"The Client Integration Plug-in must be installed to enable OVF functionality" Client Integration Plugin fails to load in Chrome Browser version 58 and later

Products

• VMware vCenter Server 6.0

Issue/Introduction

• Client Integration Plugin fails to load in Chrome Browser version 58+.
• Any action requiring the Client Integration Plugin fails with the message:
  
  The Client Integration Plug-in must be installed to enable OVF functionality. Click the link below to download the installer. If installed, refresh the browser and allow access.

Cause

This issue occurs due to changes in the requirements for SSL certificates in Chrome Browser that are incompatible with the older Client Integration Plug-in certificates.

Resolution

This issue is resolved in vCenter Server 6.0 Update 3c, available at ProductFiles - Support Portal - Broadcom support portal
 

Important: Ensure to re-install the latest version of Client Integration Plug-in (CIP) after updating vCenter Server. 

Workaround: 

1. Navigate to C:\Program Files (x86)\VMware\Client Integration Plug-in 6.0\ folder.
2. Take a backup of the C:\Program Files (x86)\VMware\Client Integration Plug-in 6.0\csd-openssl.cfg file .
3. Download the 2150369_csd-openssl.zip file attached in this KB and extract to get csd-openssl.cfg file.
4. Open C:\Program Files (x86)\VMware\Client Integration Plug-in 6.0\csd-openssl.cfg file in a Text Editor.
5. Replace the content in the csd-openssl.cfg file with the content from the downloaded csd-openssl.cfg file.
6. From an elevated command prompt, run notepad.exe "C:\Program Files (x86)\VMware\Client Integration Plug-in 6.0\csd-openssl.cfg".
   
   Note: The permissions and file owner of the csd-openssl.cfg file will remain intact and the default permissions will be as below:
    
   • Owner: SYSTEM
   • SYSTEM - Full control
   • Administrators - Full control
   • Authenticated Users - Read
      
7. Navigate to C:\ProgramData\VMware\CIP\csd\ folder.
8. Take a backup of the C:\ProgramData\VMware\CIP\csd\ssl folder.
   
   Note: This Step helps to keep the permissions and owner of the C:\ProgramData\VMware\CIP\csd\ssl folder. Default permissions will remain as below:
    
   • Owner: SYSTEM
   • SYSTEM - Full control - This folder, subfolder and files
   • Administrators - Full control - This folder, subfolder and files
   • Users - Read & execute - This folder, subfolder and files
   • Users - Write - This folder, subfolder
      
9. Delete all the content from within  C:\ProgramData\VMware\CIP\csd\ssl. Do not delete the folder itself.
10. From an elevated command prompt, run "C:\Program Files (x86)\VMware\Client Integration Plug-in 6.0\vmware-csd.exe" --install
11. The C:\ProgramData\VMware\CIP\csd\ssl directory will populate with new certs within 2 minutes before it is ready for use.

Additional Information