VMWare knowledge base article 2049143

vSphere Client and vSphere PowerCLI may fail to connect to vCenter Server 5.5 due to a Handshake failure (2049143) 

轉載至 http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=2049143&sliceId=1&docTypeID=DT_KB_1_1&dialogID=62002067&stateId=1%200%2062000688

Details

When installed on a Windows XP or Windows Server 2003 host machine, the vSphere Client and vSphere PowerCLI may fail to connect to vCenter Server 5.5 due to a Handshake failure. vSphere 5.5 uses the Open SSL library, which, for security, is configured by default to accept only connections that use strong cipher suites. On Windows XP or Windows Server 2003, the vSphere Client and vSphere PowerCLI do not use strong cipher suites to connect with vCenter Server. This results in the error No matching cipher suite on the server side, and a Handshake failure on the vSphere Client or vSphere PowerCLI side.

Solution

To work around this issue, take one of these actions:

• For Windows Server 2003 or 64-bit Windows XP, apply the appropriate Microsoft hotfix:
  
  
  • Platform: x64, http://hotfixv4.microsoft.com/Windows%20Server%202003/sp3/Fix192447/3790/free/351403_ENU_x64_zip.exe
  • Platform: ia64, http://hotfixv4.microsoft.com/Windows%20Server%202003/sp3/Fix192447/3790/free/351397_ENU_ia64_zip.exe
  • Platform: i386, http://hotfixv4.microsoft.com/Windows%20Server%202003/sp3/Fix192447/3790/free/351385_ENU_i386_zip.exe
    
    Note: The preceding links were correct as of October 7, 2013. If you find a link is broken, provide feedback and a VMware employee will update the link. 
• For Windows Server 2003, 64-bit Windows XP, or 32-bit Windows XP, take either of these actions:
  
  
  • Before installing the vSphere Client or vSphere PowerCLI, upgrade the Windows operating system on the host machine to Windows Vista or later.
  • On the vCenter Server host machine, reduce the implied security by allowing the server to communicate using weak cipher suites. To do this, include this section in the vCenter Server vpxd.cfg file (located at: C:\ProgramData\VMware\VMware VirtualCenter\) :
    
    <config>
        ...
        <vmacore>
            ...
            <ssl>
                ...
                <cipherList>ALL</cipherList>
            ...
            </ssl>
        ...
        </vmacore>
    ...
    </config>

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.