Fix – Unable to import vCAC/vRA certificates into Orchestrator

Problem:

While in the vRealize Orchestrator Client you find that the Library/Configuration/SSL Trust Manager/”Import a certificate from URL” workflow returns an error reading “InternalError: handshake alert: unrecognized_name” when provided. The URL the resolves to the Load-Balancer VIP for the vCAC/vRA appliances.

 

Background:

Signed SSL certificate installed on vCAC/vRA Appliance, SSL Passthrough on NSX/vCNX Load-Balancer, vCAC/vRA Settings/Hostname set to resolve to VIP, matching SSL cert.

 

Fix:

1. SSH into the vCAC Appliance as root
2. Backup /etc/apache2/vhosts.d/vcac.conf to vcac.conf.bak
3. Use vi to edit /etc/apache2/vhosts.d/vcac.conf
4. Scroll down to  <virtualHost _default_:443>
5. Add these lines
   

   ServerName fqdn.of.appliance.node

   ServerAlias: load.balancer.name

6. Scroll further to ensure these params aren’t listed elsewhere, remove or revise if so.
7. save the file and exit vi
8. restart the vCAC/vRA services

Advertisements