Disabling SSL encryption on VMware Converter Standalone

Products

• VMware vSphere ESXi

Issue/Introduction

By default, VMware vCenter Converter Standalone worker encrypts the data stream using SSL. Encrypting the traffic increases security, but it can decrease performance.

This article provides steps to disable SSL encryption in VMware vCenter Converter Standalone

Symptoms:
The following log snippets will be captured in the converter-worker.log :

YYYY-MM-DDThh:mm:ss:xxx-Z error vmware-converter-worker[51460] [Originator@6876 sub=IO.Http] User agent failed to send request; (null), class Vmacore::Ssl::SSLException(SSL Exception: error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol)
--> [context]zKq7AUsEAQAAAEAAYwEQdm13YXJlLWNvbnZlcnRlci13b3JrZXIAAEhvInZtYWNvcmUuZGxsAACglQYApEEGAOZbAgDZWBsA1hwSAFMkEgAGPBIA4rEbANYSGwAXJxsAu54fAS+JBHVjcnRiYXNlLmRsbAACyQUCS0VSTkVMMzIuRExMAANdfAZudGRsbC5kbGwAAy18Bg==[/context]
YYYY-MM-DDThh:mm:ss:xxx-Z error vmware-converter-worker[09656] [Originator@6876 sub=task-14] TaskImpl has failed with MethodFault::Exception: Fault cause: vmodl.fault.HostNotReachable
-->
YYYY-MM-DDThh:mm:ss:xxx-Z info vmware-converter-worker[09656] [Originator@6876 sub=task-14] Volume-based cloning <source_IP> --> <Destination_VM_Name> updates, state: 4, percentage: 0, xfer rate (Bps): <unknown>
YYYY-MM-DDThh:mm:ss:xxx-Z error vmware-converter-worker[51460] [Originator@6876 sub=vmomi.soapStub[178]] Resetting stub adapter: service state request failed; a: <<cs p:06ab7c78, TCP:<source_IP>:443>, /converter/sdk>, pa: <cs p:06ab7c78, TCP:<source_IP>:443>, class Vmacore::Ssl::SSLException(SSL Exception: error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol)
--> [context]zKq7AUsEAQAAAEAAYwEQdm13YXJlLWNvbnZlcnRlci13b3JrZXIAAEhvInZtYWNvcmUuZGxsAACglQYApEEGAOZbAgDZWBsA1hwSAFMkEgAGPBIA4rEbANYSGwAXJxsAu54fAS+JBHVjcnRiYXNlLmRsbAACyQUCS0VSTkVMMzIuRExMAANdfAZudGRsbC5kbGwAAy18Bg==[/context]

Environment

• VMware vCenter Converter Standalone 6.4
• VMware vCenter Converter Standalone 6.6

Resolution

To disable SSL encryption:

1. Take a backup of the converter-worker.xml file. By default, this file is located at:
   
   • Windows 10/Windows 11/Server 2012 and Later – C:\ProgramData\VMware\VMware vCenter Converter Standalone
2. Open the converter-worker.xml file using a text editor.
3. Locate the tag pair <useSsl></useSsl>. It is located inside the <nfc> tag and has a value of true.
4. Change the value to false.
5. Save and close the file.
6. Restart the VMware vCenter Converter Standalone Worker service on the machine.

Additional Information