I am unable to open the web console to a vm and getting this
HTTP Status 500 – Internal Server Error
Type Exception Report
Message An exception occurred processing JSP page [/webconsole.html] at line [9]
Description The server encountered an unexpected condition that prevented it from fulfilling the request.
Exception
any idea?
what port is needed to open the web console from the client to the VM console on vcenter? 9443?
this seems to be only happening with google chrome
HI All,
Good Evening,
Trust you all doing well.
Issue: HTTP Status 500 - internal server error
Solution :
Check the Certificate expiry date from the Vcenter Appliance and Renew the service certificates.
Steps given below.
1) Check the Validity of the Certificate by using the given below command
for store in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list | grep -v TRUSTED_ROOT_CRLS); do echo "[*] Store :" $store; /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $store --text | grep -ie "Alias" -ie "Not After";done;
2) Login to the vCenter Appliance via SSH
3) /usr/lib/vmware-vmca/bin/certificate-manager ( This will prompt you to Generate the Certificate option)
4) *** Welcome to the vSphere 6.8 Certificate Manager *** |
| -- Select Operation -- |
| 1. Replace Machine SSL certificate with Custom Certificate |
| 2. Replace VMCA Root certificate with Custom Signing |
| Certificate and replace all Certificates |
| 3. Replace Machine SSL certificate with VMCA Certificate |
| 4. Regenerate a new VMCA Root Certificate and |
| replace all certificates |
| 5. Replace Solution user certificates with |
| Custom Certificate |
| NOTE: Solution user certs will be deprecated in a future |
| release of vCenter. Refer to release notes for more details.|
| 6. Replace Solution user certificates with VMCA certificates |
| 7. Revert last performed operation by re-publishing old |
| certificates |
| 8. Reset all Certificates
Select the option 4 to regenrate the certificates.
Note: Kindly provide the SSO password to proceed further.
Enjoy Stay safe stay healthy
Rakesh Magesh
Hello Rakesh!
Well, I tried exactly as you described, but without success. After choosing option 4, I'm receiving this message:
Option[1 to 8]: 4
Do you wish to generate all certificates using configuration file : Option[Y/N] ? : y
Please provide valid SSO and VC privileged user credential to perform certificate operations.
Enter username [Administrator@vsphere.local]:administrator@vcenter.wecom
Enter password:
Please configure certool.cfg with proper values before proceeding to next step.
Certificate Manager tool do not support vCenter HA systems
But, curiously I have no HA systems.
I saw another post suggesting creating the directory /var/tmp/vmware but this path already exist and have files inside.
I saw another post suggesting try renaming the file /etc/vmware-vcha/vcha.cfg if its available, but I don't have this file with this extension .cfg, I just have /etc/vmware-vcha/vcha.cfg.tlp. I tried to rename but without success.
Have another idea?
I followed this article to resolve the issue.
https://vmkfix.blogspot.com/2023/03/http-status-500-internal-server-error.html
Yes, it worked for me here too!
Thanks!
I faced same issue, did you solve the problem?
Hi,
Yes, In my setup, I resolve the issue. I perform steps which I mentioned in my post.
Super @Chirag235
What is the vCenter version? Check the disk usage with df -h via SSH and try to start the services manually.
Start all services: service-control --start --all
You can check the logs of the services that won't start to have an indication. Location : /storage/log/VMware/"service"/"service.log"
(Ignore this if it's a new deployed vCenter) check if the certificates are still valid:
vCenter Appliance: Run the following command in a console window or SSH session to the vCenter VM:
for store in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list | grep -v TRUSTED_ROOT_CRLS); do echo "[*] Store :" $store; /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $store --text | grep -ie "Alias" -ie "Not After";done;
https://kb.vmware.com/s/article/2015600
Alsof check sts certificate with thé script in attachment:
Check VPXD logs, and if you VMCA issued certificates are expired, choose option 8 in certificate manager to reset all the certificates!
click on the lock icon and check your SSL certificate expiry details.
Example: