"'PSC_FQDN' doesn't match with hostname in Platform Services Controller certificate" error installing vCenter Server 6.7
search cancel

"'PSC_FQDN' doesn't match with hostname in Platform Services Controller certificate" error installing vCenter Server 6.7

book

Article ID: 345500

calendar_today

Updated On:

Products

VMware vCenter Server

Issue/Introduction

Symptoms:
  • When entering the PSC information into the vCenter Server installer wizard, the following messages are displayed.
Unable to validate the connectivity to the external Platform Services Controller.
Failed to validate sso.('PSC_FQDN' doesn't match with hostname in Platform Services Controller certificate)


Environment

VMware vCenter Server Appliance 6.5.x
VMware vCenter Server 6.7.x
VMware vCenter Server 6.5.x
VMware vCenter Server Appliance 6.7.x

Cause

This problem occurs when uppercase letters are used in the field for the PSC host address. It will also occur if the entry is not in the Subject Alternative Name (SAN) of the PSC's machine_ssl certificate.

Resolution

VMware is aware of this issue and working towards a solution

Workaround:
To workaround this issue, use only lowercase letters in the PSC host address field.

Additional Information

You can use openssl to view the PSC's machine_ssl certificate

openssl s_client -connect <PSC_ADDRESS>:443