vCenter reports "Error downloading plug-in. Make sure that the URL is reachable and the registered thumbprint is correct."

Products

• VMware Live Recovery

Issue/Introduction

Symptoms:

vSphere Replication Appliance version 8.8 and 9.0.1 seeing issue with downloading plug-in.

Error downloading plug-in. Make sure that the URL is reachable and the registered thumbprint is correct.
Certificate for doesn't match any of the subject alternative names

In the vCenter Server - Administration - Client Plugins - Failed

Environment

vSphere Replication 8.8

vSphere Replication 9.0.1 

Cause

vSphere Replication Appliance certificate was generated only with Hostname and not with Fully Qualified Domain Name.

 

Resolution

Kindly perform below steps to regenerate the certificate using Fully-Qualified Domain Name

1. Use a supported browser to log in to the VRMS Appliance Management Interface.
   The URL for the VRMS Appliance Management Interface is https:// vr-appliance-address:5480.
2. Enter the admin user name and password for the appliance.
   You configured the admin password during the OVF deployment of the vSphere Replication appliance.
3. Click Certificates - Click on Change
4. There are below 3 options to change the certificate. Kindly ensure the certificate is generated using complete Fully-Qualified Domain Name.

   Menu item	Description
   Generate a self-signed certificate	Use an automatically generated certificate. Enter text values for your organization and organization unit, typically your company name, and the name of your group in the company. Accept the default FQDN and IP values. Note:Using a self-signed certificate is only recommended for non-production environments.
   Use a PKCS #12 certificate file	Use a custom certificate. Click Browse, navigate to the certificate file, and click Open. The certificate file must contain exactly one certificate with exactly one private key matching the certificate. (Optional) Enter the optional private key encryption password.
   Use a CA-signed certificate generated from CSR	Use a CA-signed certificate generated from a CSR. In the Certificate file row, click Browse, navigate to the certificate file, and click Open. (Optional) In the CA chain row, click Browse, navigate to the CA chain, and click Open.

5. Restart the vSphere Replication appliance.

 

Additional Information