VCF Usage Meter 9.0 UI Shows “Connection Not Secure” After Installing Custom Certificate Chain.

Products

• VMware Usage Meter

Issue/Introduction

• The VCF Usage Meter 9.0 UI displays a “Connection not secure” warning after installing a CA-signed certificate with a root-intermediate-leaf chain.

• While the certificate may appear as valid and secured on the VAMI management console (port 5480) after manually updating the ssl.ca-file property in /opt/vmware/etc/lighttpd/cap-applmgmt-lighttpd.conf
• After importing the certificate into the keystore and restarting the services, the certificate is overwritten, leaving only a single certificate present.

Environment

VCF Usage Meter 9.0 

Cause

VCF Usage Meter 9.0 does not support the use of a custom certificate chain (root, intermediate, and leaf) for the main Usage Meter UI

Resolution

Full support for certificate chains in the VCF Usage Meter 9.0 will be introduced with the Usage Meter 9.1 GA release (aligned with VCF 9.1) via a new dedicated certificate management tool.

Until the 9.1 release is available, use one of the following workarounds:

1. Intermediate Only: Configure the appliance using only the first intermediate certificate rather than the full chain.

2. Self-Signed Certificate: Revert to or use a self-signed certificate for the appliance UI.

Please refer to the VCF Usage Meter 9.0 Deployment and Administration Guide.

Additional Information

カスタム証明書チェーンのインストール後、VCF Usage Meter 9.0 の UI に「Connection Not Secure」と表示される。