Trying to connect via Serengeti CLI via port 8080 I found the following error message in /opt/serengeti/logs/serengeti.log
2013 Aug 06 17:18:21,545+0000 INFO main| org.springframework.web.servlet.DispatcherServlet: FrameworkServlet 'restapi': initialization completed in 346 ms
2013 Aug 06 17:18:58,083+0000 INFO http-8080-1| com.vmware.bdd.security.sso.UserAuthenticationProvider: Start to validate by sso authentication.
2013 Aug 06 17:18:59,548+0000 INFO http-8080-1| com.vmware.vim.sso.client.impl.X509TrustChainKeySelector: Failed to find trusted path to signing certificate <1.2.840.113549.1.9.2=#132a313337353133323137382c66363539396365352c35363464373736313732363532303439366536333265,CN=localhost.localdom,1.2.840.113549.1.9.1=#161b73736c2d63657274696669636174657340766d776172652e636f6d,OU=VMware Single Sign-on,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US>
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:197)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:255)
at com.vmware.vim.sso.client.impl.X509TrustChainKeySelector.verifyTrustedPathExists(X509TrustChainKeySelector.java:176)
at com.vmware.vim.sso.client.impl.X509TrustChainKeySelector.select(X509TrustChainKeySelector.java:110)
at org.jcp.xml.dsig.internal.dom.DOMXMLSignature$DOMSignatureValue.validate(DOMXMLSignature.java:522)
at org.jcp.xml.dsig.internal.dom.DOMXMLSignature.validate(DOMXMLSignature.java:254)
[...]
2013 Aug 06 17:18:59,554+0000 ERROR http-8080-1| com.vmware.vim.sso.client.impl.SamlTokenImpl: Signature validation failed
javax.xml.crypto.dsig.XMLSignatureException: the keyselector did not find a validation key
After Serengeti roll out I already executed sucessfully EnableSSOAuth at console.