Loading

×Sorry to interrupt
CSS Error

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

My Subscriptions

Loading

Knowledge Base

VMware vCenter Server plugins fail after adding custom SSL certificates (1017577)

Last Updated: 3/20/2024Categories: TroubleshootingTotal Views: 25622Language:
Chinese (Simplified)JapaneseEnglish

Subscribe to get an email
newsletter with new updates

Please provide article feedback:

Symptoms

vCenter Server plugins fail

You see the error:

Authentication errors - validate SSL Certificate thumbprints

The vCenter Server's %ALLUSERSPROFILE%\Application Data\VMware\VMware VirtualCenter\Logs\vws.log shows:

[2010-01-10 15:33:43,840 Thread-3 ERROR 'com.vmware.vim.query.servlets.ServicesContextListener'] Failed to initialize certificate:
com.vmware.vim.common.ssl.CertificateLoadException: I/O error: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded
at com.vmware.vim.common.ssl.SSLUtil.createKeyStore(SSLUtil.java:104)
at com.vmware.vim.common.impl.InstanceConfigImpl.<init>(InstanceConfigImpl.java:46)
at com.vmware.vim.common.InstanceSingleton.init(InstanceSingleton.java:103)
at com.vmware.vim.query.servlets.ServicesContextListener.initializeWebApplication(ServicesContextListener.java:202)
at com.vmware.vim.query.servlets.ServicesContextListener.access$100(ServicesContextListener.java:60)
at com.vmware.vim.query.servlets.ServicesContextListener$WrapInit.startUp(ServicesContextListener.java:101)
at com.vmware.vim.query.servlets.ServicesContextListener$WrapInit.run(ServicesContextListener.java:89)
Caused by: java.io.IOException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded

SEVERE: Error initializing endpoint
java.io.IOException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded

Note: In Windows 2008, by default, the vws.log file is located at C:\ProgramData\VMware\Vmware VirtualCenter\Logs

The vCenter Server's %ALLUSERSPROFILE%\Application Data\VMware\VMware VirtualCenter\Logs\sms.log shows:

2010-01-19 15:10:54,116 [Thread-7] ERROR com.vmware.vim.sms.ServiceImpl - Unknown exception encountered during service initialization
java.security.cert.CertificateParsingException: invalid DER-encoded certificate data
2010-01-19 15:16:28,419 [http-127.0.0.1-8080-1] ERROR com.vmware.vim.sms.ServiceImpl - Operation QueryList failed com.vmware.vim.sms.fault.ServiceNotInitialized

Note: In Windows 2008, by default, the sms.log file is located at C:\ProgramData\VMware\Vmware VirtualCenter\Logs

After upgrading to vCenter Server 4.x, the Web Access service fails to start

Cause

These issues occur when SSL certificates are corrupt, replaced, or changed by a third party application. The VMware Web Services (VWS) on vCenter Server uses (keystore) passwords to decrypt and read content of pfx files. If the password used by VWS is incorrect, you see SSL cert errors.

Resolution

This issue has been resolved. For more information see the VMware vCenter Server 4.0 Update 3 Release Notes.

To workaround this issue without updating, manually insert the password in the instance.cfg file or recreate the pfx file.

To manually insert the password in the instance.cfg file:

Open the C:\Documents and Settings\All Users\Application Data\VMware\VMware VirtualCenter\instance.cfg file.

Note: In a Windows 2008 server, the instance.cfg file can be located at C:\ProgramData\VMware\VMware VirtualCenter\.

Type this text in the file:

keystorePassword=testpassword

Where testpassword is the password used to create the .pfx file.

Restart the VMware VirtualCenter Server service, the VMware VirtualCenter Management Webservices, and the VMware VCMSDS service. For more information, see Stopping, starting, or restarting vCenter services (1003895).

To recreate pfx files:

Recreate the pfx file with password testpassword. This is the default password hardcoded in VWS when trying to load keystore. For more information, see Replacing vCenter Server Certificates.

Restart the VMware VirtualCenter Server service, the VMware VirtualCenter Management Webservices, and the VMware VCMSDS service. For more information, see Stopping, starting, or restarting vCenter services (1003895).

Related Information

For more information on creating custom SSL certificates, see Replacing vCenter Server Certificates.

カスタム SSL 証明書の追加後に VMware vCenter Server プラグインが失敗する
添加自定义 SSL 证书后，VMware vCenter Server 插件失败

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
Chinese (Simplified)JapaneseEnglish

Attachments

Additional Resources

KB
•
End Of General Availability of the Free vSphere Hypervisor (ESXi 7.x and 8.x) (2107518)

KB
•
Désactivation de la sortie hostd et vpxa dans le journal /var/log/messages de l'ESXi (1030672)

KB
•
Falha de conexão a uma unidade de CD-ROM remota usando VMware Infrastructure Client com XP/Vista/7 (1009065)

KB
•
VMware Tools に対するアクセスを禁止する (1006354)

KB
•
No es posible conectar a una unidad de CD-ROM remota utilizando VMware Infrastructure Client en XP/Vista/7 (1009065)

Results 1-5 of 5

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware vCenter Server

Related Versions:

VMware vCenter Server 4.0.x

Take Our Survey

Support Assistant