Shulou(Shulou.com)06/03 Report--

Problem description: after the customer environment is changed from Windows VC to Linux VC, DDC prompts that the certificate is not available

Cause of the problem: after the VC replacement, the certificate fingerprint information stored in the HostingUnitServiceSchema.HypervisorConnectionSSLThumbprint table of the DDC database does not match the new VC certificate fingerprint information.

Solution: update the certificate fingerprint information in the DDC database.

There are two ways:

1. Use the Powershell command to update the certificate fingerprint information in DDC.

2. Update the certificate fingerprint information directly in the database HostingUnitServiceSchema.HypervisorConnectionSSLThumbprint table.

Method 1: use the Powershell command to update the certificate fingerprint information.

Asnp Citrix*

Cd Xdhyp:\ connections

Dir # displays existing connections and their properties. The SslThumbPrints field displays the fingerprint currently in use. The FULLPATH field displays the existing managed name.

View current VC certificate fingerprint information

Use the following command to update the fingerprint information, and the certificate fingerprint must be all uppercase.

1) $cred = Get-Credential

2) Set-Item-LiteralPath "XDHyp:\ Connections\ EsxLab"-username $cred.username-securepassword $cred.password-sslthumbprint "XXXXXXXXXXXXXXXXXXX"-hypervisorAddress https://vcenter.example.com

Method 2: edit the HostingUnitServiceSchema.HypervisorConnectionSSLThumbprint table of DDC database, and write the UID and certificate fingerprint information of managed connection according to dir command.

Citrix KB reference: https://support.citrix.com/article/CTX224551

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.