vSphere 5.5 w/ vCenter 5.5 permission to log in denied

Hey guys.  Just deployed a new vCenter Server 5.5 VM and it went extremely smooth.  I can log into the Web Client with the credentials configured during installation but cannot log into the vCenter Server over vSphere from any workstation or locally.  It says "The vSphere client could not connect to "x.x.x.x". You do not have permission to login to the server: x.x.x.x

I did install Single Sign-on ... basically just ran the Simple Install through to completion and it was 100% successful.  It's on a Windows Server 2008 R2 vm

One error or alert I get is related to IIS and port 80.  This was a brand new 2008 server.  No Roles configured and only Feature was .NET 3.5.
2013-09-26-08-22-08.jpg
TripapHoniCAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

coolsport00Commented:
Silly question, but are you using the credentials of the local admin group of the server vCenter is installed on. You can't use domain credentials, unless of course you configured those to be in the local admin group of the vCenter Server already.

~coolsport00
0
Haresh NikumbhSr. Tech leadCommented:
Log into the Web Client as admin@system-domain. Single sign on.

Go to Administration > Sign-On and Discovery > Configuration.
Under Identity Sources, verify that your domain is listed
0
TripapHoniCAuthor Commented:
I don't believe I've manually configured any credentials aside from the Single Sign-on addon.  I looked in Administration > Sign-On and Discovery and there was no Sign-On and Discovery listed.  Not a lot listed in fact anywhere.  I assume that's because I haven't added any hosts yet but I don't see any place to change any settings at all.
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

TripapHoniCAuthor Commented:
@takecoffe

When I try to 'Use Windows Session Authentication' in the Web Client I get this ::

The authentication server returned an unexpected error: ns0:RequestFailed: No such provider in tenant [vsphere.local] for domain [XXX.local]. The error may be caused by a malfunctioning identity source.

I can logon, however with the administrator:pass I set when I was configuring vCenter but the web console is empty other than menu content.
0
Haresh NikumbhSr. Tech leadCommented:
check it out this if helps

http://blogs.vmware.com/kb/2013/05/page/2
0
TripapHoniCAuthor Commented:
This is what I see when I log in as administrator@system.local
2013-09-26-09-59-36.jpg
0
TripapHoniCAuthor Commented:
I have nothing under Administration.  That's the problem.  Found that article and one other that kinda paralleled what my error is but mine has nothing about any SAML tokens.  

Regardless I have nothing to select under Administration.
0
Haresh NikumbhSr. Tech leadCommented:
And what about user : admin@system-domain  ( this is default admin user for SSO)
0
TripapHoniCAuthor Commented:
What would I use for credentials for admin@system-domain?  The domain is ACI.local.
0
Haresh NikumbhSr. Tech leadCommented:
The default Single Sign-On administrator is admin@System-Domain with the password you specified at installation

user name is "admin@system-domain"  

password is which you have enter while installing SSO
0
TripapHoniCAuthor Commented:
That's what I thought.  I've tried logging in with those credentials but they do not work.  The password I'm entering is definitely the right one as I used the same one for everything on this particular vm.

Should I reinstall SSO?
0
Haresh NikumbhSr. Tech leadCommented:
If you want reset then you can refer below link

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2034608

and if dont want to spend more time in troubleshooting then go ahead and reinstall.. as its fresh one

but from learning prospective i ll try all possibilities to get hands on.. thats my opinion .. rest on you
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
TripapHoniCAuthor Commented:
administrator@vsphere.local is what the credentials were set to by default.  I couldn't change administrator or vsphere.local when I ran through the setup wizard again.
0
Haresh NikumbhSr. Tech leadCommented:
0
TripapHoniCAuthor Commented:
Well I attempted to log into Web Client with administrator@vsphere.local and it tries to authenticate but gives me this ::

Based on the current configuration, the SSL certificate of the authentication server was not trusted.

I assume I need to do this http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1021514
0
Haresh NikumbhSr. Tech leadCommented:
0
TripapHoniCAuthor Commented:
I ended up spinning up a new VM with Windows 2008 R2 and logged in using administrator@vsphere.local

Could never resolve the credential issue.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VMware

From novice to tech pro — start learning today.