Client Integration Plugin fails to load in Chrome Browser version 58+

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

• Client Integration Plugin fails to load in Chrome Browser version 58+.
• Any action requiring the Client Integration Plugin fails with the message:
  
  The Client Integration Plug-in must be installed to enable OVF functionality. Click the link below to download the installer. If installed, refresh the browser and allow access.

Environment

VMware vCenter Server 6.0.x

Cause

This issue occurs due to changes in the requirements for SSL certificates in Chrome Browser that are incompatible with the older Client Integration Plug-in certificates.

Resolution

This issue is resolved in vCenter Server 6.0 Update 3c, available at VMware Downloads.
 

Important: Ensure to re-install the latest version of Client Integration Plug-in (CIP) after updating vCenter Server. To download the latest version of CIP, click http://vsphereclient.vmware.com/vsphereclient/VMware-ClientIntegrationPlugin-6.0.0-6823256.zip.

Also reference  Upgrading VMware Client Integration Plug-in to the latest version   (Windows / Mac / Linux) https://kb.vmware.com/s/article/2145066

Workaround:

To work around this issue:
 

1. Navigate to C:\Program Files (x86)\VMware\Client Integration Plug-in 6.0\ folder.
2. Take a backup of the C:\Program Files (x86)\VMware\Client Integration Plug-in 6.0\csd-openssl.cfg file .
3. Download the 2150369_csd-openssl.zip file attached in this KB and extract to get csd-openssl.cfg file.
4. Open C:\Program Files (x86)\VMware\Client Integration Plug-in 6.0\csd-openssl.cfg file in a Text Editor.
5. Replace the content in the csd-openssl.cfg file with the content from the downloaded csd-openssl.cfg file.
6. From an elevated command prompt, run notepad.exe "C:\Program Files (x86)\VMware\Client Integration Plug-in 6.0\csd-openssl.cfg".
   
   Note: The permissions and file owner of the csd-openssl.cfg file will remain intact and the default permissions will be as below:
    
   • Owner: SYSTEM
   • SYSTEM - Full control
   • Administrators - Full control
   • Authenticated Users - Read
      
7. Navigate to C:\ProgramData\VMware\CIP\csd\ folder.
8. Take a backup of the C:\ProgramData\VMware\CIP\csd\ssl folder.
   
   Note: This Step helps to keep the permissions and owner of the C:\ProgramData\VMware\CIP\csd\ssl folder. Default permissions will remain as below:
    
   • Owner: SYSTEM
   • SYSTEM - Full control - This folder, subfolder and files
   • Administrators - Full control - This folder, subfolder and files
   • Users - Read & execute - This folder, subfolder and files
   • Users - Write - This folder, subfolder
      
9. Delete all the content from within  C:\ProgramData\VMware\CIP\csd\ssl. Do not delete the folder itself.
10. From an elevated command prompt, run "C:\Program Files (x86)\VMware\Client Integration Plug-in 6.0\vmware-csd.exe" --install
11. The C:\ProgramData\VMware\CIP\csd\ssl directory will populate with new certs within 2 minutes before it is ready for use.

Additional Information

Chrome ブラウザ バージョン 58 以降で Client Integration Plugin をロードできない