RedditPP Mascot

RedditPP

r/vmware • … • u/TechGoat

Windows chromium browsers: which cert store to put self-signed vcenter web cert in, to stop "invalid cert" warnings?

My mac-using fellow admins don't have this problem; apparently whatever Keychain add/exception that made, solved this for them in Chrome and Safari. I use Chrome and MS Edge though (required by some groups; not my choice), and both of them pop up the "net::ERR_CERT_AUTHORITY_INVALID" warning every damn day, whenever I visit the web page for vcenter in them.

I can't figure out what I'm missing - I've put the self-signed cert in both my certmgr.msc Trusted Root Certification Authorities (TRCA) store, just for my local account, and also in certlm.msc's TRCA for the machine-level access. Doesn't seem to make a bit of difference; restart the browser, or just wait 2-3 hours after I click "continue to vcenter.local (unsafe)" - the warning always comes back.

Firefox, on the other hand, DOES trust it: "connection verified by a certificate issuer that is not recognized by Mozilla" - we've long ago set the about:config setting in FF for our managed workstations that tells it to look in the Windows certificate stores for TRCA and trust anything it finds in there. So that works!

It's just Chromium browsers that are ignoring the presence of the self-signed certificate in (what I believe are) the right stores.

Anyone on Windows + Chromium based browsers that have figured out how to get these damn daily warnings to go away?

— 0