Documentation troubleshooting: browser rejects vicadmin and Management Portal certificate

[hickeng]

Problem
Chrome (and maybe other browsers) report ERR_CERT_INVALID and the detail reports an "invalid digital signture"

Cause
Probable cause is that a client certificate or generated CA for a prior VCH with the same IP or hostname was added to the client computers keychain.

Solution
Windows 10: run the Manage user certificates utility and ensure no Certificate Authorities or client certificates are installed for the target VCH IP or FQDN. These will likely be found under either of the following sections:

• Personal
• Trusted Root Certification Authorities

Generated VCH certificates have the VCH name (of the old VCH) as the Issuer.

[stuclem]

This is also the case for attempts to access VIC Management Portal on Chrome. Clearing certificates out of Personal and Trusted Root Certification Authorities did not solve the problem for me for the VIC MP.

Searching through the other certificate folders, I found a bunch of VMware self-signed certs in the following places:

It was only when I deleted all of the self-signed certs in the Intermediate Certification Authorities folder that I was able to access VICMP once again.

[stuclem]

Is this problem exclusive to Windows 10? I don't recall it ever happening on my Windows Server 2008 VM. I have no idea about Mac or Linux.

[andrewtchin]

I've never seen this on MacOS