Search the VMware Knowledge Base (KB)
View by Article ID

Virtual machines with customizations fail to deploy when using Custom SSL Certificates (1019893)

  • 3 Ratings


If you install custom SSL certificates that are signed by a certificate chain on vCenter Server, you may experience these symptoms:

  • Virtual machine with customizations fail to deploy
  • You see the error:

    The vCenter Server is unable to decrypt passwords stored in the customization specification.

    Note: In German, the error message appears as:

    Der vCenter Server kann in der Anpassungsspezifikation gespeicherte Kennwörter nicht entschlüsseln. 

  • This issue occurs even when you:
    • Use a customization password that does not contain any special characters.
    • Customize using an existing customization specification to use stored customization options.
    • Customize using the Customization Wizard and enter values interactively.
  • This issue does not occur if you use the default VMware SSL certificates.
  • The vCenter Server vpxd logs show error similar to:

    [2010-03-22 08:58:49.666 04728 error 'App'] Error: -2147467259
    Source: VpxdVmCustomizer::GetPassword
    Description: [pfxcrypt] cannot get cryptprov:
    Context: decrypting password

    [2010-03-22 08:58:49.666 04728 error 'App'] Error occured while creating deploy package. Msg: vim.fault.CannotDecryptPasswords


VMware does not currently support custom SSL certificates that are signed by a certificate chain.
To resolve this issue, perform one of these options:

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.


  • 3 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)

Please enter the Captcha code before clicking Submit.
  • 3 Ratings