# SSL Handshake Errors with vmware\_deploy\_ovf in Ansible – Other Modules Work Fine

**URL:** <https://forum.ansible.com/t/ssl-handshake-errors-with-vmware-deploy-ovf-in-ansible-other-modules-work-fine/10114>\
**Category:** Get Help\
**Tags:** vmware, playbook, collections\
**Created:** [October 9, 2024, 2:23pm UTC](https://forum.ansible.com/t/ssl-handshake-errors-with-vmware-deploy-ovf-in-ansible-other-modules-work-fine/10114 "2024-10-09T14:23:30Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![capzulu](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/capzulu/32/5082_2.png) [@capzulu](https://forum.ansible.com/u/capzulu)\
**Post date:** [October 9, 2024, 2:23pm UTC](https://forum.ansible.com/t/ssl-handshake-errors-with-vmware-deploy-ovf-in-ansible-other-modules-work-fine/10114/1 "2024-10-09T14:23:30Z")

</div>

Hey everyone,

I’ve been facing SSL handshake errors when trying to deploy an OVA to vSphere using the `community.vmware.vmware_deploy_ovf` module in Ansible. Oddly enough, other modules like `vmware_vm_info` work just fine, and I can retrieve VM information without any issues. However, when it comes to deploying the OVA, the playbook fails every time with an SSL error.

Here’s what I’ve tried so far:

- Set `validate_certs: false`
- Added the vCenter CA to the system trust store
- Verified the SSL certificate manually using `openssl s_client -connect <vcenter>`, and it shows that the certificate is validated
- Added the vCenter to the `NO_PROXY` environment variable to bypass the proxy

Despite all of this, I still get SSL handshake errors with `vmware_deploy_ovf`, even though other tasks are working as expected.

Has anyone experienced something similar or have any suggestions on how to resolve this?

Thanks in advance!

---

<div class="post-metadata">

**Author:** ![daemenseth](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/daemenseth/32/677_2.png) [@daemenseth](https://forum.ansible.com/u/daemenseth)\
**Post date:** [October 9, 2024, 5:53pm UTC](https://forum.ansible.com/t/ssl-handshake-errors-with-vmware-deploy-ovf-in-ansible-other-modules-work-fine/10114/2 "2024-10-09T17:53:25Z")

</div>

I have the same issue.  
See: [Vmware deploy ovf Authenticity of the host's SSL certificate is not verified](http://forum.ansible.com/t/vmware-deploy-ovf-authenticity-of-the-hosts-ssl-certificate-is-not-verified/8446)

---

<div class="post-metadata">

**Author:** ![mikemorency](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/mikemorency/32/2672_2.png) [@mikemorency](https://forum.ansible.com/u/mikemorency)\
**Post date:** [October 10, 2024, 12:29pm UTC](https://forum.ansible.com/t/ssl-handshake-errors-with-vmware-deploy-ovf-in-ansible-other-modules-work-fine/10114/3 "2024-10-10T12:29:51Z")

</div>

Can you post your task here? For the other user, they were trying to deploy an OVF/OVA from a URL. In that case, the file is downloaded directly to your vCenter and there is no option to skip certificate validation.

In that case, you must either update the vCenter cert store or download the file locally first and then deploy from your filesystem

---

<div class="post-metadata">

**Author:** ![daemenseth](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/daemenseth/32/677_2.png) [@daemenseth](https://forum.ansible.com/u/daemenseth)\
**Post date:** [October 10, 2024, 6:29pm UTC](https://forum.ansible.com/t/ssl-handshake-errors-with-vmware-deploy-ovf-in-ansible-other-modules-work-fine/10114/4 "2024-10-10T18:29:14Z")

</div>

```auto
    - name: download ova, delegate to localhost (linux)
      get_url:
        url: "{{ ova_location }}"
        dest: /mnt/share/ova.ova
      delegate_to: localhost
      environment:
        ANSIBLE_LOCAL_TEMP: /mnt/share # Change this to your desired temp directory

    - name: install pyvomi
      pip:
        name: pyvmomi

    - name: deploy ova
      vmware_deploy_ovf:
        hostname: "{{ vcenter_hostname }}"
        username: "{{ vcenter_username }}"
        password: "{{ vcenter_password }}"
        datacenter: "{{ datacenter_name }}"
        datastore: "VMFS-01"
        networks: "{u'VM Network':u'{{ ProvisioningNetworkLabel }}'}"
        folder: "{{ folder }}"
        name: "{{ vm_hostname }}"
        validate_certs: false
        disk_provisioning: thin
        power_on: yes
        ovf: /mnt/share/ova.ova
        wait_for_ip_address: yes
      delegate_to: localhost
      register: deploy_ovf
      tags: vmware_ovf

```