zip. Then you will see 2 files with .0 extension. One is CA cert, the other is ssoserver cert. At this time, only CA cert is required.Run mmc.exe on Connection Server and go to file > Add/Remove Snap-in, select Certificates for Computer Account.Go to Trusted Root Certification Authorities then import the both of .0 certs files. After that, you can delete ssoserver cert.Run Viewdbchk --scanMachines again.
Click on a version to see all relevant bugs
VMware Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
