Symptoms:
Adding VMware Vcenter Server 5.5 on Horizon 7 Connection server fails with certificate error "Unable to verify vCenter certificate"
Reason:
VMware Vcenter 5.0, 5.1 and 5.5 works with TLSv1.0 Security protocol. But on VMware Horizon 7 and later version, TLSv1.0 is disabled by default. So you might receive a certificate error while trying to integrate Vcenter 5.x server with VMware Horizon 7.x.
Solution:
Enable TLSv1.0 on Horizon View Connection Server.
Steps:
1. Login to Horizon View Connection Server host, open ADSI Edit utility.
2. Right click on "ADSI Edit", click on "Connect to..."
3. Choose "Select or type a Distinguished Name or Naming Context"
and type "DC=vdi, DC=vmware, DC=int".
Choose Computer and type "localhost:389".
Click "OK"
4. Double click and expand "Default Naming Context[Localhost:389].
Expand "DC=vdi, DC=vmware, DC=int"
Expand "OU=Properties"
Select "OU=Global"
Right Click on "CN=Common", Click "Properties"
5. Double Click to open "pae-ClientSSLSecureProtocols".
Fill the value "\LIST:TLSv1.2,TLSv1.1,TLSv1" click "OK".
Click "OK" and close ADSI Edit utility.
6. Restart Horizon View Connection Server Service or reboot server to take the effect.
Now we can try to add Vcenter Server 5.5 to Horizon View Administrator.
VMware KBASE
Adding VMware Vcenter Server 5.5 on Horizon 7 Connection server fails with certificate error "Unable to verify vCenter certificate"
Reason:
VMware Vcenter 5.0, 5.1 and 5.5 works with TLSv1.0 Security protocol. But on VMware Horizon 7 and later version, TLSv1.0 is disabled by default. So you might receive a certificate error while trying to integrate Vcenter 5.x server with VMware Horizon 7.x.
Solution:
Enable TLSv1.0 on Horizon View Connection Server.
Steps:
1. Login to Horizon View Connection Server host, open ADSI Edit utility.
2. Right click on "ADSI Edit", click on "Connect to..."
3. Choose "Select or type a Distinguished Name or Naming Context"
and type "DC=vdi, DC=vmware, DC=int".
Choose Computer and type "localhost:389".
Click "OK"
4. Double click and expand "Default Naming Context[Localhost:389].
Expand "DC=vdi, DC=vmware, DC=int"
Expand "OU=Properties"
Select "OU=Global"
Right Click on "CN=Common", Click "Properties"
5. Double Click to open "pae-ClientSSLSecureProtocols".
Fill the value "\LIST:TLSv1.2,TLSv1.1,TLSv1" click "OK".
Click "OK" and close ADSI Edit utility.
6. Restart Horizon View Connection Server Service or reboot server to take the effect.
Now we can try to add Vcenter Server 5.5 to Horizon View Administrator.
VMware KBASE
No comments:
Post a Comment
Enter Comments...