To resolve the issue, run the script to add the missing certificate to vecs TRUSTED_ROOTS store.
1. Open an SSH session to vCSA 6.0 and log in using root.
2. Run this command to create a directory /tmp/certs
mkdir /tmp/certs
3. Download the attached script in this KB and upload to the folder /tmp/certs/ on the vCSA
Note: You will need to change the default Appliance Shell to BASH to upload files using WinSCP. For more information, see
https://kb.vmware.com/kb/2100508
4. Run this command to change the directory:
"cd /tmp/certs/"
5. Run this command to run the script:
“python cert-import.py”
6. In the command prompt, provide the tenant name and then provide SSO Password.
7. Re-login to Web Client and browse to Home->Administration->System Configuration->Nodes->[select node]->Manage->Access.
8. Click Edit to confirm Web Client works as expected.