Looking to replace the self signed certificates in my VCSA 6.7 appliance. My security team provided me with a .pfx file which I copied over to a temp directory on my VCSA appliance. I am now not 100% sure what openssl commands to run to extract the appropriate files needed to replace the self signed certificates.
Any smart openssl people out there that can lend some guidance.
We are doing some work on our vCenter to clear out the vpx_text_array of orphan entries. Our vpx_text_array is about 8GB. We are in linked mode with other vCenters and External PSCs.
Do we need to snapshot all the appliances? Or just the one we will work on? We plan on doing the poweredON method outlined here.
Additionally if we have to restore the snapshot on the vCenter, do we need to restore the PSC as well or any other vCenter since in linked mode?
Dear All,
I can't update my vCenter 7.0.0.00000
Hi All,
We are looking at developing a new vCenter plugin. I would like to know - between the local plugin vs remote plugin - what should be our preference. The documentation says the remote plugin is supported only from 6.7 U1. But our product has to support all versions of vCenters in the field. So does that mean we should go ahead with developing the local plugin? Are there any guidelines from vmware that we should look at apart from the "Developer Guide". Is it safer to take 6.5 U2 SDK version and develop a local plugin so our plugin is available for all vCenter versions? Can someone from VMware chime in and advise?
Thanks,
Sankar
When patching vCenter are the patches cumulative or do I need to install every patch after build#9451876 ?
Hi
I order to monitor VCSA, we would like to check the services via SNMP. As we cannot check the services directly, we would like to monitor, whether or not specific processes are running under LINUX, which we can do.
The challenge I have now is, that in the VCSA Web UI under "VM Appliance Management" - "Services" a bunch of services are listed, which i would like to check for but unfortunately I am not able to find a way to match the service names to the corresponding processes actually running under LINUX.
There is a post, which shows, what I mean, but unfortunately it does not match to VCSA 6.7:
Detailed Description of VCSA Services
-> Services are named differently, some cannot be found, ... Therefore i only can guess, what could be what, which is not really satisfying, if you want to build a monitoring, which you depend on...
Is there something available like this for the version of VCSA I need?
Thank you for any help and kind regards
David
Hi Gurus,
First of all, thank you so much for providing with wonderful and precise solutions to almost any individual problems that one can come across. With that being said, I am having a small hiccup when ot comes to patching vCenter 7.0. My current version of vCenter is as follows
Version - 7.0.0.10100
Build - 15952498
I am planning to patch it to the following -
Version - 7.0.0.10300
Build -16189094
I have vCenter setup in HA mode. The procedure that I am following is as per the Vmware Documentation over Here
I have downloaded the correct .iso for the same. But as soon as I try to stage the iso, I encounter an error. Just to be sure, I have now downloaded the iso twice to eliminate the doubt of a corrupt download. The error that I get is as follows:
Command> software-packages stage --iso
[2020-05-27T19:21:43.148] : ISO mounted successfully
[2020-05-27T19:21:44.148] : Not running on a VMC Gateway appliance.
[2020-05-27T19:21:44.148] : Not running on a VMC Gateway appliance.
[2020-05-27T19:21:44.148] : Target VCSA version = 7.0.0.10300
[2020-05-27T19:21:44.148] : Not running on a VMC Gateway appliance.
[2020-05-27T19:21:44.148] : No manifest whitelist present, it is not leaf service upgrade.
[2020-05-27T19:21:44.148] : Not running on a VMC Gateway appliance.
[2020-05-27T19:21:44.148] : Not running on a VMC Gateway appliance.
[2020-05-27T19:21:44.148] : Not running on a VMC Gateway appliance.
[2020-05-27T19:21:44.148] : Not running on a VMC Gateway appliance.
[2020-05-27T19:21:44.148] : Checking if HLM is enabled
[2020-05-27T19:21:44.148] : Product configuration file does not exists.
[2020-05-27T19:21:44.148] : Filtering components as not all are allowed to run. Whitelist []
Blacklist []
[2020-05-27T19:21:45.148] : Not running on a VMC Gateway appliance.
[2020-05-27T19:21:45.148] : Not running on a VMC Gateway appliance.
[2020-05-27T19:21:45.148] : About to perform WCP checks
[2020-05-27T19:21:45.148] : Performing WCP checks
[2020-05-27T19:21:45.148] : Adding WCP path to Python path
[2020-05-27T19:21:45.148] : Found Kubernetes versions {'1.17', '1.16', '1.15'} in /storage/core/software-packages/scripts/patches/payload/components-script/wcp/wcp_versions.yaml
[2020-05-27T19:21:45.148] : Found Kubernetes versions {'1.16', '1.15'} in /etc/vmware/wcp/wcp_versions.yaml
Error Code : 1021
[2020-05-27T19:21:45.148] : Exception raised while running wcp prechecks.
Traceback (most recent call last):
File "/storage/core/software-packages/scripts/update_wcp_utils.py", line 51, in doWcpPrechecks
result = precheck.doPrecheck(skipPrechecksIds)
File "/storage/core/software-packages/scripts/patches/payload/components-script/wcp/precheck.py", line 113, in doPrecheck
stub_cfg = utils.create_vapi_stub_config()
File "/storage/core/software-packages/scripts/patches/payload/components-script/wcp/utils.py", line 214, in create_vapi_stub_config
token_data = token_handler[0]()
File "/storage/core/software-packages/scripts/patches/payload/components-script/wcp/utils.py", line 171, in get_hok_token
sts_auth = get_sts_authenticator()
File "/storage/core/software-packages/scripts/patches/payload/components-script/wcp/utils.py", line 158, in get_sts_authenticator
ls_url = VmafdClient().get_ls_location()
File "/usr/lib/vmware/site-packages/cis/cisreglib.py", line 83, in get_ls_location
return self.client.GetLSLocation()
RuntimeError: unidentifiable C++ exception
Process Process-1:1:
Traceback (most recent call last):
File "/usr/lib/python3.7/multiprocessing/process.py", line 297, in _bootstrap
self.run()
File "/usr/lib/python3.7/multiprocessing/process.py", line 99, in run
self._target(*self._args, **self._kwargs)
File "/storage/core/software-packages/scripts/update_wcp_utils.py", line 56, in doWcpPrechecks
json_result = JsonSerializer().serialize([result, ex])
File "/usr/lib/applmgmt/base/py/vmware/update/json_utils.py", line 222, in serialize
cnt = json.dumps(o, default=ObjectJsonConverter(True).encode, indent=4)
File "/usr/lib/python3.7/json/__init__.py", line 238, in dumps
**kw).encode(obj)
File "/usr/lib/python3.7/json/encoder.py", line 201, in encode
chunks = list(chunks)
File "/usr/lib/python3.7/json/encoder.py", line 429, in _iterencode
yield from _iterencode_list(o, _current_indent_level)
File "/usr/lib/python3.7/json/encoder.py", line 325, in _iterencode_list
yield from chunks
File "/usr/lib/python3.7/json/encoder.py", line 438, in _iterencode
o = _default(o)
File "/usr/lib/applmgmt/base/py/vmware/update/json_utils.py", line 176, in encode
result = json.JSONEncoder().default(o)
File "/usr/lib/python3.7/json/encoder.py", line 179, in default
raise TypeError(f'Object of type {o.__class__.__name__} '
TypeError: Object of type RuntimeError is not JSON serializable
[2020-05-27T19:21:45.148] : ISO unmounted successfully
[2020-05-27T19:21:45.148] : Staging process failed.
Do you folks have any idea regarding the same? Could it be that the source iso was released with a problem?
Appreciate any inputs.
Thanks & Regards,
Siddhesh
vCenter 6.7 fresh vCenter Server Appliance install with an embedded Platform Services Controller on a 6.5 ESXi host.
Stage 1: Deploy appliance - Completed successfully
Stage 2: Configure appliance - Completed sucessfully
When I try to log in as root on the VMware Appliance Management web:5480 page using the IP address of the server, I receive the error. Unable to login, NOT the error Unable to authenticate user. I can successfully log in using the console with root credentials. Used a variety of browsers and validated security settings. Any ideas?
I have a fresh installed ESXi 6.7U3 on a host with 256GB RAM and 2TB SSD. I tried to install VCSA 7.0 with UI installer. It failed with a very vague "error" message (log attached). Then I tried the VCSA 6.7. Failed with a "file is too large" error. What did I do wrong? Thanks!
vmware vCenter Server Appliance vmware-mbcs Start failed
Hi All,
Can we migrate windows vCenter 6.7U3g to VCSA 6.7U3g?
Can any one share official document link?
anyone see this error on login after upgraing to vcsa 7?
[
400] An error occurred while sending an authentication request to the vCenter Single Sign-On server - An error occurred when processing metadata during vCenter Single Sign-On setup: the service provider validation failed. Verify that the server URL is correct and is in FQDN format, or that the hostname is a trusted service provider alias.
Back to login screen
"vCenter server service" crashed in few seconds after attempted to start in VAMI client. below is the error message when tried to open vcsa url. Tried restarting via command line it says succefully restarted but status is stopped in VAMI client..... Any suggestions?
Hello community,
here there is a newbie, so be patient
I'm trying to enable vSAN on vCenter 7 but I'm failing even reading tutorial or user manual, simply because I can't find any vSAN menu in configuration:
I used the OVA VM image, to install a clean vCenter.
Now, if I deploy vCenter from VCSA to ESXi node, I can install/configure vSAN and after that I have the related menu. I got QuickStart and vSAN menu and submenu.
My question is, what I miss when I use ova image? Why I can't see the vSAN menu? I compared the configuration between them, and I can't find any differences. Is there any guide I can follow?
Thank you
Lucas
I am observing that in our monitoring tool , while getting the datastore status through api call , we get connection time out error.
Operation timed out after 30000 milliseconds with 0 out of -1 bytes received (28)
This error is active for 5-7 minutes daily at a fixed time and then disappears. Thereafter vcenter functions normal.
During the error vcenter remains inactive and does not accept new session authentication.
Hi Guys
We've been Experiencing this error / bug / problem in vCenter 7 whenever we do the ff:
- Test High Availability (VMs restarts on the other server except for the vCenter Server)
After powering on the esxi host where the vCenter is residing and the vCenter Server the error occurs
Tried the ff: re-installing, checking VM Hardware Version, checking the OS: no Photon OS in the list. restarting services but nothing works
in the end we need to restore our back-up.
Screen shot below
Thanks!
Hi guys,
I am trying to replace ssl certificate for vcenter 6.7. In which I am having client certificate and client key. But I dont have any idea about Signing certificate. I am having commercial pfx certificate for my domain. Can I create Signing certificate from this using openssl? If so, how?
Any help?
I'm looking for the best strategy for moving our vCenter Appliance to a new management subnet (subnet B), and that VCSA is currently on the same subnet as the hosts in the cluster (subnet A). Our setup is below.
Environment (1 cluster):
3 ESXi 6.5 hosts on subnet A
1 VCSA 6.5 on subnet A
Management (subnet B) is firewalled/routed from subnet A
Questions:
How do I change the IP/Hostname of the VCSA to one in subnet B, and still manage the hosts in subnet A? What ports are required for a firewall for the VCSA to manage them, and if I want to change the hosts to subnet B, will I need to remove them from the cluster, change their IPs/hostnames and then add them back?
Hello,
We have couple "DataCenters" in the VCenter.
I hold full administrative rights on my.
All work fine except of i can't add users and create alarms
following error occur
you do not hold privilege "system > read" on folder "data centers"
Any directions when to start investigate?
Hi,
I'm setting up the CL in our environment and only got an issue in 1 vCenter.
The team who will be using the CL are having the error below for CHVPK (HOU150-MASTER)
but don't have any issues on the other two. As already mentioned on the title. These 3 sites are on linked mode and only one having permission issues.
Any idea what's the problem?
Thanks