VMware Horizon View 7.4.0 reports the following error for connection and security servers: “Server’s certificate is not trusted.” and “Server’s certificate cannot be checked.”

Update: June 7, 2018

I’ve noticed that the following two patches also causes the issues and uninstalling them corrects the issue:

Windows Server 2012 R2: KB4103725

Windows Server 2008 R2: KB4103718

clip_image002clip_image002[4]

Problem

You’ve noticed that a previously error free VMware Horizon View 7 administrator console display all Connection Servers and Security Servers in an error state and clicking into the properties of the servers display the following message:

Version: 7.4.0

Status:

Server’s certificate is not trusted.

Server’s certificate cannot be checked.

SSL Certificate: Invalid

image

Using the following KB to disable Certificate Revocation List (CRL) check via the registry key corrects the issue:

Administration dashboard in VMware Horizon View reports the error: Server’s certificate cannot be checked (2000063)
https://kb.vmware.com/s/article/2000063

However, this error was not present and not intentional changes have been made to the environment.

Solution

I wasn’t comfortable or satisfied with implementing the registry to disable Certificate Revocation List (CRL) check because this wasn’t required before so after reviewing what was changed on the server over the last few days, I noticed that the following patch was installed on the servers:

KB4103724 for the Windows Server 2012 R2 connection servers:

image

KB4103713 for the Windows Server 2008 R2 connection servers:

image

To correct the problem, locate the patch in the Installed Updates console and remove it:

image

An alternative way to remove the patch via command is as follows:

wusa.exe /uninstall /kb:4103724 < for Windows 2012 R2 servers

wusa.exe /uninstall /kb:4103713 < for Windows 2008 R2 servers

The status of all the servers should change back to green after the removal and restart of the servers:

image