Symptoms
When trying to add App Volume Manager to Horizon for Apps on Demand, encounter message on page "Invalid certificate configured for App Volumes Manager"
Purpose
Provide additional guidance that is not listed in Horizon Documentation
Cause
Self signed certificate and custom certificate maybe missing some settings in details of the certificate
Impact / Risks
Unable to add App Volumes to Horizon until details on app volumes certificate is corrected
Resolution
Create the Certificate based on the App Volumes doc - https://docs.vmware.com/en/VMware-App-Volumes/2303/app-volumes-admin-guide/GUID-14CB1FA0-61DD-4DBB-B242-67E43500E7E7.html
docs.vmware.com
Generate a Custom Self-Signed Certificate
To replace the default, self-signed certificate, which is installed when installing App Volumes Manager, you can use a custom self-signed certificate. To generate a custom self-signed certificate, you must first create a configuration file and then use this file to generate the key and certificate.
https://docs.vmware.com/en/VMware-App-Volumes/2303/app-volumes-admin-guide/GUID-14CB1FA0-61DD-4DBB-B242-67E43500E7E7.html
This is mandatory for it to work
You can add custom values to these settings, however ensure that you use only digitalSignature, keyEncipherment, dataEncipherment for the keyUsage setting and serverAuth, clientAuth to extendedKeyUsage.It is mandatory to provide the commonName, but optional to provide emailAddress.
For Self Signed Certificates and some CA certificates, the following steps are also required
Copy the <certificate_server_name>.crt to the connection serverOpen certificate management tool and import <certificate_server_name>.crt to Trusted Root Certification Authorities \ Certificate folderRestart the connection server service (if multiple servers in the pod, process must be done on all the serversAdd App Volumes manager after process completed to Horizon server configuration
For a CA certificate, import it into MMC to verify it contains the following extensions and propertieskeyUsage:extendedKeyUsageIf the 5 attributes are missing from the CA certificate, add them to the certificate and export as crt file. Follow the steps to replace the certificate in the nginx folder and restart services. Test access to App Volumes manager admin pageAdd server to Horizon
Related Information
https://docs.vmware.com/en/VMware-App-Volumes/2303/app-volumes-admin-guide/GUID-14CB1FA0-61DD-4DBB-B242-67E43500E7E7.html
