Update: June 7, 2018
I’ve noticed that the following two patches also causes the issues and uninstalling them corrects the issue:
Windows Server 2012 R2: KB4103725
Windows Server 2008 R2: KB4103718
Problem
You’ve noticed that a previously error free VMware Horizon View 7 administrator console display all Connection Servers and Security Servers in an error state and clicking into the properties of the servers display the following message:
Version: 7.4.0
Status:
Server's certificate is not trusted.
Server's certificate cannot be checked.
SSL Certificate: Invalid
Using the following KB to disable Certificate Revocation List (CRL) check via the registry key corrects the issue:
Administration dashboard in VMware Horizon View reports the error: Server's certificate cannot be checked (2000063)
https://kb.vmware.com/s/article/2000063
However, this error was not present and not intentional changes have been made to the environment.
Solution
I wasn’t comfortable or satisfied with implementing the registry to disable Certificate Revocation List (CRL) check because this wasn’t required before so after reviewing what was changed on the server over the last few days, I noticed that the following patch was installed on the servers:
KB4103724 for the Windows Server 2012 R2 connection servers:
KB4103713 for the Windows Server 2008 R2 connection servers:
To correct the problem, locate the patch in the Installed Updates console and remove it:
An alternative way to remove the patch via command is as follows:
wusa.exe /uninstall /kb:4103724 < for Windows 2012 R2 servers
wusa.exe /uninstall /kb:4103713 < for Windows 2008 R2 servers
The status of all the servers should change back to green after the removal and restart of the servers:
No comments:
Post a Comment