Hello all,
I am trying to download the Trusted Root Certificate from our VCenter page but when I click on "Download Trusted Root CA Certificates" it says the webpage is not found.
I am not sure how to resolve this. I'm inheriting VCenter from the last engineer and don't have tons of experience on how to fix this. Any help would be greatly appreciated.
cheers!
Hello,
I am trying to migrate our vCenter witch is on Windows 2012 R2, 6.0.0 9313458, to VCSA 6.7 U3.
I am using the migration tool, and it is aparently working fine until the the start of the new vCenter.
During the second step of the installation process for the new vCenter, when the system is trying to start vPostgres, it fails.
When consulting the logs, there is no information :
------------------------
2020-03-02T16:04:31.951Z Upgrade import step failed
2020-03-02T16:04:31.951Z vPostgres firstboot(action=firstboot) failed
------------------------
I tried to purge the DB (events, tasks, stat), I even tried to disable the statistics in vCenter setting but the migration still fails...
I tried tiny and small deploiment, still fails.
Could anyone help me ?
Sorry if my english is not perfect, not my native language.
Best regards,
Hello
I've once used cmsso-util domain-repoint to consolidate two vCenter appliances into one (then migrated stuff and eventually got rid of one instance).
But now I have a situation, where the instance to domain-repoint is on Windows (6.7 U3b), which means the command cmsso-util domain-repoint is not available.
I wanted to convert/migrate it into an appliance then, but that's also not possible, as the wizard only supports migrations that are also a version upgrade! "Horizontal" conversions from Windows to VCSA are not supported! As there's no 6.7 U4 or vSphere 7.0 yet, it seems I can't get rid of the Windows vCenter now?
Then I had the idea to repoint the Windows instance first to an external PSC (appliance), and in a second step domain-repoint it to the existing target vCenter (appliance 6.7 U3b).
But I'm not sure if this is possible - would the cmsso-util command be still issued on the Windows vCenter, or on the PSC?
Regards
Hi everyone,
I have two vSphere clusters (Foundation in my test lab and Enterprise Plus in production). I have been running daily backups on the vCenter servers since upgrading to 6.5 months ago. I use the bash script in the VMware documentation. Everything has been going great and backups have been successful. The other day I upgraded the vCSA from 6.5u1c to 6.5u1e (6.5.0.14000). The upgrade itself went OK except for the ability to run remote backups.
For my vCSA running in my test lab cluster, nothing has changed. I can still run local backups via the GUI and I can still run remote backups via the script. All is good.
For my vCSA running in my production cluster, I can run backups from the GUI. However when I try to run the bash script, the backup starts and then immediately stops. The backup log contains the start of the backup run and then errors indicating authentication errors: I'm no longer getting scheduled backups from my production cluster.
Starting backup 2018-01-29-08-50-17
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 482 0 180 100 302 958 1608 --:--:-- --:--:-- --:--:-- 1606
{"type":"com.vmware.vapi.std.errors.unauthenticated","value":{"messages":[{"args":[],"default_message":"Unable to authenticate user","id":"vapi.security.authentication.invalid"}]}}
{"type":"com.vmware.vapi.std.errors.unauthenticated","value":{"messages":[{"args":[],"default_message":"Unable to authenticate user","id":"vapi.security.authentication.invalid"}]}}
Backup job completion status:
To eliminate any potential problems with firewalls, etc, I tried running this locally on the vCSA itself. I got the exact same result. I looked at the /var/log/vmware/vapi/endpoint/endpoint.log and noticed that every time I tried to run the script I got java errors and the message "Failed to create child session with session manager com.vmware.cis.session for session Administrator@VSPHERE.LOCAL". I've attached a copy of the log messages showing the session messages and java errors that I'm getting.
Has anyone had similar problems? Does anyone have any suggestions on how to solve this?
THANKS for any help.
Pat
Hello, i installed vCSA 6.5 on ESXi 6.5 host, but when i try to login edge opens the login window and after entering credentials white screen?! Same problem with other browsers, tried all solutions i stumbled upon, so no ad blocker, flash enabled, clear cache, reset browser....but when i try to log to ESXi it works just fine, feels like im missing something stupid. Any help is appreciated
Hi All,
This is my very first post on this forum, and I hope this gets to the right people.
I upgrade our vcenter server last week from 6.5 to 6.7. Everything went ok and I was able to log back in and have worked in vcenter without any issues for the last week. However, it appears we have an issue with 80 of our backups. All have failed since the upgrade to 6.7. Basically the issue we are getting is Error /Data Plugin Servername Failed to login to servers s-vc02.domain.com.
During migration I created an appliance the IP and DNS names remained the same. I named the appliance vcsa02, but we still connect to s-vc02 (old name) of traditional windows vcenter server. The backup tool we are using is Quest.
Has anyone had any issues similar to this before. Can anyone help in troubleshooting this issue.
Regards.
I seemed to have searched the world over but cannot find an answer
I have vcsa 6.7 setup and running
I also have a separate Platform service controller also 6.7
When I log into the vCenter Server Appliance Management Interface,
it says Backup.
There is no problem with backing up I was wondering that when it
does the backup does it also backup the separate
Platform Service Controller? If not can you point me where to find
this information?!
I am trying to design an environment which ive been told that doesnt have any windows domain (LDAP), DNS, NTP pretty much all the basic infrastructre services we take for granted when building an enterprise vSphere setup.
Does anyone know if VMware will support a vCenter + 2 ESXi hosts with no DNS, NTP. Pretty much it seems i only have an IP address available. From looking on the web it is possible but people only do this in their home lab environment where support doesnt matter. This will be used in a production environment.
I have a template with server 2019.
I have created some servers from template and used my 2019 customization file.
But servers have not been customized.
In customization file I have not inserted any license key, because I still waiting to get one.
The template is also not licensed.
Could that be the reason?
My 2016 templates/customizaion is working fine.
Hi,
I am getting Internet Disabled but my vCenter Server has direct internet access which is working OK for Update Manager downloads/etc.
Does anyone know the IP address or URL this test checks to determine if the vCenter Server is online or not?
Again, my internet access is direct, so not a proxy issue.
This is NOT a vSAN environment - vSAN is disabled.
The site firewall does NOT generally allow outbound ICMP, so it the test is expecting a PING response then I need to know.
If I ssh to the vCenter Server and test outbound https, using wget https://vmware.com/index.html I get a valid response and the page is downloaded OK.
Also, if anyone knows the logfile name & location that these health check test results are save to, could they advise that too?
Many Thanks
M
Hi everyone! I open case to confirm if there is a way to export the ACTIVITY (Audit) logs of Vcenter Server Standard.
What I need is to be able to export the Activity logs from the Vsphere Client for a month of the entire VCenter infrastructure in its Standard license version.
Thanks!
Regards
LbcmV
Hi All,
I am currently facing the following issue. I have setup a vCenter applience and have managed to join it to my AD domain and have given a user (me) the administrator permissions. However when i try to login to the webui with domain\(username) and the password it fails. But if i download the "Enhanced Authentication Plugin" on a domain PC logged in as the same domain user and tick "User windows authentication" i can access the webui with that account just fine.
Am i just forgetting to do something?
Hello,
I have a VCSA 6.7 that encountered an issue this past Friday. We had an issue with our SAN server that caused our entire system to fail. After some troubleshooting, we got the SAN back up and luckily the data was ok.
But we noticed that the VCSA fails to startup. Our ESXi hosts look ok and the VM's on each host still work (can access the internet). The VCSA will boot up and I get a prompt but no services startup. If I try to start vpxd I get this error right away
root@vcsa01 [ ~ ]# service-control --start vpxdOperation not cancellable. Please wait for it to finish...
Performing start operation on service vpxd...
Error executing start on service vpxd. Details {
"resolution": null,
"detail": [
{
"translatable": "An error occurred while starting service '%(0)s'",
"localized": "An error occurred while starting service 'vpxd'",
"args": [
"vpxd"
],
"id": "install.ciscommon.service.failstart"
}
],
"problemId": null,
"componentKey": null
}
Service-control failed. Error: {
"resolution": null,
"detail": [
{
"translatable": "An error occurred while starting service '%(0)s'",
"localized": "An error occurred while starting service 'vpxd'",
"args": [
"vpxd"
],
"id": "install.ciscommon.service.failstart"
}
],
"problemId": null,
"componentKey": null
}
I can't find anything in the vpxd log. I had tail -f running when starting the service but nothing showed when it tried to startup.
I am not sure if this is related to corrupt DB or bad config, but I am not sure where to start. I have been checking other logs but again nothing is getting recorded.
I don't have any syslog installed nor do I have vRealize running to capture logs.
Is there anything I can try? Has anyone else experienced this?
Thanks in advance
I deployed vcsa 6.7 from a Linux server using the cli interface and template. Deployment was a success, but never finished confirming the API. I checked the VM and it was constantly flashing a message and then a black screen with a blinking underscore cursor at the top left. Rebooting the VM does the same thing. I see the Photon ver1 Splash screen. I can press e to get the grub command prompt, but not sure where to start.
The message was
[OK] DCUI Stopped
[OK] DCUI Started
Hello,
My vcenter over the weekend has died and I need to pull the VDS configs off of the old vcenter so I can start migrating to a new vcenter.
Is there a way to do this without using vcenter? I would have done a backup but the vpxd services keeps failing to start and i cant access vcenter without it
Hello All
I'm moving from vCenter 6.5 Update 1g with external PSC >> 6.7 Update 1 and converging the PSC into vCenter.
Steps I've followed:
1. Upgrade PSC 6.5u1g >> PSC 6.7u1 [success]
2. Upgrade vCenter (Appliance) 6.5u1g >> vCenter (Appliance) 6.7u1 [success]
3. Converge PSC to vCenter: vcsa-util.exe converge --log-dir d:\logs --verbose --no-ssl-certificate-verification --backup-taken converge.json [success]
4. Decommission External PSC: vcsa-util.exe decommission --log-dir d:\logs --verbose --no-ssl-certificate-verification decommission_psc.json [FAIL]
I've tested both converge.json and decommission_psc.json in our DEV environment and the decom went through with no errors. The pre-prod decommission got a long way through the process including shutting down the PSC. If you log into the vCenter Administration / System Configuration, you can see only the vCenter with embedded PSC.
As this is fairly new, I can't find much PSC decom failures on Google / VM community.
IS THIS ANYTHING TO WORRY ABOUT - DO I NEED TO RE-RUN THE DECOM???
This is the output from the logs showing the failure:
2019-01-10 14:14:53,021 - vCSACliConvergeLogger - DEBUG - Powering off PSC machine...
2019-01-10 14:14:55,038 - vCSACliConvergeLogger - INFO - PSC machine powered off successfully.
2019-01-10 14:14:55,039 - vCSACliConvergeLogger - DEBUG - Proceed with certificate thumbprint check...
2019-01-10 14:14:55,937 - vCSACliConvergeLogger - INFO - Decommissioning PSC node. This may take some time. Please wait..
2019-01-10 14:14:55,938 - vCSACliConvergeLogger - DEBUG - Running command on vm vcenter: /bin/bash --login -c '/usr/bin/cmsso-util unregister --node-pnid psc.domain --username administrator@vsphere.local --passwd *** --debug'
2019-01-10 14:22:47,614 - vCSACliConvergeLogger - ERROR - DecommissionTask: Caught exception Traceback (most recent call last):
File "d:\build\ob\bora-9914372\bora\install\vcsa-installer\vcsaConvergeCli\cli_tasks\decommission\decommission_task.py", line 123, in execute
File "d:\build\ob\bora-9914372\bora\install\vcsa-installer\vcsaConvergeCli\utils\esxvim.py", line 407, in run_command_wait
File "d:\build\ob\bora-9914372\bora\install\vcsa-installer\vcsaConvergeCli\utils\esxvim.py", line 432, in CheckProcesses
File "d:\build\ob\bora-9914372\bora\install\vcsa-installer\vcsaConvergeCli\deps\pyVmomi\pyVmomi\VmomiSupport.py", line 557, in <lambda>
File "d:\build\ob\bora-9914372\bora\install\vcsa-installer\vcsaConvergeCli\deps\pyVmomi\pyVmomi\VmomiSupport.py", line 363, in _InvokeMethod
File "d:\build\ob\bora-9914372\bora\install\vcsa-installer\vcsaConvergeCli\deps\pyVmomi\pyVmomi\SoapAdapter.py", line 1346, in InvokeMethod
pyVmomi.VmomiSupport.vmodl.fault.SystemError: (vmodl.fault.SystemError) {
dynamicType = <unset>,
dynamicProperty = (vmodl.DynamicProperty) [],
msg = 'A general system error occurred: vix error codes = (3016, 0).\n',
faultCause = <unset>,
faultMessage = (vmodl.LocalizableMessage) [],
reason = 'vix error codes = (3016, 0).\n'
}
2019-01-10 14:22:47,622 - vCSACliConvergeLogger - INFO - ================ [FAILED] Task: DecommissionTask: Running DecommissionTask execution failed at 14:22:47 ================
2019-01-10 14:22:47,623 - vCSACliConvergeLogger - DEBUG - Task 'DecommissionTask: Running DecommissionTask' execution failed because [(vmodl.fault.SystemError) {
dynamicType = <unset>,
dynamicProperty = (vmodl.DynamicProperty) [],
msg = 'A general system error occurred: vix error codes = (3016, 0).\n',
faultCause = <unset>,
faultMessage = (vmodl.LocalizableMessage) [],
reason = 'vix error codes = (3016, 0).\n'
}], possible resolution is []
2019-01-10 14:22:47,626 - vCSACliConvergeLogger - INFO - ================================================================================
2019-01-10 14:22:57,006 - vCSACliConvergeLogger - ERROR - Error occurred. See logs for details.
2019-01-10 14:22:57,007 - vCSACliConvergeLogger - DEBUG - Exception message: com.vmware.vcsa.installer.decommission.task: (vmodl.fault.SystemError) {
dynamicType = <unset>,
dynamicProperty = (vmodl.DynamicProperty) [],
msg = 'A general system error occurred: vix error codes = (3016, 0).\n',
faultCause = <unset>,
faultMessage = (vmodl.LocalizableMessage) [],
reason = 'vix error codes = (3016, 0).\n'
}
Trace: File "d:\build\ob\bora-9914372\bora\install\vcsa-installer\vcsaConvergeCli\cli_tasks\decommission\decommission_task.py", line 123, in execute
File "d:\build\ob\bora-9914372\bora\install\vcsa-installer\vcsaConvergeCli\utils\esxvim.py", line 407, in run_command_wait
File "d:\build\ob\bora-9914372\bora\install\vcsa-installer\vcsaConvergeCli\utils\esxvim.py", line 432, in CheckProcesses
File "d:\build\ob\bora-9914372\bora\install\vcsa-installer\vcsaConvergeCli\deps\pyVmomi\pyVmomi\VmomiSupport.py", line 557, in <lambda>
File "d:\build\ob\bora-9914372\bora\install\vcsa-installer\vcsaConvergeCli\deps\pyVmomi\pyVmomi\VmomiSupport.py", line 363, in _InvokeMethod
File "d:\build\ob\bora-9914372\bora\install\vcsa-installer\vcsaConvergeCli\deps\pyVmomi\pyVmomi\SoapAdapter.py", line 1346, in InvokeMethod
2019-01-10 14:22:57,015 - vCSACliConvergeLogger - INFO - =================================== 14:22:57 ===================================
2019-01-10 14:22:57,016 - vCSACliConvergeLogger - INFO - Result and log file information...
2019-01-10 14:22:57,017 - vCSACliConvergeLogger - INFO - WorkFlow log directory: d:\logs\workflow_1547129680951
Hi,
I have a customer wich is trying to configure into a single vcenter multiple content libraries, based on location of datacenters.
Let me explain better the environment:
- Single Vcenter (6.7U3)
- Publisher library located at HQ (datastore dedicated, some templates & iso inside)
- First subscribed library configured in branch office 1 (work like a charm)
- Second subscribed library configured in another branch office or in the HQ office (ok, it's unusefoul, but just for try). When the syncronization starts, we receive lot of errors about files unavailable.
I looked at configuration steps and seem to be they're correct. One single vcenter can have 1000 content libraries as per config maximums. Anyone have tried this?
Hello there!
I am currently rebuilding our internal horizon environment which is currently running on a vcenter server für windows.
The new vCenter Server Appliance 6.7u3 is already setup. Now I need to join the vCSA to our active directory domain. But when I try I get the following error:
user [Service Account] cannot access domain [AD Domain]
So I looked through the security logs on the domain controller. And there they only show successful logins of the service account i'm using. So I gave the service account domain admin rights to see if rights where a problem. Still the same error. Next I tried to join using the shell with the command:
/opt/likewise/bin/domainjoin-cli join [ADDomain] [Service Account] ['Password']
Now I'm getting a different message:
Error: ERROR_ACCESS_DENIED [code 0x00000005]
So I went and googled this error and found following VMware KB Article:
https://kb.vmware.com/s/article/77295
What it says is that domain controllers using SMBv3 have got a variable set which rejects unencrypted access. You can fix that with the provided powershell command. The problem is that we're stil using Windows Server 2008 R2 for two of our three domain controllers. Only the third one with windows server 2012 r2 works with this command because SMBv3 isn't natively supported on Windows Server 2008.
The vCSA and the domain controllers are in the same subnet and the windows firewall is off.
If you need any additional informations feel free to ask.
Is there anyone who can help me?
Hello folks,
I have one simple doubt, is it possible to change the password policy on vCenter after having users already configured? What about those users that are not compliant with the new password policy?
Thanks!
Hi,
I would like to know if someone have a scripts that I can get all alarms from a vCenter and export them in another? The vCenters are on differents network and they don't connect. I need everything from one system including expressions like pourcentages ect..
Thank you