Knowledge Base

The VMware Knowledge Base provides support solutions, error messages and troubleshooting guides
 
Search the VMware Knowledge Base (KB)   View by Article ID
 

Connecting to the View Client Server after upgrading to Teradici Zero Client 4.0 firmware fails with the error: The supplied certificate is not rooted in the device's local certificate store (2021327)

Symptoms

  • Cannot connect to the View Client Server after upgrading to Teradici Zero Client 4.0 firmware
  • Connecting to the View Client Server after upgrading to Teradici Zero Client 4.0 firmware fails
  • You see the error:

    The supplied certificate is not rooted in the device's local certificate store.

Cause

This issue occurs if you have not imported the root SSL certificate into the zero client certificate store.

Note: The Teradici Zero Client 4.0 firmware is not compatible with View Connection Server 5.0 or earlier versions. To run this version, you need to upgrade your Connection Server to View 5.1. For more information on upgrading, see the VMware View Upgrade Guide.

Resolution

To import the root certificate into the Zero Client memory:
  1. Download the root certificate from the Certificate Authority to your local machine in .PEM format.
  2. Connect to the Web interface of the Zero Client by navigating to https://ZeroClientIP, where ZeroClientIP is the IP address of the Zero Client.
  3. Click Upload > Certificate.
  4. In the Certificate Filename field, click Browse.
  5. Select the .PEM certificate and click Upload.
Note: You can only upload 16 certificates at one time.

Additional Information

If you have a large number of Zero Client endpoints, you may be able to push the certificate out to all devices by using the Teradici ZeroClient Management Appliance. For more information, contact Teradici Support.
 
Note: Teradici has released Zero Client firmware version 4.0.2 which is compatible with View Manager 5.0. For more information, see the Teradici Knowledge Base article PCoIP Zero Client View 5.0 Certification Details (15134-809). To access this article, you must be a registered user in the Teradici Web site.

Also, ensure to download firmware version 4.0.2 for View Manager 5.0 and later. If you are using an earlier firmware version, even if the certificates are downloaded correctly in the .pem format, the zero client logs may report errors similar to:

03/02/2013, 15:09:32> LVL:1 RC:-510 X509_UTIL :get_issuer() failed!
03/02/2013, 15:09:32> LVL:1 RC:-510 MGMT_CERT :(tera_mgmt_cert_is_cert_trusted): ERROR failed to decode the certificate
03/02/2013, 15:09:32> LVL:1 RC:-510 X509_UTIL :get_subject() failed!
03/02/2013, 15:09:32> LVL:1 RC:-510 MGMT_CERT :(tera_mgmt_cert_is_cert_trusted): ERROR failed to decode the certificate
03/02/2013, 15:09:32> LVL:1 RC:-510 X509_UTIL :get_subject() failed!
03/02/2013, 15:09:32> LVL:1 RC:-510 MGMT_CERT :(tera_mgmt_cert_is_cert_trusted): ERROR failed to decode the certificate
03/02/2013, 15:09:32> LVL:1 RC:xFFFFE24D MGMT_SSL :mgmt_ssl_certificate_revocation_test: mgmt_ssl_ocsp_validate_certificate() failed: Unknown Err
03/02/2013, 15:09:32> LVL:1 RC:-500 MGMT_VDMCSI :Warn on View Default mode: VCS certificate failed verification
03/02/2013, 15:09:32> LVL:2 RC: 0 MGMT_VDMCSI :Certificate verification overall result: FAILED
03/02/2013, 15:09:32> LVL:2 RC: 0 MGMT_VDMCSI :Self-signed setting: Self-signed certificates are always allowed

 

Update History

11/15/2012 - Added Note regarding Teradici f/w version 4.0.2 06/18/2103 - Added note regarding the new firmware and the errors associated with the old firmware in Additional Information section

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 0 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.
What can we do to improve this information? (4000 or fewer characters)
  • 0 Ratings
Actions
KB: