VMware vSphere Storage Appliance (VSA) tab fails to display when running VSA and accessing through the vSphere Web Client
search cancel

VMware vSphere Storage Appliance (VSA) tab fails to display when running VSA and accessing through the vSphere Web Client

book

Article ID: 343294

calendar_today

Updated On:

Products

VMware vSphere ESXi

Issue/Introduction


Symptoms:
When running VMware vSphere Storage Appliance (VSA) and accessing through the vSphere Web Client, you experience these symptoms in your web browser:
  • In Firefox, you see error similar to:

    This Connection is Untrusted SITENAME uses an invalid security certificate. The certificate is not trusted because no issuer chain was provided. (Error code: sec_error_unknown_issuer)

  • In Internet Explorer:

    • Content was blocked because it was not signed by a valid security certificate.
    • You can see on click certificate errors similar to:
      • General: Windows does not have enough information to verify this certificate.
      • Certification path shows: The issuer of this certificate could not be found.
  • In Chrome, you see Frowny face Icon with Learn More legend.


Environment

VMware vSphere Storage Appliance 5.5.x
VMware vSphere Storage Appliance 1.0.x
VMware vSphere Storage Appliance 5.1.x

Cause

vCenter Server certificates are self-signed and therefore, not trusted. The vSphere Storage Appliance (VSA) Manager tab in the vSphere Web Client blocks the pop-up by default, the pop-up that allows you to accept the self-signed certificate is blocked.

Resolution

Ensure to use a supported web browser for vSphere Web Client. VMware has tested and recommends using these browser versions:
  • Microsoft Internet Explorer 7, 8, 9 and 10 (64-bit only)
  • Mozilla Firefox 17
  • Google Chrome 23
For more information, see the Using the vSphere Web Client section of the VMware vSphere 5.1 Documentation guide.
To resolve this issue, configure your web browser to trust the vCenter Server self-signed certificate. The steps for each supported browser are:

vSphere Web Client Firefox

    • Open these URLs for VSA in a separate tab and type detail certificate exception and accept the certificate there:
      • https://{vcenter-ip}/VSAManager/scriptConfig
      • https://{vcenter-ip}/VSAManager/SVAUI/SVA.jsp
    • Then close and reopen the vSphere Web Client.
    If a proxy is in use:
      • Navigate to Firefox > Options > Advanced > Network > Settings > No proxy for.
      • Ensure that the vCenter Server IP is listed in the excluded list in the No proxy for.

      vSphere Web Client Internet Explorer:

      Add vCenter Server to the trusted sites list:

      To add vCenter Server to the trusted sites list:
        • Open Internet Explorer and click Tools to see the Tools menu.

          Note: If you cannot see Tools option, press the Alt key to see the menu bar.
        • In the tools menu, click Internet Options.
        • Click the Security tab.
        • Click the Trusted Sites icon
        • Click the Sites button.
        • In the Trusted sites window, deselect the Require server verification option.
        • In the Trusted sites window, under the Add this Web site to the zone option, type these addresses (including the * symbol) and click Add after each one:

          • http://localhost (if running locally on the vCenter)
          • http://{vCenter-FQDN}
          • http://{vCenter-shortname}
          • http://{vCenter-ip}
        • In the security tab, choose the 'Internet' zone and click custom level
        • Then enable the following options under settings"
          • Loose XAML
          • XAML browser applications
        There are two more steps that may be required for Internet Explorer.
        • Disable IE SEC or IE Enhanced Security Configuration in Microsoft windows Server Manager:
        • Turn off for both Admins and User
        • Open URL for vCenter server, accept and install the certificate:
          https://<virtual-center>/VSAManager/SVAUI/SVA.jsp

        vSphere Web Client Chrome:

        Note: Chrome uses Windows Internet Options. Add same items to Chrome trusted sites as added for Internet Explorer in the preceding procedure:

        To add vCenter Server to the trusted sites list:
          • Click the icon with 3 lines on the right pane.
          • Click the Settings.
          • Click the Show Advanced Settings.
          • Click the Change proxy settings. Tools menu appears.
          • Click the Security tab.
          • Click the Trusted Sites that is identified by the green check mark.
          • Click the Sites button.
          • Add these trusted sites:
            • http://localhost (if running locally on the vCenter)
            • http://{vCenter-FQDN}
            • http://{vCenter-shortname}
            • http://{vcenter-ip}

          Note: In an environment where there the PSC and vCenter servers are separate, you need to add the PSC server to the trusted sites.


          Additional Information

          For more information, refer troubleshooting section in VMware vSphere documentation.