VMware Horizon View 7 – TLSv1
Just a quick heads up to make sure people are not facing the same issues a customer had after upgrading to VMware Horizon View 7. Just got of the phone with a customer that did the upgrade of the VMware Horizon View environment without our help. It was a small site just for a remote office and a handful of desktops running, no composer no security server just simple and dirty desktops for a remote employee.
The upgrade went fine, desktops worked, employee was happy, license accepted and while he asked me to check some settings we get the error.
“The vCenter server certificate is invalid, make sure you have a CA signed certificate or accept the self signed in the dashboard”.
We got this message while trying to edit the desktop pool.
So we headed to the dashboard, clicked on the vCenter server and saw the message “invalid”. Simple, just click on Verify and accept the self signed. In the mean time I checked the validation period of the certificate but that was good until 2023. I couldn’t verify, it wouldn’t do anything just sit there and look stupid.
Than it hit me, there was something with older vCenter servers and TLSv1.
This customer because it was a quick and dirty upgrade waiting for the real project to start, had an old vCenter version. We have a project starting soon to upgrade and design a new environment so this was “don’t look, don’t ask just install” View environment.
TLSv1 has to be enabled on the connection server and if you have one, the composer. Here we just have a connection server so let’s dive into ADSI Edit and change it.
From the VMware installation guid of VMware Horizon View 7:
- In the console tree, select Connect to.
- In the Select or type a Distinguished Name or Naming Context text box, type the distinguished name DC=vdi, DC=vmware, DC=int.
- In the Computer pane, select or type localhost:389 or the fully qualified domain name (FQDN) of the View Connection Server host followed by port 389.
For example: localhost:389 or mycomputer.example.com:389
- Expand the ADSI Edit tree, expand OU=Properties, select OU=Global, and double-click CN=Common
in the right pane.
- In the Properties dialog box, edit the pae-ClientSSLSecureProtocols attribute to add the following value
Be sure to include the back slash at the beginning of the line.
- Click OK.
- Restart the VMware Connection server service
Now you will see that the vCenter server is greenish again and you can edit the desktop pool. It’s a simple solution but one you need to be aware of. See the installation guide for more information, the link is – here –