VMware Horizon View: Fix “Server’s Certificate Cannot Be Checked”

Symptoms

In VMware Horizon View 5.3, the View Administration dashboard reports Server’s certificate cannot be checked, and:

• The Connection Server shows a red status.
• The Security Server shows a red status.
• Clicking the Connection Server shows: Connection Server certificate is not trusted.
• Clicking the Security Server shows: Server’s certificate cannot be checked.
• External connections through the Security Server still work, and the certificates on the servers are valid.

Cause

The certificate’s Certificate Revocation List (CRL) includes a URL that the Connection Server paired with the Security Server can’t reach.

Resolution

Make sure the Connection Servers paired with Security Servers can reach the CRL URL. This usually means allowing it through the proxy server, if your environment uses one to control Internet access.

Workaround: CertificateRevocationCheckType

If you can’t open access to the CRL, create a CertificateRevocationCheckType registry string. Before changing the registry, make sure you have a current backup of the registry and the virtual machine (see Microsoft article 136393). If you run multiple Connection Servers, make this change on all of them.

1. On the View Connection Server, open HKEY_LOCAL_MACHINE\Software\VMware, Inc.\VMware VDM\Security. Make the change on the Connection Server, not the Security Server.
2. Create a string value (REG_SZ) named CertificateRevocationCheckType and set it to 1.