WilliamLam.com

  • About
    • About
    • Privacy
  • VMware Cloud Foundation
  • VKS
  • Homelab
    • Resources
    • Nested Virtualization
  • VMware Nostalgia
  • Apple
You are here: Home / VMware Tanzu / Quick Tip - Workaround for x509: certificate signed by unknown authority when using Tanzu Community Edition (TCE) on Windows

Quick Tip - Workaround for x509: certificate signed by unknown authority when using Tanzu Community Edition (TCE) on Windows

10.06.2021 by William Lam // 4 Comments

Tanzu Community Edition (TCE) was just launched a few days ago and a lot of folks are kicking the tires. Just yesterday, I saw that we had already surpassed over 2K+ downloads, a huge achievement for the TCE team and lots of positive feedback like this and this.

I had a comment today from a reader who ran into the following error when using TCE for Windows:

Downloading TKG compatibility file from 'projects.registry.vmware.com/tkg/framework-zshippable/tkg-compatibility'
Error: unable to create Tanzu Standalone Cluster client
Cause: unable to ensure prerequisites: unable to ensure tkg BOM file: failed to download TKG compatibility file from the registry: failed to list TKG compatibility image tags: Get "https://projects.registry.vmware.com/v2/": x509: certificate signed by unknown authority

I immediately knew the issue as I ran into this myself a couple of days ago and started to look in TCE Github Issues.

This is currently a known issue for Windows that was reported awhile back and luckily, there is a quick workaround thanks to Steve Wong. Simply edit %USERPROFILE%\.config\tanzu\tkg\config.yaml configuration file and replace it with the following snippet:

release:
    version: ""
TKG_CUSTOM_IMAGE_REPOSITORY_SKIP_TLS_VERIFY: true

I have asked if the TCE folks can update the documentation to at least reference this workaround until this issue is resolved. I have noticed a few folks in TCE Slack channel also reporting this same issue and figure it was worth sharing in case others come across it.

More from my site

  • vSphere Event-Driven Automation using Tanzu Application Platform (TAP) on Tanzu Community Edition
  • Cluster API BYOH Provider on Photon OS (Arm) with Tanzu Community Edition (TCE) and ESXi-Arm
  • Hybrid (x86 and Arm) Kubernetes clusters using Tanzu Community Edition (TCE) and ESXi-Arm
  • Quick Tip - Install kube-vip as service load balancer with Tanzu Community Edition (TCE)
  • Quick Tip - Install Metallb as service load balancer with Tanzu Community Edition (TCE)

Categories // VMware Tanzu Tags // Tanzu Community Edition

Comments

  1. *protectedM. Buijs - Be-Virtual.net says

    10/07/2021 at 2:46 am

    Thanks William & Steve! First hit on Google and directly the issue is resolved!

    Reply
  2. *protectedLynn says

    10/19/2021 at 4:03 am

    Thank you!

    Reply
  3. *protectedDevesh Shukla says

    10/05/2022 at 3:56 am

    Thank you so much !! This still an issue till version 0.12.1 of Tanzu Com Edition. However your workaround still working with its all versions !!

    Reply
  4. *protectedTom says

    09/16/2023 at 5:46 am

    September 2023, workaround still works! Thank you. And yes, I know Tanzu CE is deprecated but I still want to check it out before I move to Tanzu K8s Grid

    Reply

Leave a Reply to LynnCancel reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Search

Thank Author

Author

William is Distinguished Platform Engineering Architect in the VMware Cloud Foundation (VCF) Division at Broadcom. His primary focus is helping customers and partners build, run and operate a modern Private Cloud using the VMware Cloud Foundation (VCF) platform.

Connect

  • Bluesky
  • Email
  • GitHub
  • LinkedIn
  • Mastodon
  • Reddit
  • RSS
  • Twitter
  • Vimeo

Recent

  • Programmatically accessing the Broadcom Compatibility Guide (BCG) 05/06/2025
  • Quick Tip - Validating Broadcom Download Token  05/01/2025
  • Supported chipsets for the USB Network Native Driver for ESXi Fling 04/23/2025
  • vCenter Identity Federation with Authelia 04/16/2025
  • vCenter Server Identity Federation with Kanidm 04/10/2025

Advertisment

Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy

Copyright WilliamLam.com © 2025