Monday, July 28, 2014

Enabling Citrix XenApp XenDesktop (MCS) to work with Self Signed VCenter Certificates Windows 2012

During XenApp 7.x, XenDesktop 7.x  Configuration Site Configuration wizard will throw the following error, The following configuration changes will need to be made on every delivery controller in the site



This is of course Caused by the VCenter Certificate being self signed.  
This is pretty easy to fix once you have seen it.  There a couple settings that need to be tweaked.

First lets start with editing the host file
Save yourself some pain, run notepad as administrator
In the Metro Start menu start typing Notepad, when it shows up right click it and Choose "Run as Administrator"



























The host file is located at:
%SystemRoot%/WINDOWS/system32/Drivers/etc/
So in notepad, choose file open and browse for it


 add a line similar to this one, it's critical that the FQDN Exactly Matches the name on Certificate that is causing the error (typically will be the name of the VCenter server)


Save and exit, if it gives you an error you didn't run notepad as an administrator

Next Up is Installing the Certificate. 

Internet Explorer needs to be ran from an elevated permissions level, I couldn't quickly figure out how to get it to "run as administrator" from the metro dashboard, and it was faster and easier just to open it from the command line for me.. if you have a better way, do it your way. Here is what I did. 

Run CMD.exe as admin (in metro tiles window, start typing cmd, when it shows cmd.exe right click on it and choose "run as administrator"



















Launch IE from its location which is typically: "c:\Program Files\Internet Explorer"  iexplore.exe



Once  that is open, enter the VCenter address into Internet Explorer you get a site like this: 


Accept the error, by clicking Continue to this website (Not Recommended)  
Once the page loads, Click on the Red Part of the Address bar where it says Certificate, and click in blue at the bottom View certificates




Click install Certificate



Choose Local Machine, Hit next

Choose Place all certificates in the following store, click browse


Choose Trusted People, this is where letting it automatically selecting a store based on type of certificate fails


After that when you reload the website it should look like this:


No Warnings, or errors.

Once you are back in Site Configuration, after you put in your credentials etc.. you can continue Configuring the site
  


Hope that helps!