Avoid extra clicks accessing vCenter!

Hello all,

I do not have custom certs in my lab, but rather am using the ones that VMware has in the vCSA.  So that means I get an opportunity to do an extra click when access the vSphere Web Client.

IssueWindows.jpg

You can easily fix this by using the info in this VMware KB article. It has the info for you to fix it right – using Active Directory, but also in a browser.  So long as it is in Windows. So good article.  However, I use a Mac.  This article will help with that.

First, you will need to access your vCenter – just with the FQDN and no extra URL stuff.

Solution.jpg

So in my case, as seen above, I access https://lefroy.thewhites.ca and note near the bottom where you can download the trusted root certs? Once that is downloaded, you need to expand it. I am using Chrome as my browser, but you may need to add .zip to the downloaded file name – it depends on your browser. Once expanded, and you change into the certs folder you will see something like below.

dl2.jpg

We only need one of these two files but it needs to be prepared first.  Use copy and paste of the one that is .0 and change the file extension to be .crt.

filechange.jpg

Now this file can be imported as necessary. We need to import it using the following steps.

You start by accessing the Chrome Settings.

Settings1.jpg

Settings2.jpg

Once in the Settings area you will need to scroll to the bottom and expand. Now you need to look for HTTP / SSL.

Settings3.jpg

Use the Manage certificates button.  This will in fact open up your Apple OS Keychain. You will need to change to Trusted Root Certification Authorities – as seen below.

Settings4.jpg

Use the Import button to browse out and select the file we renamed to *.crt.

After you do, and select Next you will be prompted about the Certificate Store.

Settings9.jpg

It should default to what we already chose, but if not, use the Browse button to fix it. Once it is imported we will notice a small issue.

Settings10.jpg

Note the red X seen above?  That is what we imported and due to the missing info in the (self signed) certificate it has been disabled.  So not good.  But, we imported it, and we got it from VMware so I think we can trust it.  So double+click on it and see an odd screen like below.

Settings11.jpg

The first drop-box will need to be changed to show Always Trust like we see above. Once that is done and we close the window our display will have changed.

Settings12.jpg

Instead of a red X we have a somewhat green + and that means when we connect to our vC we will NOT get a request for an extra click. If however you work in the vSphere HTML5 Client, which I try to do, you will still need to do the extra click.

Yes, this can be avoided by using a signed cert, and publishing that cert throughout your enterprise, but if like me, you have not done that in your lab, this article will help you with the vSphere Web Click and less clicks.

Update – William has a script to do this now – very handy – find it here.  Thanks also William for the mention!

Michael

=== END ===

Tagged with: , ,
Posted in Home Lab, How To
6 comments on “Avoid extra clicks accessing vCenter!
  1. Patrick says:

    That was definately the first thing I did after starting using the web client 🙂

  2. Is there A global CA for all VM Products. When Deploying VCAC VROPS LISM that would be Helpfull

    • I so wish that was true. I don’t think so although they are working towards that with the VCMA. I will ask around about this and see what we can find out.

      Michael

  3. […] page as shown in the screenshot below. Michael White had also recently wrote about this topic here which includes a step by step walk […]

  4. […] the use case of just wanting the extra clicks going into vCenter to be gone – check out this article which is particularly useful if you use a […]

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: