Error 500 access when launching vCenter web-UI

Products

• VMware vCenter Server

Issue/Introduction

Administrators are unable to access the vCenter Server web-based user interface(UI) and receive an HTTP 500 error message. The vCenter Server Appliance Management Interface (VAMI) remains accessible on port 5480.

Environment

vCenter 7.x

vCenter 8.0

Cause

This issue is typically caused by expired internal certificates or a mismatch in extension thumbprints within the vCenter Server.

Resolution

To resolve this issue, use the automated vCert utility to replace the expired certificates.

Prerequisites:

• Download the latest vCert tool from the official Broadcom Knowledge Base: vCert - Scripted vCenter expired certificate replacement

• Ensure you have the root password for the vCenter Server Appliance(VCSA) and the [email protected] password.

Steps:

1. Identify the ESXi host where the vCenter Server Appliance is running.

2. Crucial: Take an offline snapshot of the vCenter Server Appliance before proceeding with any certificate replacements.

3. Using an SCP client(such as WinSCP), copy the downloaded vCert zip file to the /root/temp directory on the VCSA.

4. Log in to the VCSA via SSH as the root user.

5. Navigate to the temp directory and extract the script:
   
   cd /root/temp
unzip -q vCert-6.1.0-20250910.zip
cd vCert-6.1.0-20250910

   (Note: Adjust the folder name based on the specific version of vCert you downloaded).

6. Run the tool:
   
   ./vCert.py

7. From the main menu, select Option 6: "Reset all certificates with VMCA-signed certificates":
   
    1. Check current certificate status
 2. View certificate info
 3. Manage certificates
 4. Manage SSL trust anchors
 5. Check configurations
 6. Reset all certificates with VMCA-signed certificates
 7. ESXi certificate operations
 8. Restart services
 9. Generate certificate report
 E. Exit
   

8. Once the script completes successfully, reboot the vCenter Server Appliance to ensure all services restart cleanly.

9. Verify that both the vCenter web UI and the VAMI are now accessible.