Thursday, February 26, 2015

vCloud air plugin for vCenter server error: "Server Certificate not Verified"

For vCloud air plugin version 1.5.1.0 this is expected if the vCloud air certificate has not been added to vCenter server trusted keystore.  If you don't add the certificate you will be unable to register your vCloud Air account with the plug-in and connect to vCloud Air.

Solution:

Login to vCloud air.  https://vchs.vmware.com

From browser download the certificate.
NOTE Ensure that you select the Base-64 encoded x.509 option while exporting the certificate.
Firefox
- Click the lock icon in the URL field, then click More information.
- In the Security tab, click View Certificate.
- In the Details tab, click Export.
- Save the file with the name vchs.cer and the type X.509 Certificate (PEM).
Internet Explorer
- Click the lock icon in the URL field, then click View certificates.
- In the Details tab, click Copy to File and follow the wizard to export the certificate.
- Select Base-64 encoded X.509 (.CER) as the format and name the file vchs.cer.
Chrome
- Click the lock icon in the URL field.
- In the Connection tab, click Certificate information.
- In the Details tab, click Copy to File and follow the wizard to export the certificate.
- Select the Base-64

If your vCenter server is installed on Windows run this command:

C:\Program Files\Java\jre7\bin\keytool.exe" -alias aliasName -v -keystore "C:\Program Files\VMware\Infrastructure\vSphereWebClient\server\configuration\keystore" -storepass changeit -import -file path_to_file\fileName.cer


If your running a vCenter server appliance:

Copy .cer file to /tmp folder using a tool like WinSCP.
Run the following command:
/usr/java/jre-vmware/bin/keytool -alias aliasName -v -keystore /usr/lib/vmware-vsphere-client/server/configuration/keystore -storepass changeit -import -file /tmp/vCA.cer


Links:

http://pubs.vmware.com/vchsplugin-15/index.jsp?topic=%2Fcom.vmware.vchsplugin.install%2FGUID-F75F245C-85B6-4A1A-B2FC-A5CB1B17C6C7.html

http://pubs.vmware.com/vchsplugin-15/index.jsp?topic=%2Fcom.vmware.vchsplugin.doc%2FGUID-EC4471B5-0CED-4382-B251-AE73D103D80C.html