"ovftool cannot be opened because the developer cannot be verified" while using VCSA UI Installer
search cancel

"ovftool cannot be opened because the developer cannot be verified" while using VCSA UI Installer

book

Article ID: 326088

calendar_today

Updated On:

Products

VMware Aria Suite VMware vCenter Server

Issue/Introduction

Symptoms:
Running the VCSA UI Installer or other .iso based easy installers, you see the following error message on MacOS 
ovftool cannot be opened because the developer cannot be verified


Environment

VMware vCenter Server Appliance 6.7.x

Cause

This is due to a security change in MacOS Catalina which now prevents non notarized apps from running.

Resolution

VMware is aware of this issue and working on a resolution.

Workaround:
Note: spctl has been updated in later versions of MacOS.  --master-enable | --master-disable have been changed to --global-disable | --global-enable.

Workaround 1: Disable the security until the vCenter Server deployment is completed.
  1. Run the command 
    sudo spctl --global-disable
  2. In Security and Privacy settings set Allow apps download from to anywhere.
  3. Run 
    sudo xattr -r -d com.apple.quarantine Path_to_the_iso
Example: 
sudo xattr -r -d com.apple.quarantine VMware-VCSA-all-6.7.0-Update-15132721

sudo xattr -r -d com.apple.quarantine VMware-VCSA-all-7.0.0-15952498.iso
  1. Mount the ISO and open UI Installer
  2. Install/Upgrade vCenter Server 6.7/7.0
  3. Run the following command in your terminal 
    sudo spctl --global-enable
Note: This will turn the security back on to protect against other unsigned/verified apps.

Workaround 2: Deploy the vCenter Server from a Microsoft Windows device.

Additional Information

Impact/Risks:
Aria Automation and Aria Lifecycle (formally vRealize Automation and vRealize Suite Lifecycle) Easy Installers and other .iso based installers may run into this issue.

Powered by Wolken Software