web console to VM - HTTP Status 500 - internal server error

[tdubb123]

I am unable to open the web console to a vm and getting this

HTTP Status 500 – Internal Server Error

Type Exception Report

Message An exception occurred processing JSP page [/webconsole.html] at line [9]

Description The server encountered an unexpected condition that prevented it from fulfilling the request.

Exception

• org.apache.jasper.JasperException: An exception occurred processing JSP page [/webconsole.html] at line [9]

any idea?

[tdubb123]

what port is needed to open the web console from the client to the VM console on vcenter? 9443?

[daphnissov]

Connecting to the Virtual Machine Console Through a Firewall

[tdubb123]

this seems to be only happening with google chrome

[rakeshpattu]

HI All, 

Good Evening, 

Trust you all doing well. 

Issue: HTTP Status 500 - internal server error

Solution : 
Check the Certificate expiry date from the Vcenter Appliance and Renew the service certificates. 

Steps given below. 

1) Check the Validity of the Certificate by using the given below command 

for store in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list | grep -v TRUSTED_ROOT_CRLS); do echo "[*] Store :" $store; /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $store --text | grep -ie "Alias" -ie "Not After";done;

2) Login to the vCenter Appliance via SSH 
3) /usr/lib/vmware-vmca/bin/certificate-manager ( This will prompt you to Generate the Certificate option) 

4)  *** Welcome to the vSphere 6.8 Certificate Manager *** |
| -- Select Operation -- |
| 1. Replace Machine SSL certificate with Custom Certificate |
| 2. Replace VMCA Root certificate with Custom Signing |
| Certificate and replace all Certificates |
| 3. Replace Machine SSL certificate with VMCA Certificate |
| 4. Regenerate a new VMCA Root Certificate and |
| replace all certificates |
| 5. Replace Solution user certificates with |
| Custom Certificate |
| NOTE: Solution user certs will be deprecated in a future |
| release of vCenter. Refer to release notes for more details.|
| 6. Replace Solution user certificates with VMCA certificates |
| 7. Revert last performed operation by re-publishing old |
| certificates |
| 8. Reset all Certificates 
Select the option 4 to regenrate the certificates. 

 

Note: Kindly provide the SSO password to proceed further. 

 

Enjoy Stay safe stay healthy 
Rakesh Magesh 

[edgarquadros]

Hello Rakesh!

Well, I tried exactly as you described, but without success. After choosing option 4, I'm receiving this message:

Option[1 to 8]: 4
Do you wish to generate all certificates using configuration file : Option[Y/N] ? : y

Please provide valid SSO and VC privileged user credential to perform certificate operations.
Enter username [[e-mail]]:[e-mail]
Enter password:

Please configure certool.cfg with proper values before proceeding to next step.

Certificate Manager tool do not support vCenter HA systems

But, curiously I have no HA systems.

I saw another post suggesting creating the directory /var/tmp/vmware but this path already exist and have files inside.

I saw another post suggesting try renaming the file /etc/vmware-vcha/vcha.cfg if its available, but I don't have this file with this extension .cfg, I just have /etc/vmware-vcha/vcha.cfg.tlp. I tried to rename but without success.

 

Have another idea?

 

 

 

 

[vmkfix-SSA]

I followed this article to resolve the issue. 

https://vmkfix.blogspot.com/2023/03/http-status-500-internal-server-error.html

 

[edgarquadros]

Yes, it worked for me here too!

Thanks!

[Chirag235]

1. Hi, If your certificate is not expire, then you can try to check start the vAPI Endpoint service.
2. Open VAMI console and start it this service. I fixed same issue on my vCenter Server

 

 

[Milad Mehrabi]

I faced same issue, did you solve the problem?

[Chirag235]

Hi,

Yes, In my setup, I resolve the issue. I perform steps which I mentioned in my post.

[Milad Mehrabi]

Super  

[Jai Prakash Kumar]

What is the vCenter version? Check the disk usage with df -h via SSH and try to start the services manually.

Start all services: service-control --start --all

 You can check the logs of the services that won't start to have an indication. Location : /storage/log/VMware/"service"/"service.log"

(Ignore this if it's a new deployed vCenter) check if the certificates are still valid:

vCenter Appliance: Run the following command in a console window or SSH session to the vCenter VM:

for store in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list | grep -v TRUSTED_ROOT_CRLS); do echo "[*] Store :" $store; /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $store --text | grep -ie "Alias" -ie "Not After";done;

https://kb.vmware.com/s/article/2015600

Alsof check sts certificate with thé script in attachment:

https://kb.vmware.com/s/article/79248

[VRO123]

Check VPXD logs, and if you VMCA issued certificates are expired, choose option 8 in certificate manager to reset all the certificates!

click on the lock icon and check your SSL certificate expiry details.
Example: