Host-based backup of VMware vSphere VMs.
Ultramaroon
Lurker
Posts: 1
Liked: 1 time
Joined: Dec 26, 2018 7:23 pm
Full Name: Mark Powell
Contact:

Re: After vSphere 6.0 upgrade - remote certificate is invalid

Post by Ultramaroon » 1 person likes this post

Thank you for this post, Craig. I have 3 vCenter servers and a PSC, and have just created a new cert for the VMCA as an intermediate CA using the Microsoft Root CA for our Forest. Then the backups blew up. The procedure you wrote up fixed it!
snillocecurb
Lurker
Posts: 1
Liked: 1 time
Joined: Apr 30, 2018 2:53 pm
Full Name: Bruce Allen Collins
Contact:

Re: After vSphere 6.0 upgrade - remote certificate is invalid

Post by snillocecurb » 1 person likes this post

Thanks so much. This fixed my issue. :D
jmauser@fau.edu
Lurker
Posts: 1
Liked: 1 time
Joined: Jul 16, 2019 2:28 pm
Full Name: James Mauser
Contact:

Re: After vSphere 6.0 upgrade - remote certificate is invalid

Post by jmauser@fau.edu » 1 person likes this post

This worked for me as well. Very fast fix. Thanks a lot
chrometop
Lurker
Posts: 1
Liked: never
Joined: Jun 26, 2020 3:07 pm
Full Name: chrometop
Contact:

Re: After vSphere 6.0 upgrade - remote certificate is invalid

Post by chrometop »

Thank you this just saved me a ton of time on a Friday. :D
bhnelson
Enthusiast
Posts: 34
Liked: 9 times
Joined: Oct 01, 2018 5:32 pm
Full Name: Brian Nelson
Contact:

Re: After vSphere 6.0 upgrade - remote certificate is invali

Post by bhnelson »

IonutN wrote: Feb 05, 2017 12:29 pm Also I'm not sure I understand why this is happening.
we have PKI issued certificates and the windows servers where B&R runs trust the certificate issued to vcenter.
is there any to add the root CAs to Veeam certificate store or something?
Same here. I replaced my fully-trusted cert with another fully-trusted cert and Veeam choked on it. Only fixed it by inadvertently clicking through the properties dialog before I found this thread. No warnings or prompts in there related to trust or certificate. Sigh. :roll:

I suspect Veeam saves a copy of vCenter's cert any any time it even changes Veeam will throw a fit, regardless of validity. Stupid.
timothyjl
Lurker
Posts: 1
Liked: 1 time
Joined: Oct 22, 2020 6:36 pm
Full Name: Winona Foods
Contact:

Re: After vSphere 6.0 upgrade - remote certificate is invalid

Post by timothyjl » 1 person likes this post

Dec 2020 calling and thanking my Veeam ancestors for this.
exarch
Novice
Posts: 3
Liked: 1 time
Joined: Nov 02, 2021 4:15 pm
Contact:

Re: After vSphere 6.0 upgrade - remote certificate is invalid

Post by exarch » 1 person likes this post

Just posting this here for people looking for solutions to certificate issues.

I had the same error message after having changed the management network on the ESX to separate adapters, but didn't get a certificate pop-up when selecting my vSphere server in Veeam B&R and updating properties.
However, it turns out in all the backup jobs the option to make backups from storage snapshots was checked (i.e. using the Nimble storage as a backup source instead of the vSphere, if I understand correctly). This means changing the management network probably also changed something on the Nimble side which altered the certificates.
When going to the Storage Infrastructure option (not Backup Infrastructure) and editing the storage, I *DID* finally get the certificate pop-up allowing me to trust it, and after that things got moving again.
dorr
Lurker
Posts: 2
Liked: never
Joined: Aug 26, 2016 4:05 pm
Full Name: Don
Contact:

Re: After vSphere 6.0 upgrade - remote certificate is invalid

Post by dorr »

I experienced a similar problem related to certificates used for the storage backend. Logs showed exact same error message reported here, and the symptoms matched. [except on one point: When re-asserting configuration for vSphere, no alert regarding vSphere cert was given. vSphere cert was not the problem in my case.] Although storage-cert problem doesn't match the problem title here, I guess someone else may see this and land here.

Resolution is similar:

Browse to Storage Infrastructure
Right-click storage device
Select Edit Storage
Next through options
On Credentials page, View and install new certificate, then continue and finish
After finish, storage will be re-scanned [patience is required]
wizdude
Novice
Posts: 4
Liked: never
Joined: Nov 05, 2009 3:11 am
Full Name: David Moylan
Contact:

Re: After vSphere 6.0 upgrade - remote certificate is invalid

Post by wizdude »

many thanks for this. i had a client that has an external CA signed SSL certificate for their vCenter (they don't run an internal CA) and I just completed a certificate renewal which was fine on the vCenter side, but when i went to do a test with VEEAM it failed.

the root cause is that VEEAM was originally configured with the hostname of the vCenter server only and not the fully qualified name.

went through this procedure and now everything is rosy.

cheers :-)
elena.kostadinova
Lurker
Posts: 1
Liked: never
Joined: Nov 15, 2022 7:28 am
Full Name: Elena Kostadinova
Contact:

Re: After vSphere 6.0 upgrade - remote certificate is invalid

Post by elena.kostadinova »

Thank you very much.
:D
Novox
Expert
Posts: 128
Liked: 22 times
Joined: Jul 12, 2016 12:51 pm
Location: Vermont, U.S.A.
Contact:

Re: After vSphere 6.0 upgrade - remote certificate is invalid

Post by Novox »

@Craigb, thank you! Saved my bacon (I'm sure Veeam support would have advised something similar, but it was great of you to post the problem and the solution). +1 and Like from me!
Post Reply

Who is online

Users browsing this forum: No registered users and 84 guests