VMWare View Tunnel error disconnected Client 4.6

Similar Questions

• VMware View 6.1 Zero-Client disconnect

  We have recently updated our platform VDI of VMWare View 6.1 using vSphere 6.0 and Nvidia vGPU (K1 grid). (HP T310 ZeroClient 4.7.1)

  Some of our users complain disconnects, some users have this error more than others.

  The mouse stops and a disconnect after 30 seconds.

  Here are a few journal entries:

  25/03/2015, 08:42:41.131 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: = > new connection request < =.

  25/03/2015, 08:42:41.131 > LVL:2 RC: AGENT 0: tera_agent_read_external_udp_address: RegQueryValueEx couldn't find the value of pcoip.external_udp_address in the Software\Policies\Teradici\PCoIP\pcoip_admin_defaults key, sending no value to the server.

  25/03/2015, 08:42:41.131 > LVL:2 RC: AGENT 0: tera_agent_read_external_udp_address: RegQueryValueEx couldn't find the value of pcoip.external_udp_port in the Software\Policies\Teradici\PCoIP\pcoip_admin_defaults key, sending no value to the server.

  25/03/2015, 08:42:41.131 > LVL:2 RC: 0 AGENT: customer address is 0.0.0.0:0 (order of the host)

  25/03/2015, 08:42:41.132 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: for gentle host: using Version 1 Tag

  25/03/2015, 08:42:41.132 > LVL:2 RC: PRI 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} for gentle host ID of Session: Tag: "W/AenY + In + UA" value: 5bf01e9d8f889fe5

  25/03/2015, 08:42:41.132 > LVL:2 RC: AGENT 0: server_listen_on_addr is 0.0.0.0:0 (order of the host)

  25/03/2015, 08:42:41.132 > LVL:1 RC: AGENT 0: pcoip_agent_connect_req: type = 2

  25/03/2015, 08:42:41.132 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} ID of Session = 4; Codec = 2.

  25/03/2015, 08:42:41.132 > LVL:1 RC: AGENT 0: pcoip_agent_connect_req: backtrace Journal 1

  25/03/2015, 08:42:41.133 > LVL:2 RC: AGENT 0: tera_agent_launch_server: {s_tag:0x5bf01e9d8f889fe5} pcoip_server_win32 launch

  25/03/2015, 08:42:41.133 > LVL:2 RC: AGENT 0: tera_agent_launch_server: path to the logfile {s_tag:0x5bf01e9d8f889fe5} optional specified as "C:\ProgramData\VMware\VDM\logs\".

  25/03/2015, 08:42:41.133 > LVL:2 RC: AGENT 0: tera_agent_launch_server: {s_tag:0x5bf01e9d8f889fe5} use_vmware_launcher = true.

  25/03/2015, 08:42:41.135 > LVL:2 RC: AGENT 0: create_session_process: open pcoip server process handle 00000000000003DC

  25/03/2015, 08:42:41.135 > LVL:2 RC: AGENT 0: tera_agent_launch_server: code {s_tag:0x5bf01e9d8f889fe5} Launcher using VMWare: worked [system is vista or newer, windows session id: 0 x 1, pid: 0x1e4, handful of proc: 0x3dc].

  25/03/2015, 08:42:41.381 > LVL:2 RC: AGENT 0: sSERVER_SESSION::agent_receiver_callback: A:srvr4 message; B:srvr0004 to A:srvr4, message = 00 00 00 00, len = 144

  25/03/2015, 08:42:42.135 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} [4] waiting for ready message.

  25/03/2015, 08:42:42.236 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} [4] Got ready message.

  25/03/2015, 08:42:42.236 > LVL:2 RC: 0 AGENT: selected server_addr is 0.0.0.0:4172 (order of the host)

  25/03/2015, 08:42:42.236 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} [4] to connect to the mailbox on the server.

  25/03/2015, 08:42:42.236 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} [4] sending the session tag.

  25/03/2015, 08:42:42.236 > LVL:2 RC: AGENT 0: sSERVER_SESSION::send_message: {s_tag:0x5bf01e9d8f889fe5} 136 bytes

  25/03/2015, 08:42:42.236 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} [4] sending session option #0 key ='pcoip.enable_tera2800 "value =" 1 ".

  25/03/2015, 08:42:42.236 > LVL:2 RC: AGENT 0: sSERVER_SESSION::send_message: {s_tag:0x5bf01e9d8f889fe5} 48 bytes

  25/03/2015, 08:42:42.236 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} [4] sending session option #1 key ='pcoip.priority_level "value =" 4 ".

  25/03/2015, 08:42:42.236 > LVL:2 RC: AGENT 0: sSERVER_SESSION::send_message: {s_tag:0x5bf01e9d8f889fe5} bytes 47

  25/03/2015, 08:42:42.236 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} [4] sending session option #2 key = 'pcoip.server_fqdn' value ='PS-VDI-01. PROJECTSERVE.local'.

  25/03/2015, 08:42:42.236 > LVL:2 RC: AGENT 0: sSERVER_SESSION::send_message: {s_tag:0x5bf01e9d8f889fe5} 71 bytes

  25/03/2015, 08:42:42.236 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} [4] end of options: sending message null-option

  25/03/2015, 08:42:42.236 > LVL:2 RC: AGENT 0: sSERVER_SESSION::send_message: {s_tag:0x5bf01e9d8f889fe5} 26 bytes

  25/03/2015, 08:42:42.362 > LVL:2 RC: AGENT 0: sSERVER_SESSION::agent_receiver_callback: A:srvr4 message; B:srvr0004 to A:srvr4, message = 05 00 00 00, len = 136

  25/03/2015, 08:42:42.388 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} [4] session to add to the list.

  25/03/2015, 08:42:42.388 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} [4] the number of active sessions = 1

  25/03/2015, 08:42:42.388 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} [4] sending ok connection response.

  25/03/2015, 08:42:42.388 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x5bf01e9d8f889fe5} [4] connection_response (end), 0

  25/03/2015, 08:42:42.580 > LVL:2 RC: AGENT 0: sSERVER_SESSION::agent_receiver_callback: A:srvr4 message; B:srvr0004 to A:srvr4, message = 0 b 00 00 00, len = 16

  25/03/2015, 08:42:42.602 > LVL:2 RC: AGENT 0: monitor_soft_hosts: {s_tag:0x5bf01e9d8f889fe5} MBX_CON_COMPLETE

  25/03/2015, 08:42:42.602 > LVL:2 RC: AGENT 0: monitor_soft_hosts: connection_complete {s_tag:0x5bf01e9d8f889fe5}: SOFT - MBX_CON_COMPLETE

  25/03/2015, 08:42:43.645 > LVL:2 RC: AGENT 0: monitor_soft_hosts: {s_tag:0x5bf01e9d8f889fe5} thread of control: connection_complete (MBX_CON_COMPLETE) callback is successful

  25/03/2015, 08:42:43.646 > LVL:2 RC: AGENT 0: mb_send_acknowledgement: {s_tag:0x5bf01e9d8f889fe5} send ACK.

  25/03/2015, 08:42:43.646 > LVL:2 RC: AGENT 0: sSERVER_SESSION::send_message: {s_tag:0x5bf01e9d8f889fe5} 8 bytes

  25/03/2015, 08:42:43.748 > LVL:2 RC: AGENT 0: mb_send_acknowledgement: {s_tag:0x5bf01e9d8f889fe5} srvr0004 Succeeded

  25/03/2015, 08:52:46.565 > LVL:2 RC: AGENT 0: monitor_soft_hosts: {s_tag:0x5bf01e9d8f889fe5} server is dead.

  25/03/2015, 08:52:46.666 > LVL:2 RC: 0 AGENT: tera_agent_disconnect [guest]: close the agent code: 6, disconnect reason: 0

  25/03/2015, 08:52:46.666 > LVL:2 RC: AGENT 0: tera_agent_disconnect: {s_tag:0x5bf01e9d8f889fe5} sign out is * NOT * pending (hndl: 4 pid: process handle 484,: 000003dc)

  25/03/2015, 08:52:46.666 > LVL:2 RC: AGENT 0: tera_agent_disconnect: {s_tag:0x5bf01e9d8f889fe5} server process already stopped (hndl: 4 pid: process handle 484,: 000003dc)

  25/03/2015, 08:52:46.666 > LVL:2 RC: AGENT 0: tera_agent_finish_disconnect_thread: connection_closed 6

  25/03/2015, 08:52:46.939 > LVL:2 RC: AGENT 0: sSERVER_SESSION: ~ sSERVER_SESSION: {s_tag:0x5bf01e9d8f889fe5} closing pcoip server process handle 00000000000003DC

  25/03/2015, 08:53:01.517 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: = > new connection request < =.

  25/03/2015, 08:53:01.518 > LVL:2 RC: AGENT 0: tera_agent_read_external_udp_address: RegQueryValueEx couldn't find the value of pcoip.external_udp_address in the Software\Policies\Teradici\PCoIP\pcoip_admin_defaults key, sending no value to the server.

  25/03/2015, 08:53:01.518 > LVL:2 RC: AGENT 0: tera_agent_read_external_udp_address: RegQueryValueEx couldn't find the value of pcoip.external_udp_port in the Software\Policies\Teradici\PCoIP\pcoip_admin_defaults key, sending no value to the server.

  25/03/2015, 08:53:01.518 > LVL:2 RC: 0 AGENT: customer address is 0.0.0.0:0 (order of the host)

  25/03/2015, 08:53:01.518 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: for gentle host: using Version 1 Tag

  25/03/2015, 08:53:01.518 > LVL:2 RC: PRI 0: pcoip_agent_connect_req: {s_tag:0x3c5d2733bc4b5aa} for gentle host ID of Session: Tag: "A8XSczvEtaoA" value: 03c5d2733bc4b5aa

  25/03/2015, 08:53:01.518 > LVL:2 RC: AGENT 0: server_listen_on_addr is 0.0.0.0:0 (order of the host)

  25/03/2015, 08:53:01.518 > LVL:1 RC: AGENT 0: pcoip_agent_connect_req: type = 2

  25/03/2015, 08:53:01.518 > LVL:2 RC: AGENT 0: pcoip_agent_connect_req: {s_tag:0x3c5d2733bc4b5aa} ID of Session = 5; Codec = 2.

  25/03/2015, 08:53:01.518 > LVL:1 RC: AGENT 0: pcoip_agent_connect_req: backtrace Journal 1

  New Windows driver is GA and the ESX pilot remained the same so, fortunately, only an update of the Windows driver.

  Link is here.

  NVIDIA DRIVERS NVIDIA GRID VGPU SOFTWARE VERSION 346.68/348.27 WHQL

• VMware VIew 6 (PCOIP): Windows Client and web browser connects, Android and Ubuntu - don't

  Hello colleagues!

  VMware Horizon Client 3.4.0 build-2769709

  VMware View 6.1.1 construction-2769403

  VMware vSphere 6.0.0 2776511

  That's what's wrong: used SecurityServer and connecting to the server. External connection - via a router. When it is connected to a vmware PCOIP Protocol (Internet) outside of the view with a Windows client and a web browser, it works fine. But when connecting from Android or Linux (Ubuntu 14) load the desktop does not occur. Android immediately displays the message 'connection to server lost', Ubuntu delivers all messages - I'll be back on the screen to select a pool table.

  Which connection via MS RDP connection protocol is correctly to all customers.

  In the settings ConnectionServer in PCOIP Security Gateway set up the external address of the router.

  Redirect them router ports:

  -TCP 80,443,8443,4172,32111

  -UDP 4172,32111

  Any ideas?

  In security settings server in 'URL of PCOIP' was FQDN, but it must be the IP address.

• VMware View 4.5 - disconnected sessions connect to black screen or simply close after 5 seconds...

  In collaboration with VMware View 4.5 using images of Windows XP Pro SP3 and connection through PCoIP, everything works perfectly on cloned VMs with the exception of reconnects.

  If I have a user disconnect from their office and then tries to reconnect to the desktop, the screen will be black, if you act quickly, you can retrieve the screen if you enter any keyboard input, but it will come back as if CTRL-ALT-DEL was pressed as I see the pop-up "Windows Security".  I checked for the screensavers screen or something like that and nothing so far.

  Do not have this problem in 4.0.1.

  Any help would be appreciated!

  Thank you

  Shane

  You have the same problem with a desktop XP vanilla without modification? Are there of the sureties or banner of the GPO applied to these desktop computers?

  May panic if there is a logon banner.

  ____________

  blog.eeg3.net | Useful links related to VMware

  If you have found this device or any other post useful, please consider the use of buttons useful/correct for award points.

• With VMware View Certificate error

  Hello

  I have a display environment and when I try to connect me to view security server I got the following error:

  View the connection to the authentication server failed. The tunnel server handed a certificate that does not correspond to the expected certificate.

  I check the View Client logs (debug.txt which I enclose you) and it seems to be a different certificate so I could not affermirai connection, anyone know how to change the certificate to display in my office?

  Thank you.

  This KB, you should get repaired once you can connect to the ADSI edit tool.

  Make sure that when you connect that you explicitly set the server that you connect to localhost. Let autodetect is connected to one of your AD controllers instead of the AD LDS to view instance.

• Connection to the Server VMware View - 404 error

  I was getting alarms in vCenter for CPU usage on my view connection server, I discovered was caused by the mysqld service 100% of the CPU usage. I restarted the server, and when she came back to the top, the https://server/admin page gave me a 404 error. After going through the papers, I found it (I think) caused by this:

  2013-08 - 06T 18: FATAL 00:08.403Z (0CF0-0DB4) < Thread-1 > [ICE] ice beginning com.vmware.vdi.ice.server.Ice.startServer(SourceFile:1167) exception java.net.BindException: address already in use: JVM_BIND to...

  and a bunch of java lines after that, but I'm sure that the relevant part is above. After some research, the only good head that I could find was to disable the IIS service, if it is installed, or configure it to use a different port. The service is not installed.

  So I did a netstat - anub | FIND/n '443'. The PID for the service that is listening on the port is 4, which corresponds to the function of the SYSTEM. I don't know how to change it. So I'm stuck.

  Ideas?

  IIS has not been installed. I did a last shot of station and just sort processes by use of memory and kill them until the 404 went. Ended up be the MS SQL Reporting Services. So I disabled the service and the view Web Admin page returned to the top after a reboot.

• Always connected view 4, after disconnected clients

  scenerio: Pool 5 persistent VM. linked clones, sign out immediately, etc., the users AD value named C1 to C8

  C1 to C5 users exhaust the pool (ok) / without problems, then C1 disconnects, so I should now have 1 VM opened for C7 (example)

  My challenge is, my user C1 disconnects the virtual computer, and a new C7 user gets error, no more available resources, because the user C1 is not released.

  in the office pool.  I see C1 always connected.

  How to kill its VM resource C1 in the pool in order to free its use for C7?

  Sorry if this isn't clear, I'm new to view products

  Thank you

  Mark

  If there is a persistent pool it shouldn't matter if they log off or not as VM is assigned to users the first time they logon.   If the pool is really persistent you will need to add VM to satisfy users or watch in create a new pool not persistent so that no one has one affected VM.

  If you have found this device or any other useful post please consider the use of buttons useful/correct to award points

• Thin client HP t5135 VDI / configuration of VMWare View

  I tried to configure my t5135 to be a thin client VDI, but in vain. I'm looking for some idea where I can configure my VDI / VMWare View in this thin client. I tried several configs, but can't seem to get that it connects to my login server, I installed the windows client and it works fine.

  Thank you

  Matt

  Had the same problem with the t5145. HP said to allow the direct connection and it should work with vmview. However he has worked with the former client of 2.0 client just couldn't do SSO on. Technology of lvl 2 HP said that he could not do the tunneling using the broker.

• SSH Tunnel on VMWare View Client

  I use the VMWare View Client on my Mac to connect to a Windows box in the behind a network business, then SSH for some internal network UNIX boxes. I really despise having to use Putty on Windows.

  Is there anyway I can use my native terminal under OSX (iTerm) to connect to the Unix boxes into the internal network? Is there a way to make the SSH tunnel runs on the client to view?

  -David

  N °

• Error with Vmware View Client conencting

  Hi guys

  Software

  See 3.1.2

  VMware View 3.1.2

  See Agent 3.1.2

  I created an individual office.

  Windows XP SP3 virtual MACHINE, I've enabled RDP (Remote Desktop) and added to the domain users group access to

  This virtual machine.

  Now I use the test account that is part of the domain users.

  I opened Vmware View Client I get the WinXP which has the right to the domain users but when I click on connect

  I get this error

  Error when using Vmware View Client 3.1.2

  ""This Office is currently not available. " "Please, try to connect to this desktop computer later, or contact your system administrator.

  This is linked with the permissions?

  check the fixing

  Thank you very much

  Make sure that the Windows Firewall is disabled really. Allowed, start, stop and then turn it off again.

  The view Agent starts the firewall service (even if it has been disabled) to add a firewall rule for RDP. The sequence above should ensure that really, he is arrested.

  Mike

• Error "Failed to connect to the remote computer" VMware View Client

  Hello everyone. I'm currently testing the package VMware view, but stuck on a problem, I can't understand.  I have already tried Googling every possible thing, but still came short on what to do.

  Currently I have:

  Server ESXi 3.5

  -vCenter Server

  -Connection to the server

  -3 swimming pools installed individual office xp host w/view agents

  At the moment, I seemed straight installation because I am able to connect using VMware client/portal with any full blown windows box anywhere in the internal network.  The problem I have is when I try to load the client software VMware view on a HP Neoware e90 box running windows xp embedded.  When I loaded the software and try to connect, I get the address connection server, authentication screen passes, but receives the error "the connection to the remote computer failed" when I try to select one of the desktop images in the list.

  I am capable of everything everywhere, ping from thin client to conn. Server, thin client desktop image and vice versa.  I am also able to RDP in the desktop images in the light client area but just can't understand why it won't pass this error above.  I tried to disable the firewall on everything, but it still doesn't seem to work.  Am I missing a simple step or has someone else has encountered this problem before? Any help would be greatly appreciated. Thank you.

  When you have disabled the firewall was that the firewall or service / network level? If it was at the level of the network, then you must disable the service and stop it. If you have the service, then can you get the logs of the client and post them. Often this info can indicate where he is faced with a problem.

  You want to make a difference in the future of VMware products? Feature to ask your ideas ( http://www.vmware.com/support/policies/feature.html )!

• VMWare View 4.6 PCoIP tunneling problem. UDP is not get tunnel

  
  Hello

  I have the black screen "classic" - question.
  So, when I try to connect to a virtual desktop, I am well auhtenticated, I can select a pool of offices, but once the bureau is launching,
  I just get a black screen and afterawhile it times out.

  I read the manuals, the document http://communities.VMware.com/docs/doc-14974 , written by Mark benson; Watched the video; Checked and re-checked the 3 magic steps;
  Blog reading Sláger, Paul http://paulslager.com/?p=1300 and still I'm stuck. I read the (some the) logs from the login view, view Security Server, View Client and Agent of the view server.
  None of the newspapers I read gave me all significant errors that would have solved this for me. Admitted, 'full' newspapers - trace State, there's a lot that wasn't exactly clear to me.

  I have simplified our mitigation debugging environment to be as follows:

  See connection to the server,
  running on Windows Server 2008 R2 (Datacenter) 64-bit VMware View Server connection 4.6.0 - 366101,.
  Checkboxes for both "Tunnel secure HTTPS: connection to Tunnel secure usage on the desktop" and "PCoIP Secure Gateway: use PCoIP PCoIP Gateway Secure connections to desktop" have been checked.

  View secure server,
  running on Windows Server 2008 R2 (Datacenter) 64-bit VMware View Server Security 4.6.0 - 366101,.
  has been paired with the login server and the two aswell "HTTPS Secure Tunnel: external URL" as "PCoIP Secure Gateway: PCoIP external URL" has been set to a virtual IP address in the firewall external dmz with a dst - nat on the real IP address of the Security Server.

  The reviews are pointing to the virtual IP address of the Server Secure View.

  Since it is not a production environment, I installed a bunch of Wireshark to see traffic;
  I ran traffic snooping on the view connection server, see Security Server, View Client and the virtual desktop connected
  at the same time and have verified that traffic TCP PCoIP on get 4172 port of talked about between my security server host <>client - and the
  securityserver <>- virtual desktop just fine. TCP traffic seems to be in the tunnel. But what bothers me is the wireshark on the virtual office reveals that the virtual office is trying
  to talk subject port 4172 - UDP back directly to my reviews host IP traffic. Because this is not allowed by the firewall, the virtual office propably does not work...

  But all scenarios describe only the Security server could handle all pcoip-traffic with the agent of the view (as shown in the documentation of the Architecture in Figure 5-6), so that no direct connection between the Client of the view and the view Agent is necessary... I can't work. But it is possible, right?

  Any ideas what I could do wrong?

  Help really appreciated.

  It works in the way that you described in your original post. There is no obligation for the virtual office send UDP responses to the client. They will be sent on the Security Server, which will forward them to turn to the customer.

  Something must be configured incorrectly.

  Check very carefully the UDP traffic in your wireshark traces. The client, you should see 4172 TCP for the VIP of your SS. You should then see 4172-UDP to the same VIP. You should see the UDP of SS response to the customer data. The destination for this data answer UDP port must be the source port used for the UDP request. The source for the response data port must be 4172.

  Then check your wireshark SS track. You should see the same customer traffic and you should see a similar PCoIP conversation between the SS and the virtual office. From the virtual desktop, the SS looks like a customer. PCoIP UDP must be sent to the SS, when it is properly configured.

  Client - TCP 4172-> SS - TCP 4172-> Virtual Office

  Customer - UDP 4172-> SS - UDP 4172-> Virtual Office

  Customer<-UDP 4172--="" ss=""><-UDP 4172--="" virtual="" desktop="" (the="" 4172="" here="" is="" src="" port,="" the="" dst="" udp="" port="" will="" be="" the="" source="" port="" of="" the="" udp="" request="" packets="" above)="" 4172--="" virtual="" desktop="" (the="" 4172="" here="" is="" src="" port,="" the="" dst="" udp="" port="" will="" be="" the="" source="" port="" of="" the="" udp="" request="" packets="">

  If you have verified that you can connect to the same virtual desktop with PCoIP then this problem will not be something to do with the virtual office or agent of view etc.

  Check your display settings, network, firewall and NAT.

  Select this option.

• Installation of VMWare view client issues with 64 bit Win8

  Hello

  I am trying to install VMware view client to access my VDI but I get the error message below... tried to install different products VMware, that nothing has worked... pls help.

  

  Its best you post your question in the following forums:

  Welcome | VMware Communities

• How to fix VMware View Server certificate revocation check connection error?

  Dear community,

  For about 2 weeks, I feel a revocation of the certificate check error in our environment Horizon see 6.2. The strange thing is that, within 12 hours about two (replication) connection servers and the vCenter Server / server of composer (on the same machine) are considered as having invalid certificates, even if, in fact, they are valid (CA certificates). We use no security servers.

  The view admin console shows the following for servers connection:

  The server certificate is not approved.

  The server certificate cannot be verified.

  For the vCenter, he said (that I have validated manually the certificate):

  No problems found.

  Certificate is not approved, but the thumbprint of the certificate is accepted.

  With the connection series on 'full', States that the login server logs for the vCenter server:

  TRACE (B 17-0 - 0E98) < VCHealthUpdate > [NativeKeyVault] validateCertificateChain response: {result = FAIL, EndEntityReasons = cantCheckRevoked, ChainReasons = invalid, SelfSigned = false, EndErrorCode = 16777280, EndInfoCode = 258, ChainErrorCode = 16777280, ChainInfoCode = 256, PolicyErrorCode =-2146885613}

  As far as I can see there no similar entries for login server certificates in the newspaper.

  At the moment I am under the environment with composer and vCenter certificates manually valid and invalid connection (red) server certificates (as view clients and browsers are not disabled).

  I already checked that I am able to do everything 'green' again via setting the registry key 'CertificateRevocationCheckType'2 (as described here Configure the server certificates certificate revocation check). This brings me to the conclusion that one of the intermediate certificates cannot be validated. So, I had the information a "version" of an intermediate (intermediate certification authority) certificate has been revoked. There seems to be no coincidence - like the time point is as well, but this particular version does not appear to be used in the servers of my connection.

  However, even with full logging enabled, I can't information which (intermediate) certificate cannot be validated and why. I expected to see something like 'OCSP verification' or 'check the CRL' but I can't find it in the newspapers. However, I noticed that one of the intermediate certificates lacked the OCSP URL (even if the field "Authority Information Access" existed). Of course I updated the certificate with a version that contains the OCSP URL, but it has not changed anything.

  In addition, I checked manually all of the certificates in the chain with openssl (for OCSP) and CRLs as well, but everything seems to be OK (all URLS are accessible and no opportunity of certificate has been revoked). Actually, I do not interpret the error as "that the connection to the server is an invalid certificate because it has been revoked", but "it cannot check if it has been revoked. The servers do not need a proxy and nothing configured, so (I checked the proxy settings system context, also).

  For now, the problem is not critical, such as 'red' status connection server has no effect on our customers and so I could turn off certificate revocation check (or switch to check that the certificate of the server (2)). But of course, I would really solve the problem.

  Is there someone who can give me a hint on what to check, for example, how do I know which certificate cannot be controlled and why? Someone had the same or a similar problem? Support VMware is working on the problem as well, but they seem don't know is not the problem, either.

  I appreciate the thoughts and responses! Thank you!

  Best regards

  Fabian

  Dear community,

  During this time, I was able to correct the error described at the beginning of this thread. Jump to the end to see what could probably help you...

  1. At first, I installed an additional standalone VMware View Server connection in order to check the following related certificates:
     1. VMware support always told me to renew my certificates because they "were not valid" etc. - even if in fact they were (like external URL calls and attested manual verification and tests).
     2. That's why I created new additional certificates for the login server and configured to include the vCenter even as my production environment - only difference was I didn't inlcude the composer who runs the server vCenter himself.
     3. The result was that the server was "green" including both the vCenter Server certificate which could be 'not reliable' by the environment of production - strange, huh?
  2. After I reset the additional server to a turned wink where connection to the server was not yet installed (before that, I uninstalled the connection to the server in case there is information in vCenter thereon) and reinstalled as a replica of the production environment server. Somehow I expected this, but still quite strange the vCenter Server (and composer) now again was considered "invalid", even if the certificate of the server connection itself considered still valid and green. For test purposes, so I put certifice revocation checking on '2' (only one server certificate check) - but only on the 'old' production servers' and 'magical' everything has been considered valid. So as I see it, there seems to be some sort of information stored on the 'old' connection servers that makes them believe that invalid certificates and that the information is replicated on the third server unless I lower the revocation of the certificate controls on these servers. Altervative explanation could be that VMware View does not accept certificates with aliases that do not include the 'real' server name - that is / was in fact certificates the old servers connection. The new server certificate connection included the real name and the alias. I understand if this is the case, but then I expect that it be documented somewhere (I have not found this information) and also wouldn't understand why it worked without problem for several years before.
  3. After finding that out, I created new certificates for the 'old' connection servers, including aliases and real names and replaced the certificate on one of the servers (and restarted the login server) - only a few successfully. Once I put the revocation checking on '4' again on this server, the login server certificate was still considered valid, but not the vCenter and certificate of composer.
  4. Now, I've uninstalled the old login server (removed from the view) and reinstalled completely (including an update of the 2008 R2 2012 R2 OS) and after I have it reintegrated into the environment, everything remained green - as long I have will activate revocation checking on the second login server "old." This is why I did the same with this (completely reinstalled and reinstated it) and now everything is green with the revocation checking enabled on all replicas of server connection.
  5. The next step I uninstall the additional replica because I created only for troubleshooting purposes.

  So what will no doubt help in similar cases:

  • Reinstall the servers of connection one by one, including:
  • Uninstalling html access (if used), uninstall the login server to view, uninstall 'VMware' AD LDS Instance.
  • Removal of the connection to the server of replication group: run "s - r s uninstalled_ vdmadmin.exeservername" on one of the servers connection remaining.
  • Reinstall/Update OS (may not be necessary, but I did not test that)
  • Reininstall, return to the login server replica. If you used the certificates which included only the alias of the server I recommend you to create new ones, including the name of the server as well, but maybe it's not necessary as well. If you want to keep the certificates which only inlcude the alias it will be necessary to install this certificate after the first replication of the servers (see below).

  My question for technicians of VMware/developers: It is supported to use certificates include only the server alias. Otherwise why it worked before and where is it documented? Where are certificate cached information so that simply replace the certificate was only some, and not a complete success (see above). FYI - when I paired initially replicas that I had to install the CA (including only the pseudonym) after the first replication - now with certificates (including the server name and the alias), I could install the certificate before you replicate (= the login server installation).

• VMWARE HORIZION VIEW 6.0: it does not serve any which RDS (using PCoIP) session to my zero Teradici Clients but it works with Horizon of VMware View client 3.0.0 from my computer

  Hi all

  I'm testing view Horizon 6.0 Service sessions (Windows 2008 R2) RDS through PCoIP. I think that my setup is just because I can connect via Horizion View Client (installed in my laptop or my Android smartphone). But when I try to connect from a Client Tera zero, 1 or 2 (with the latest firmware), at the same time I did logon, I still have this error:

  "View server connection has no return of available virtual desktops."

  Could someone tell what can be wrong?

  Concerning

  As a result of this discussion "Re: RDS support is included in Vmware View (broker)?" I saw that I must spend my customers zero to 4.5.1 firmware. Once I did, Tera 2 Zero Clients work very well but do not have customers zero 1 Tera.

  I expect response from Teradici.

  Concerning