The vCenter Console Access permissions on vm's works fine and the user's are able to view the Console of the vm from vCenter, but when they connect to the vCenter via VMware Workstation they are unable to view the Console of the vm's where they have the Console Access permissions. So now what kind of permissions are required to view the vm Console via VMware Workstation ?
vCenter ver 6.5
Workstation ver 15.x
So I ran into an issue where the datastore my VCSA (6.7 U2a) sat on ran out of space which caused all sorts of issues. Fortunately I was able to free up some space but since then I haven't been able to get into the VCSA UI, I can access the VAMI but that's it...
I checked the services and can see most of them haven't started
So I attempted to start VMware-vpxd but unfortunately it just fails with the error:
In the vpxd-svcs log I noticed an error stating it couldn't access the LDAP server so I checked and confirmed vmdird is currently stopped. I tried to start this but it failed im seeing these errors now:
Does anyone have any suggestions on how to fix this?
Hello all,
We have a new security policy for passwords expiration in place, this is causing all windows user passwords to expire after 90 days, we have had some problems with vcenter service users as when they expire vcenter crashes, i'm working to mark those user as service user id's to make them non-expiry but a there is a requisite to disable RDP for all of them, my doubt is, disabling RDP feature on vCenter local winows users would affect vCenter functionality in any way?
Thanks in advance for your help.
I have just installed two Vcenter 6.5 systems and they are in linked mode. When I login with the administrator@vsphere.local account and all works fine. I have setup the SSO and I can login with my user account but the linked vcenter does not appear as a linked system? I seems like when I am logged in as the administrator@vsphere.local account the SSO information is the same on both systems.
Any ideas what to check?
Hi,
I have now upgraded my older vCenter Essentials 6.7U3 to the
After the complete check I was unable go to the updates menus (baselines, HW Tools, VM Hardware). I have there still the rotating wheel.
So I cant acces the Baselines and set it to upgrade my hosts.
I have also I thing with it builded another issues or problems:
1. In LifeCycle manager I have these error: Status 404 - https://x.x.x.x/ui/vum-ui/rest/vcenters/5a8080e2-5dca-434a-87f4-303c3cb3f9b1/compliance
2. Anny update menu (submenu or settins) end with rotating wheel
3. By patch Setup menu have unexpected error
Please is possible to help me?
Thanks.
Hello,
We are currently seeing the following error when upgrading to VCSA 7.0 from 6.7, this error occurs durning step 2 of the new VCSA.
Error
Encountered an internal error. Traceback (most recent call last): File "/usr/lib/vmidentity/firstboot/vmidentity-firstboot.py", line 1752, in main vmidentityFB.boot() File "/usr/lib/vmidentity/firstboot/vmidentity-firstboot.py", line 367, in boot self.registerTokenServiceWithLookupService() File "/usr/lib/vmidentity/firstboot/vmidentity-firstboot.py", line 654, in registerTokenServiceWithLookupService raise e File "/usr/lib/vmidentity/firstboot/vmidentity-firstboot.py", line 650, in registerTokenServiceWithLookupService dynVars=dynVars) File "/usr/lib/vmware-cm/bin/cloudvmcisreg.py", line 710, in cloudvm_sso_cm_register serviceId = do_lsauthz_operation(cisreg_opts_dict) File "/usr/lib/vmware/site-packages/cis/cisreglib.py", line 1058, in do_lsauthz_operation ls_obj = LookupServiceClient(ls_url, retry_count=60) File "/usr/lib/vmware/site-packages/cis/cisreglib.py", line 314, in __init__ self._init_service_content() File "/usr/lib/vmware/site-packages/cis/cisreglib.py", line 294, in do_retry return req_method(self, *args, **kargs) File "/usr/lib/vmware/site-packages/cis/cisreglib.py", line 304, in _init_service_content self.service_content = si.RetrieveServiceContent() File "/usr/lib/vmware/site-packages/pyVmomi/VmomiSupport.py", line 556, in <lambda> self.f(*(self.args + (obj,) + args), **kwargs) File "/usr/lib/vmware/site-packages/pyVmomi/VmomiSupport.py", line 368, in _InvokeMethod return self._stub.InvokeMethod(self, info, args) File "/usr/lib/vmware/site-packages/pyVmomi/SoapAdapter.py", line 1448, in InvokeMethod conn.request('POST', self.path, req, headers) File "/usr/lib/python3.7/http/client.py", line 1252, in request self._send_request(method, url, body, headers, encode_chunked) File "/usr/lib/python3.7/http/client.py", line 1298, in _send_request self.endheaders(body, encode_chunked=encode_chunked) File "/usr/lib/python3.7/http/client.py", line 1247, in endheaders self._send_output(message_body, encode_chunked=encode_chunked) File "/usr/lib/python3.7/http/client.py", line 1026, in _send_output self.send(msg) File "/usr/lib/python3.7/http/client.py", line 966, in send self.connect() File "/usr/lib/vmware/site-packages/pyVmomi/SoapAdapter.py", line 1085, in connect six.moves.http_client.HTTPSConnection.connect(self) File "/usr/lib/python3.7/http/client.py", line 1414, in connect super().connect() File "/usr/lib/python3.7/http/client.py", line 938, in connect (self.host,self.port), self.timeout, self.source_address) File "/usr/lib/python3.7/socket.py", line 727, in create_connection raise err File "/usr/lib/python3.7/socket.py", line 716, in create_connection sock.connect(sa) ConnectionRefusedError: [Errno 111] Connection refused
Resolution
This is an unrecoverable error, please retry install. If you encounter this error again, please search for these symptoms in the VMware Knowledge Base for any known issues and possible resolutions. If none can be found, collect a support bundle and open a support request.
We are currently unsure why this error is occurring. This error appears as the Security Token Service (STS) is starting up during the install.
We recently upgraded our Windows 5.5 vSphere environment to a 6.7 appliance however our Zerto component stopped working. It kept complaining that it could not find the virtual servers, the networks, the datastores, etc.
After a lengthy analysis, Zerto support says that when we upgraded the vCenter, a new database was created on the 6.7 appliance and the inventory was added which caused the IDs of each resource to change. Now, my guy who upgraded the vCenter says there was no option to preserve the database so is this the case?
The Zerto engineer jumped on our vCenter and used the "old" IDs of one of the virtual servers and was able to bring up the server in vCenter so I'm confused now.
Appears the new vCenter 7 appliance when deployed is not able to communicate to the default update repo url https://vapp-updates.vmware.com/vai-catalog/valm/vmw/8d167796-34d5-4899-be0a-6daade4005a3/7.0.0.10100.latest/
Getting an error message - Check the URL and try again
Our vCenter 6.7 server has crashed and it wont come up
I'm planning to do a fresh installation of vCenter 6.7. I'm not well versed in vCenter so I have few queries.
1) Do I need to migrate the postgres DB ?
2) Any additional licenses required for vCenter or can we use the same license key which we use in the ESXi servers ?
vcenter 6.5 u2 is not starting . Also I restored from backup ( 15 days ago ) but I get the same error again.
Successfully started service vmware-psc-client
Service-control failed. Error Failed to start vmon services.vmon-cli RC=2, stderr=Failed to start sca, cm services. Error: Service crashed while starting
root@photon-machine [ ~ ]# service-control –status
Service-control failed. Error Exactly one operation must be specified.
root@photon-machine [ ~ ]#
503 Service Unavailable (Failed to connect to endpoint: [N7Vmacore4Http20NamedPipeServiceSpecE:0x000055dcd9b8e220] _serverNamespace = / action = Allow _pipeName =/var/run/vmware/vpxd-webserver-pipe)
vcenter does not work. I will install a new vcenter 6.5 u2 . There are distributed switch and resource pool in production. How can I restore them after installing a new vcenter. How do I restore old configurations. when i install new vcenter and add esxi hosts will everything be the same as before
Hello Guru
May you help me learn under /etc/hosts I found these entries:-
# Begin /etc/hosts (network card version)
# End /etc/hosts (network card version)
# VAMI_EDIT_BEGIN
# Generated by Studio VAMI service. Do not modify manually.
127.0.0.1 h-i-al-19-sw02.intranet.hyperic.net h-i-al-19-sw02 localhost
::1 h-i-al-19-sw02.intranet.hyperic.net h-i-al-19-sw02 localhost ipv6-localhost ipv6-loopback
# VAMI_EDIT_END
hosts (END)
What is h-i-al-19-sw02.intranet.hyperic.net ? and why not edit manually while it's supposed to be another values my vCenter FQDN
I just added another NIC to my vCenter with IP configured would it be something could be related ?
Thanks in Advance
Hello All,
Environment: Window Server 2012 R2 + vCenter Server 6.5 installed on HP DL180 Gen9.
HP server auto restarted from last Friday, it work normal several hours after restart. But the CPU will suddenly consume 100% caused by Java which used by vmon.exe; I cannot login the webclient and everything is stuck. Then server will auto restart anytime.
the related event log as below:
An unrecoverable problem has occurred, stopping the VMware VirtualCenter service. Error: Error[VdbODBCError] (-1) "ODBC error: (HY000) - internal savepoint error in libpq_bind_and_exec" is returned when executing SQL statement "UPDATE VPX_HOST SET MASTER_GEN = ? WHERE ID = ?"
Any idea fix the issue ? thank you!!
Regards,
Niki
I've looked at documentation but haven't found a clear answer. I have a primary VCSA 6.7 that I want to enable HA on to get those benefits. However, I have not found if the process causes any sort of outage for vCenter.
I'd like to do this during a time of my choosing, but that requires a confirmation to management of no outage. If I can't give that assurance, then I'll have to schedule it during a standard outage window that is inconvenient to me.
Does anyone know? Have you performed the process and can confirm one way or the other?
TIA
Hello All,
I am a Product Designer at VMware working to simplify management across multiple vCenters. Are you someone who manages multiple vCenters and find it challenging to monitor and manage license usage across vCenters? Have you ever had a painful experience while trying to ensure your licenses are compliant? We would love to hear your feedback! Help us improve your user experience! Sign up here for a 30-minute session.
To learn more about Design Studio browse our website. You can also sign up for our newsletter here! Thank you!
-Sumithra
I am New to CHEF automation integration to VMware vcenter 6.7.
Can you try to guide me some on the right path. I need to test CHEF on my On-Prime environment . Below are the my requirement's.
Installation
Integration
Test
implement on Production
Regards,
Vikram
There is an old VMware KB 1014030 - VMware Knowledge Base about changing vCenter from connecting to existing ESXi hosts by IP address to instead using their FQDN.
Is there a way to do this with vCenter 6.7 \ 7.0?
I know the vpxuser account can be removed with: esxcli system account remove --id=vpxuser
However, when you reconnect the host. The ability to change the IP address to the FQDN is greyed out\locked out in vCenter.
Otherwise, this method would have worked.
Any simple ideas, without removing hosts and making it harder than I feel it should be?
Also would this be safe to do on vSAN hosts, as well?
End goal - Communicate using DNS name instead of IP address. Would like to change IP scope once this is done.
Thanks in advance!
Hi,
Can anyone please advise how I view/manage the STS certificates in vCenter Server v7.0?
In v6.x this could be done via the Web Client (Flash Client) by following the path "Administrator > Single Sign-On > Configuration > Certificates > STS Signing"
However the Flash Client is not available in v7.0 and there is no STS Signing option in the HTML5 Client. I have found specific reference to "Note: The STS certificate cannot be viewed from the HTML5 client" in https://kb.vmware.com/s/article/79248
I have downloaded the checksts.py python script that is mentioned in KB79248 and I can see the STS certificate SHA-1 thumbprints (and only that); but that is all it does.
I generated & refreshed new STS signing certs based on my VMCA signed certificate chain, and now I need to delete the old STS leaf & root certificates (highlighted).
I know it is against VMware's recommendation to replace these internal/self-signed STS certificates, but in some environments this is not acceptable.
Is there a CLI command to manage them, as the HTML5 client is clearly not 'feature parity' with the Web Client in this respect. :-(
As always, any help or advice will be welcomed.
Thanks
M
Hi. We are getting ready to move from v6.5U2 to U3, we were stuck on U2 for awhile due to old NSX dependencies.
I remember last time I patched I got bit by that bug where disconnecting the CDROM iso hung the box. I actually have never patched through the VAMI, because up until recently our vCenters were in HA mode and we could not patch via the VAMI.
Is the VAMI patching reliable? I have seen some threads where the screen goes blank and your left wondering when to reboot. But I am fearful of that cd connect bug again.
So just looking for some comments. Thanks,,,
Can I re-use an existing cert issued by our local AD Cert authority when re-installing a new vcsa (same hostname etc) from scratch again?
I have the original .csr file, the original vmca_issued_key.key, and the cert of course, is there any way that can be re-used on the replacement vcsa install?
Thanks! Sorry for the dumb question.