Search the VMware Knowledge Base (KB)
View by Article ID

"HTTP error 404" error when accessing vRealize Orchestrator control center page (2150673)

  • 1 Ratings


  • Unable to access vRealize Orchestrator control center page.

  • You see this error:

    HTTP Error 404

  • You see that configurator server service is running.

  • In the /var/log/vco/configuration/controlcenter.log file, you see the entries similar to:

    <YYYY-MM-DD>T<TIME> [localhost-startStop-1] ERROR [ContextLoader] Context initialization failed
    org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'securityContext' defined in ServletContext resource [/WEB-INF/security.xml]: Invocation of init method failed; nested
    exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'configurationData' defined in class path resource [META-INF/spring/cc_authentication-common-config.xml]:
    Bean instantiation via constructor failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [com.vmware.vcac.authentication.http.configuration.ConfigurationDat
    aAdapter]: Constructor threw exception; nested exception is com.vmware.o11n.cis.CisException: com.vmware.o11n.cis.CisException: com.vmware.o11n.cis.CisException:
    curity.cert.CertificateException: No subject alternative names matching IP address xx.xx.xx.xx found
            at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.


The issue occurs when the Authentication provider is configured in vRO using a Hostname or IP address which is does not match any entry in the SAN (subject alternative name) field of the SSL certificate of the authentication provider. For example, using the IP address of a Platform Service Controller with a default certificate, which contains only the FQDN.


To resolve the issue,
  1. Log in to the vRealize Orchestrator appliance using SSH or console.

  2. Reset the authentication provider by running this command:

    /var/lib/vco/tools/configuration-cli/bin/ reset-authentication

  3. Restart the orchestrator configurator service by running this command.

    service vco-configurator restart

  4. Launch the control center. Now the page should be displayed.
  5. Configure the Authentication provider using the SAN name on the certificate.

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.


  • 1 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)

Please enter the Captcha code before clicking Submit.
  • 1 Ratings