VIC Plugin Reports "Failed to verify the vic-machine server at endpoint"

Products

• VMware vSphere ESXi

Issue/Introduction

Symptoms:

• When using the VIC plugin a failure similar to below is shown. 

Failed to verify the vic-machine server at endpoint https://<VIC_Applience_IP>:8443. Possible causes:
The VIC appliance VM is running, but unreachable due to network misconfiguration.
The VIC appliance VM is up, but the API endpoint is unreachable. Possible issues include, but are not limited to:
Network misconfiguration
Firewall rules
API endpoint is down
Your browser may be blocking the connection because of an untrusted certificate. View API directly in your browser to see if any warnings are presented.

Environment

VMware vSphere Integrated Containers 1.5.x
VMware vSphere Integrated Containers 1.4.x

Resolution

The message most commonly occurs when the local browser is not trusting the VIC Appliance when connections are made by IP. Other causes include if the VIC Appliance is not running or responding.

Replace the VIC Appliance certificate with a certificate that has the VIC Appliance IP in the Subject Alternative Name. The VIC Appliance certificates are added from the vApp options of the VIC Appliance. See the documentation for more details. Deploy the vSphere Integrated Containers Appliance Step 4 

Future versions of the VIC plugin will use FQDN if it is available. Details on Github.

Workaround:

1. Click on the View API directly in your browser link. Alternatively, navigate to https://<VIC_Appliance_IP>:8443/container/hello in a new tab. Note: It is important to use IP not FQDN.
2. When warned that the connection is unsafe or that "Your connection is not private" click through the warning to add an exception to the browser. 
3. The web page should say "You have successfully accessed the VCH Management API."
4. Go back to the VIC Plugin and click refresh and the plugin should be able to verify the API endpoint and proceed.