vSphere Client fails to connect to the vCenter Server or ESXi with TLSv1.0 disabled

Products

• VMware vCenter Server

Issue/Introduction

vSphere Client is enabled with all three protocols TLSv1.0,TLSv1.1,TLSv1.2 by default. If TLSv1.1, TLSv1.2 is enabled, you might get an error message while connecting the vCenter Server or ESXi using the vSphere Client.

Environment

VMware vCenter Server Appliance 6.0.x
VMware vCenter Server 6.0.x

Resolution

Microsoft updates are required to make vSphere Client function with TLSv1.2 enabled ESXi or vCenter Server.

To update, perform the steps below:

1. Navigate to the configuration file C:\Program Files (x86)\VMware\Infrastructure\Virtual Infrastructure Client\Launcher\VpxClient.exe.config
2. Edit the VpxClient.exe.config file by setting the parameters
    
   <add key = “EnableTLS12” value = “false” />
   
   as
   
   <add key = “EnableTLS12” value = “true” />
3. Connect using vSphere Client.
   Note: An error window will be displayed with an error similar to this:
   The requested security protocol is not supported.
   
4. Install all Microsoft Windows Updates
5. Install all the KBs from https://www.microsoft.com/en-us/download/details.aspx?id=42334 which are required for Microsoft .Net 4.6.2
6. Install Microsoft .NET 4.6.2
7. Install the KB related to TLS support for your operating system

Additional Information

简体中文：vSphere Client 在禁用 TLSv1.0 的情况下无法连接到 vCenter Server 或 ESXi