Virtual machine console displays an untrusted certificate warning in vCenter Server 6.0

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:
Replacing the vCenter Server or vCenter Server Appliance 6.0 certificates with custom certificates signed by a trusted Certificate Authority, the virtual machine remote console displays an untrusted certificate warning.

Environment

VMware vCenter Server Appliance 6.0.x
VMware vCenter Server 6.0.x

Cause

By default, the virtual machine remote console is displayed over port 9443.

This issue occurs when the vSphere Web Client does not present a full chain of certificates over port 9443.

Resolution

This is a known issue affecting VMware vCenter Server and vCenter Server Appliance 6.0.

 

Currently there is no resolution.

To workaround this issue, install all intermediate CA certificates (including the VMCA Root certificate if in use as a Subordinate CA) in the Trusted Certificate Authority store of the Operating System while accessing the vSphere Web Client.

This operation will vary depending on the Operating System. Please engage your Operating System Support Organization for more details.
 

Refer these articles for Windows and Mac OS X:

Managing trusted root certificates in Windows
Installing a Certificate into the Keychain for Mac OS X

 

Note: The preceeding link was correct as of September 02, 2015. If you find the link is broken, please provide feedback and a VMware employee will update the link.

Additional Information

vCenter Server Appliance 6.0 中虚拟机控制台显示证书不可信警告
vCenter Server 6.0 で仮想マシンのコンソールに信頼されない証明書の警告が表示される