Change SSL port in ESXi and vSphere client

What's the issue?

vSphere client 连不上ESXi host或者vCenter server

通常的错误信息如下：

错误信息：在 服务器“xxx.xxx.com”上调用对象 “ServiceInstance”的“ServiceInstance.RetrieveContent” 失败。

服务器“xxx.xxx.com”无法解释客户端的请求。（尝试自动重定向的次数太多）

What's the root cause?

Sometimes in our environment, we have transparent SSL issue with the subnet of ESXi hosts.

vSphere client in ESXi host or in the same subnets could login ESXi server, but out of the subnet, we cannot login ESXi server using vSphere client.

鉴别是否有透明SSL的办法：

1.)     vSphere client在vCenter本机或者同网段机器可以正常登陆

2.)     不是同网段无法访问vCenter或者通过访问URL： http://[vCenter-IP] 无法得到正常响应

What's the solution?

解决办法有两个：

1.）网络端修改，去除透明SSL设置或者将ESXi，vCenter移至无透明SSL设置的网络段

这个方法比较有效，而且客户端无须任何修改

2.）服务器和客户端修改

这个方法的麻烦之处在于客户端需要变动，如果有多人需要连接，每个人的电脑上安装的vSphere 客户端口需要修改

修改方法：

a.) update ESXi/vCenter SSL port from 443 to xxxx

Example, update SSL port in ESXi server:

Enable Tech Support mode in ESXi (F2 configuration - Troubleshooting)

#vi /etc/vmware/hostd/proxy.xml

Add the following two lines under the tag:

http_port_number

https_port_number

Save the file and restart management agents (F2 Login ESXi direct console, and find Restart Management Agents in the troubleshooting options menu)

b.) update vSphere client SSL port from 443 to xxxx

To change the ports configured for the vSphere Client in the client configuration file:

On the system where the vSphere Client is installed, edit the VpxClient.exe.config client configuration file with a text editor. By default, this file is located at C:\Program Files\VMware\Infrastructure\Virtual Infrastructure Client\Launcher\

Edit the following line in the file to change the HTTP and HTTPS ports:

For example, to change the HTTP port to 8080 and the HTTPS port to 8081, change the line to

参考VMware KB：