Search the VMware Knowledge Base (KB)
Products:
View by Article ID

Administration dashboard in VMware Horizon View reports the error: Server's certificate cannot be checked (2000063)

  • 19 Ratings

Symptoms

  • View Administration dashboard displays Connection Server in red status.
  • View Administration dashboard displays Security Server in red status.
  • Clicking Connection Server in View Administration displays this error:

    Connection Server certificate is not trusted

  • Clicking Security Server in View Administration displays this error:

    Server's certificate cannot be checked

  • You are able to connect externally through the Security Server.
  • The certificates on the server are valid.

Cause

This issue occurs if the Certificate Revocation List (CRL) includes a URL that cannot be accessed from the Connection Server paired to the Security Server.

Resolution

To resolve this issue, ensure that the Connection Servers that are paired with Security Servers are able to check the URL in the Certificate Revocation List (CRL), if your environment includes a proxy server that controls Internet access.

To work around this issue, create a CertificateRevocationCheckType registry string in Windows Registry.

Note: This procedure modifies the Windows registry. Before making any registry modifications, ensure that you have a current and valid backup of the registry and the virtual machine. For more information on backing up and restoring the registry, see the Microsoft Knowledge Base article 136393.

Note: The preceding link was correct as of 20 February 2015. If you find the link is broken provide a feedback and a VMware employee will update the link.

To create a CertificateRevocationCheckType registry string in Windows Registry:

Note: If you are using multiple connection servers, you need to make this registry modification on all Connection Servers.
  1. Navigate to HKEY_LOCAL_MACHINE\Software\VMware, Inc.\VMware VDM\Security\ in the View Connection Server.

    Caution: Ensure that you make changes in the Connection Server and not the Security Server.

  2. Create the CertificateRevocationCheckType registry string (REG_SZ) and set its value to 1.



Note: Reboot is not required to make this change take effect.

Additional Information

See Also

Update History

07/13/2012 - Added steps to skip checking certificates for revocation 08/17/2012 - Added step to reboot the connection server 10/11/2012 - Added link to KB 2035818 10/30/2012 - Added screenshot 04/26/2013 - Added the last line to about multiple connection servers in the Resolution section 05/01/2013 - Added View 5.2 to the product version. 01/16/2014 - Added View 5.3 to the product version.

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 19 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)




Please enter the Captcha code before clicking Submit.
  • 19 Ratings
Actions
KB: