To resolve this issue when you do not want to upgrade, enable SSL Certificate checking.
To enable SSL Certificate checking:
- In the vSphere Client, click Administration > vCenter Server Settings. The vCenter Server Settings dialog appears.
- If the vCenter Server system is a part of a connected group, select the server you want to configure from the Current vCenter Server dropdown.
- In the settings list, select SSL Settings.
- Select vCenter requires verified host SSL certificates. If there are hosts that require manual validation, these hosts appear in the host list at the bottom of the dialog.
- Determine the host thumbprint for each host that requires validation.
- Log in to the direct console (DCUI).
- Select View Support Information in the System Customization menu. The thumbprint is displayed in the right pane.
- If you do not have access to the direct console, you connect a vSphere Client that has not installed the hosts certificate directly to the host. When it prompts you for certificate confirmation, select View Certificate > Details, then scroll down to thumbprint.
- If your issue is occurring because the SSL Thumbprints do not match, when you click OK all listed hosts disconnect from vCenter Server. Reconnect each host (this requires the root password) to refresh the SSL thumbprints.
- Compare the thumbprint you obtained from the host with the thumbprint listed in the vCenter Server Settings dialog.
- If the thumbprints match, select the check box for the host.
- Click OK. Hosts that you have not selected are now disconnected.