Knowledge Base

The VMware Knowledge Base provides support solutions, error messages and troubleshooting guides
 
Search the VMware Knowledge Base (KB)   View by Article ID
 

View Administrator 5.1 shows security servers’ health status as red, with the message: Server certificate cannot be checked (2035818)

Details

After you install View security servers and pair them with View Connection Server instances, in the View Administrator dashboard, you might see that the status of the security servers is red, and the associated error message says:

Server certificate cannot be checked.

This situation can occur even if you have a valid security certificate if the certificate revocation information points to a URL on the Internet and your company uses a proxy for Internet access. In this case, the View Connection Server service, which is run by the local system account, cannot use the proxy settings specified in Internet Explorer.

Solution

The issue is that the server certificate revocation status cannot be checked. View Connection Server cannot contact the revocation service because it does not have the correct proxy settings. You can either configure View Connection Server not to perform certificate revocation checking, or you can set the correct proxy settings.

Solution 1:

If you do not want to allow View Connection Server to connect to the Internet, you can configure View Connection Server not to perform certificate checking. For instructions, see Configuring Certificate Revocation Checking on Server Certificates in the VMware View Installation document. For more information, see View Administration dashboard reports the error: Server's certificate cannot be checked (2000063).

Solution 2:

If you want to allow View Connection Server to use the same proxy settings as those used in Internet Explorer, to enable it to connect to the Internet and go to the certificate checking URL:

  1. Log in as an administrator to the physical or virtual machine where View Connection Server is installed, and set Internet Explorer to use the correct proxy settings.
  2. Open a command prompt and enter theses commands to determine whether View is using a direct connection rather than using the proxy:

    netsh
    winhttp
    show proxy

    If View is already using the proxy settings, do not continue this procedure. The issue is likely related to not having a valid security certificate or not having the certificate configured correctly. See the Configuring SSL Certificates for View Servers section in the VMware View Installation document.

  3. Enter this command to import the proxy settings from Internet Explorer into View:

    import proxy source=ie

  4. Enter this command to verify that the proxy settings are now being used:

    show proxy

  5. Restart the VMware View Connection Server service.
  6. Repeat this procedure on the other View Connection Server instances in the replicated group.
 
Note: This issue may also occur if you choose Windows Server 2008 template when requesting a new certificate. To avoid this issue, ensure to choose the Windows Server 2003 certificate template option when requesting the new certificate.

For more information, see Managing SSL Certificates in VMware View 5.1 using an internal Microsoft Certificate Authority (2020913).


Keywords

certificate revocation, proxy settings, CRL

Update History

10/11/2012 - Added link to KB 2000063 in Solution 1

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 2 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.
What can we do to improve this information? (4000 or fewer characters)
  • 2 Ratings
Actions
KB: