Error: "Your Connection is not private" when attempting to access UI after changing cloud cell endpoint certificate

Products

• VMware Cloud Director

Issue/Introduction

• The Cloud Director UI is inaccessible after updating the Cell Endpoint Certificate.

• Web browsers display a certificate error when attempting to access the Cloud Director UI.

• If the certificate warning is bypassed in Chromium based browsers this results in an incomplete or broken UI.

Environment

VMware Cloud Director 10.6.X

Cause

This issue occurs due to the incorrect certificate used for the Cell Endpoint.

Resolution

To resolve this issue perform the following steps if the correct certificate has been uploaded to the certificate library:

 

Prerequisite: Log in to the Cloud Director API Explorer (https://example.vcloud.com/api-explorer/provider).

Note: For Chromium browsers, type thisisunsafe directly on the error page to bypass certificate warnings.

1. Get Cell URNs:
   
   (a) Navigate to the cell section of API Explorer.
   
   (b) Execute GET /1.0.0/cells and copy the URN for each Cloud Cell that is affected from the response body.
   
   
2. Get Certificate Details
   
   (a) Navigate to the certificateLibrary section.
   
   (b) Execute GET /1.0.0/ssl/certificateLibrary and copy the ID and alias of the correct certificate(s).
   
   
3. Retrieve Current Cell Configuration
   
   (a) Back in the cell section, select GET /1.0.0/cells/{cellUrn}/accessEndpoints.
   
   (b) Paste one of the cellUrns into the cellUrn parameter, click Execute, and copy the resulting JSON payload.
   
   
4. Update Cell Configuration
   
   (a) Select PUT /1.0.0/cells/{cellUrn}/accessEndpoints.
   
   (b) Use the same cellUrn from step 3 and paste the JSON payload into the request body.
   
   (c) Edit the JSON payload: update the name field to match the certificate alias (from Step 2 b), and update the id field to match the certificate library item ID (from Step 2 b).
   
   (d) Click Execute and confirm a 200 OK or 202 Accepted response.
   
   Repeat Steps 3 and 4 for All affected Cells
   
   
5. Open a new incognito/private browser window and navigate to your Cloud Director Provider portal to confirm the UI loads successfully with the new certificate.