Which certificates should be procured to enable a secure connection between a vCenter Server and local machines in an organization that already has a CA?
VMCA as a subordinate Certificate Authority
VCSA 6.5 - Trying to use native HTTPS backup, stuck on spinning "Retrieving Size"
As the tile suggests, I'm unable to get past the "Select Parts to Backup" section of the native VCSA backup utility. It's stuck on Retrieving Size. It just spins and spins. I've tried different protocols, all with the same result. The HTTPS connection is valid and works, I just can't get it to gather the size.
Any idea how to get past this?
edit: added attachment
Change from Integrated Windows Authentication (IWA) til LDAPS
Hey guys
I'm working on changing my authentication from IWA to LDAPS, as the user/group lookup happens via LDAP when you're using IWA.
The change is pretty much straight forward as I'd have to delete the IWA identity source and recreate it as LDAPS.
But I'm unsure of what will happen to my already configured roles.
I have a ton of roles configured to use AD groups.
Would these be removed, once i delete my IWA identity source? Or would they stay and continue to work after i recreate my identity source?
Has anyone else attempted this?
vmDirSafeLDAPSBind errors in vmdird-syslog.log file
I am seeing lots of errors on one of my 6.7 external psc
2020-07-28T17:25:22.461152+00:00 err vmdird t@140390493562624: VmDirSafeLDAPBind to (ldap://xxxpsc.domain.com:389) failed. SRP(9127)
2020-07-28T17:25:22.463086+00:00 err vmdird t@140390493562624: VmDirSafeLDAPBind to (ldap://xxxpsc.domain.com:389) failed. SRP(9127)
This psc does not even exist any idea why?
upgrading linked mode vcsa 6.7u3 with external pscs to vcsa7
I am about to upgrade vcsa from 6.7 to 7.0 which I am using all external PSCs
I did the test in a lab and I did it one site at a time. (converged the PSC in one site, and ran the vcsa upgrade)
But vmware is saying I need to converge all the PSCs in all sites before upgrading to vcsa7
any idea?
vCenter unavailable after cloning
Hi,
I'm testing the upgrade of vCenter 6.5 to 6.7 in a lab. Cloned my DC's, PSC appliance and 4 vCenter Server appliances connected to the PSC. When now starting the appliances in my testlab, the vCenter 5480 interface is accessible, but all services are down.
When I run "Service control --status", only lwsmd and vmafdd are running, all other services are down. IP has remained the same, name hasn't changed. Only thing that changed is the mac-address. Could this have triggered some certificate changes or becoming invalid?
Joining VCSA to AD vs add as Identity Source
Hi,
In VCSA I can add an Active Directory Identity Source which would allow me to set permissions to specific Active Directory Users to the vSphere environment.
Therefore what are the reasons why one would join the VCSA to the Active Directory Domain? And what about the hosts managed by the VCSA?
Undoubtedly, this would bring in disadvantages...such as what happens if Active Directory is down, will everything fallback to local authentication?
Thanks
VCSA 6.7: Postgres Archiver Service stopped & PSC Health/vCenter Server "degraded"
Hi Everyone,
I'm currently setting up a new environment using ESXi 6.7 with an vCenter appliance deployed on the host. Setting up the hsot and the vCenter worked pretty well, and so far everything seems to be working alright, but I noticed some strange behaviour regarding the services of the vCenter:
VMware Postgres Archiver:
This service seems to change to status "stopped" every once in a while. I searched the KB and found a tip to change the wal_sender_timeout parameter to 600s, so the service doesn't run into any timeouts, but sadly this didn't help. I tried setting wal_sender_timeout to 0 (disabling the timeout), bu the issue still persists.
My logfiles present the same Messages as described in this KB-article:
/var/log/vmware/vpostgres/pg_archiver.log-[n].stderr:
ERROR pg_archiver could not receive data from WAL stream: server closed the connection unexpectedly
This probably means the server terminated abnormally
before or while processing the request.
/var/log/vmware/vpostgres/postgresql-[nn].log:
[unknown] archiver LOG: terminating walsender process due to replication timeout
VMware PSC Health & VMware vCenter Server:
Both of these services currently show up as "degraded":
Meanwhile the summary page reports everything as "good":
The appliance has been assigned 16GB of RAM and 2vCPUs. Current Version:
Any ideas how to fix these services, or where to check for further information about the status of the PCS Service and the vCenter Server?
With regards,
Fabian
storage requirement of vCenter 7.0
just checked the installation guide https://docs.vmware.com/en/VMware-vSphere/7.0/vsphere-vcenter-server-70-installation-guide.pdf
https://docs.vmware.com/en/VMware-vSphere/7.0/vsphere-vcenter-server-70-installation-guide.pdf
i discovered that the tiny environment requires 415GB default storage size and my question is:
if i use a storage which size is smaller than 415GB (e.g. a 300GB HDD) to load the VCSA, will the deployment of tiny vCenter server 7.0 fail for sure?
or this deployment will be working just fine but the database cannot expand in the future?
thanks in advance~!
vCenter service in the Windows server is down- vCenter version 6.7
vCenter service in the Windows server is down - in our POC environment.
our vCenter admin account "administrator@vSphere.local" got locked.
503 Service Unavailable (Failed to connect to endpoint: [class Vmacore::Http::NamedPipeServiceSpec:0x00000055c01b6c40] _serverNamespace = / action = Allow _pipeName =\\.\pipe\vmware-vpxd-webserver-pipe)
Error message while Restarting the services using command line tool:
Service-control failed. Error: Failed to start services in profile ALL. RC=1, st
derr=Failed to start vapi-endpoint, sca, vpxd-svcs services. Error: Operation ti
med out
Vcenter HA error "The object ManagedObjectReference has already been deleted or has not been completely created"
Hi to All
I want to config Vcenter HA but when click 'SETUP VCENTER HA' get this error:
"The object ManagedObjectReference has already been deleted or has not been completely created"
vcenter 6.7.0 42000
3 esxi host 6.7
can anyone one help?
thanks.
vSphere client could not connect to VC
I was trying to upgrade the vcenter version from 5.5 U3E to 6.5 U3. Upgrade process failed and we restored the changes from snapshots and SQL Server database restored from backup. Post restoration, Inventory is empty and unable to connect through domain ID. In SQL Database, found two schema using. One is dbo and other one is VMW. While trying SQL query, vCenter Data's are available in VMW Schema, but vcenter can't read the data from VMW. Can we move/alter/copy data from VMW Schema to default schema i.e. dbo? Does it will resolve the issue?
I have created a new Windows 2012 R2 server and installed fresh copy of vcenter 5.5 U3E. Also pointed to the existing external SQL database from ODBC, test connection is successful however vcenter can't read data from Database.
Configuration are as below:
- VCenter Server - VC Version 5.5 U3E, Installed on Windows 2008 R2 server
- SQL Server version is MS SQL 2008 R2 Ent Service Pack 2.
Certificate Manager generate new certs longer than 2 years?
High CPU after vCenter update 7.0b -> 7.0c
Hi,
i just noticed, that the CPU load from around 30% jumps to around 70%. And this for the complete time since i installed the update.
Even after a reboot i have the same problem.
I found two hints:
The vAPI Endpoint shows a warning:
Failed to connect to 1da6ff8a-0bfd-4605-b4cc-c18ba520e95b\com.vmware.vcenter.nsxd.vapi vAPI provider.
And when using "top" on the vCenter CLI i have one process with high CPU:
PID USER PR NI VIRT RES %CPU %MEM TIME+ S COMMAND
22892 root 20 0 753.5m 85.6m 98.7 0.5 30:11.56 S /usr/lib/vmware-wcp/wcpsvc --port 8920 --logfile /var/log/vmware/wcp/wcpsvc.log --configfile /etc/vmware/wcp/wcpsvc.yaml --audit-+
When i'm searching google for that service i found "Workload Management" this is for "Kubernetis", this i havn't licensed and i havn't NSX-D installed.
I stopped the serivce "Workload Control Plane" and the CPU load goes down.
Has somebody seen this behavior too?
Looks like a bug to me...
Kind regards
Stefan
VCenter services won't start
Good! After a sudden blackout, vCenter did not start, but best of all, I tried to start replicas of previous days and the problem was also. I enclose what I get when I force the start of the services:
Operation not cancellable. Please wait for it to finish...
Performing start operation on service lwsmd...
Successfully started service lwsmd
Performing start operation on service vmafdd...
Successfully started service vmafdd
Performing start operation on service vmdird...
Successfully started service vmdird
Performing start operation on service vmcad...
Successfully started service vmcad
Performing start operation on service vmware-sts-idmd...
Successfully started service vmware-sts-idmd
Performing start operation on service vmware-stsd...
Successfully started service vmware-stsd
Performing start operation on service vmdnsd...
Successfully started service vmdnsd
Performing start operation on profile: ALL...
Service-control failed. Error: Failed to start services in profile ALL. RC=1, stderr=Failed to start topologysvc, vpxd-svcs, vmware-postgres-archiver, vmware-vpostgres services. Error: Operation timed out
vCenter High Availability (VCHA) 7 - Snapshots Supported?
Are snapshots supported on the vCenter appliances when they are using vCenter High Availability in version 7?
ISO file does not mount, CD rom goes from connected to disconnected
I am trying to install VMWare Sever appliance I have downloaded the iso three times.
Its applied to my VM via the CDrom datastore file. It shows as connected.
When I launch the vm it just goes to lan searching for boot then gives up. I close the vm and the CDrom now shows as diconnected.
I have tried on a variety of browsers, if I use a different ISO it works, so I am guessing the ISO, but I can only download it so many times its 4 gigs.
How do I fix this please?
Installing vCenter 6.7 iso in workstation Pro - just gives Operating System Not Found
Hi Everyone
I am an IT teacher i have taught vSphere 5.5 for years doing a live install with my students.
Now we want to upgrade to 6.7
I use workstation Pro and have just update it to the latest ver with licence.
I was able to install esxi 6.7 with no problems but vCenter 6.7 just gives me Operating System Not Found.
I am using vCenter Appliance VMware-VCSA-all-6.7.0-11726888.iso
I am stalled as I know my VM settings are correct.
I am use to using an ova file my understanding is this is now inside the iso file as an OVF file.
I removed my adapter as it kept going to pxe boot .
Classes have started and I am hitting my head aganist a wall.
Help
Sheila confused IT Teacher
Moving Cluster Host from one vCenter to Another
Hello,
First of all, I would like to let you know that I am really new into VMWare and I have very little knowledge about it. I'm trying to seek for help from experts here.
Problem Description
I have two ESXi hosts which is configured as HA cluster under vCenter. Also, I have shared-storage using iSCSI between the two hosts. My problem is I unable to access to vCenter anymore, it's just suddenly showing error 503 on the web browser but I do have access via SSH. So, there are 2 solutions I could think about:
- Try to fix vCenter via shell: I spent few days research and still not able to fix. So, I decided to go for solution 2 as below.
- Install new vCenter and move cluster hosts over: This is where I need help and confirmation from this forum post.
- Will there be any service interruption of VMs inside each host when trying to add host to new vCenter cluster?
- Is there any settings I should pre-configure in advance on new vCenter? Will the setting from old vCenter come along with hosts?
- If there are settings I should do prior, what is the command line from SSH shell I should use?
- Do I have to do anything with storage or only disconnect/connect hosts?
Thanks in advance.
Seyma
ESXi Host not responding on VCenter but hosts and VMs are online
Hi,
I'm keep seeing the "not responding" message on VCenter randomly and I can't figure out what's going on. The VCenter seems to loose connection to the Hosts but they hosts are 100% healthy and works fine (VMs are also online and no issues).
It happens randomly and it get back to normal randomly as well without touching anything (sometime after 10seconds, sometime after 15 mins and sometimes after hrs).
I have searched through the logs on the host but I can't see anything related to this lost connection.
Any specific log file that I can check? I checked hostd.log, vpxa.log and syslog.log on the hosts.
I followed this KB (VMware Knowledge Base) but it's not an SSL Timeout issue.
Tried to restart the hostd and vpxa on the hosts with no luck.
In the VCenter the only error that I see is this but no much info to troubleshoot:
Any Idea on what could be or where I can start to look to get more information on this?
I have VMware ESXi, 6.7.0, 14320388 deployed on a bare metal server in a cloud hosting provider.
Any help or suggestions would be greatly appreciated!