Hi,
We are using Public/Private key pair to authenticate from our ansible to esxi hosts per KB VMware Knowledge Base
Is it possible to use the same authentication method to connect to vcenter?
Edit:
Found authorized_keys under /root/.ssh/
Could someone confirm this? in order for the ansible to connect I think I need to switch the appliance to go to the BASH Shell instead of the Appliance shell by default
Thanks
just checked the installation guide https://docs.vmware.com/en/VMware-vSphere/7.0/vsphere-vcenter-server-70-installation-guide.pdf
https://docs.vmware.com/en/VMware-vSphere/7.0/vsphere-vcenter-server-70-installation-guide.pdf
i discovered that the tiny environment requires 415GB default storage size and my question is:
if i use a storage which size is smaller than 415GB (e.g. a 300GB HDD) to load the VCSA, will the deployment of tiny vCenter server 7.0 fail for sure?
or this deployment will be working just fine but the database cannot expand in the future?
thanks in advance~!
Rebooted VCSA because it was behaving strangely with getting hosts into maintenance mode and it came back up but can't access web interface, I get "No healthy upstream" error. So, I can SSH in and I checked the vxpd.log file and it complains about expired certificates, etc... I want to launch the certificate tool in the command line to just reset all certs and see if that fixes the vxpd service not loading at all so I use /usr/lib/vmware-vmca/bin/certificate-manager and choose option 8 to reset all certs but I get "Certificate Manager tool do not support vCenter HA systems" which makes no sense because I don't and never did have HA enabled for VCSA itself.
How can I fix this so I can reset certs and hopefully get the appliance working again. Right now my only access is via SSH or appliance management webpage. Regular vCenter UI is down I am guessing because vpxd service won't start.
I am almost sure I have the syntax wrong, but cant seem to find an example of the correct usage.
What is the correct syntax to specify the datacenter name for the vmware_guest_info module?
I also get the same error if I use datacenter: "{{ Datacenter }}" as shown in the playbook example
Thanks
Hi,
I get this message from web browser, while I try to connect to vCenter:
And I have this image from shell that shows which services have started:
There are like many solutions online, but I do not know where to start...
I appreciate your time trying to help me,
Frank
As soon as I upgraded to vCenter 7 it already started me nagging there was an update available on the first login. The button it appeared there for precheck didn't work. I ignored it and focused on the rest of the infrastructure and only when I finished I went to the management console and staged the update.
Now the button work and got a message everything was alright and took me back to Management. I ran the update and it got stuck on starting (0%) for hours. I left it alone even more hours and when I came back I got this:
Trying to nudge it out of it I opened vCSA's virtual console and restarted it with the F12 key. It was responsive and rebooted just fine. I'm still able to access vCSA but not Management. It's going on for almost 2 days now.
It seems it's just a softlock:
How can I get it out of it?
It was set to back up daily before and after upgrade, that's fine when it's stable. Even weekly backups are fine. But a lot of changes took place in a single day because I was upgrading a lot of things that go with vSphere 7 and I'm not sure how big of a damage it would do if I revert a single day.
Thanks for you help.
Hi,
I am looking for some help understanding and issue I am having trying to add my test VCA appliance to a different domain. This is a test appliance and I need to understand this as I will need to do something similar in our production environment. Here is the scenario:
Appliance name: appliance.apples.com
Successfully added via cli to the apples.com domain
I successfully removed appliance.apples.domain.com from the apples.com domain and rebooted the appliance
I created a DNS record for the appliance on the bananas.com domain
I created a computer object in AD on the bananas.com domain
Via the cli, I renamed the host to appliance.bananas.com, I rebooted the appliance
VIA the cli, I attempted to join the appliance to the bananas.com domain
When I attempt to join the domain, I get the following error:
ERROR: lw_error_ldap_constraint_violation [code 0x00009dtb]
The account I am using is a domain admin on the bananas.com domain.
Thanks!
Hi,
I am having vSphere Client version 6.7.0.42000. Now unable to replace certificate also it's not a wild certificate.
I am also not able to find certificate-manager.log file.
BR
Sachchidanand
I will have two sites both sites are identical (2 Host with a SAN), the 1st site is the production site & the 2nd site is for replicating to it (Site to Site Replication), the sites will have different IP addresses of course. What I can't seem to get is a definite answer on is if I need to have vCenter Server Std. on both sites. I have vCenter Server on the production site but not sure about the replication site any in site on this would be great.
I upgraded from vCenter Server Appliance 6.7 to 7.0 (specifically 7.0.0a build 16189094) and when I go to Administration > Certificate Management in the vSphere client, I get the following error:
Is anyone else seeing this issue? Does anyone know of a fix?
Thanks
Hello everyone,
My vCenter 6.5 Windows cannot starting and when i start all service, it shows below:
Service-control failed. Error Failed to start vmon services.vmon-cli RC=2, stderr=Failed to start cm, sca services. Error: Service crashed while starting.
Please help to solve this issue. Thanks!
Hi Team,
Is there any API or power cli command to set vCenter Single Sign-On Token Policy configuration parameters ?
Edit the vCenter Single Sign-On Token Policy
Regrads,
Deblina
Issues in upgrading the windows vCenter from 6.5u3 to 6.7 u3
Upgrade fails with the following error .
vpxd_firstboot.py_2828_stderr.log
F:\vCenter Server\python\lib\importlib\_bootstrap.py:222: RuntimeWarning: to-Python converter for struct client already registered; second conversion method ignored.
return f(*args, **kwds)
F:\vCenter Server\python\lib\importlib\_bootstrap.py:222: RuntimeWarning: to-Python converter for class vmafd_exception already registered; second conversion method ignored.
return f(*args, **kwds)
2020-06-15T16:27:33.893Z No valid files with pathname: F:\vCenterServer\vCenterServer\data\vmware-vpx\ found.
2020-06-15T16:27:52.377Z Failed running ['F:\\vCenter Server\\vpxd\\vpxd.exe', '-L'] as user administrator@XYZ. RC: 255, Stdout: , Stderr:
2020-06-15T16:27:52.378Z VirtualCenter firstboot failed
ERROR:root:Error in updating progress
Traceback (most recent call last):
File "F:\vCenter Server\python-modules\cis\progressReporter.py", line 50, in _updateProgress
self._updateFun(progress)
File "F:\vCenter Server\python-modules\cis\defaultStatusFunctor.py", line 169, in __call__
writeComponentStatus(self._statusFile, rawStatus)
File "F:\vCenter Server\python-modules\cis\defaultStatusFunctor.py", line 116, in writeComponentStatus
fileCnt = json_utils.JsonSerializer().serialize(rawStatus)
File "F:\vCenter Server\python-modules\cis\json_utils.py", line 220, in serialize
cnt = json.dumps(o, default=ObjectJsonConverter(True).encode, indent=4)
Hi everyone,
I need help to download VC-6.7.0U3h iso file. Here is my issue.
My vCenter is broken cause by storage failure, so I try to restore vCenter using recent backup configuration.
But, I can only find VMware-VCSA-all-6.7.0-16046470.iso known as VC-6.7.0U3g.
Unfortunately, I've upgraded vCenter from 6.7U3b to 6.7U3h (Version: 6.7.0.44100-Build number 16275304) using VMware-vCenter-Server-Appliance-6.7.0.44100-16275304-patch-FP.iso and all the latest backup configuration was this newest version
So, now without VC-6.7.0U3h iso file, how can I restore my vCenter to the newest state?
Everything that uses Microsoft active directory It should be connected with Ldaps and it announced that it would connect from 636 port instead of 389. and we use 6.7 u3 vCenter. Do I need to make any changes to the vcenter. We connect to vcenter with an active directory user. What did you do about this microsoft's change
Hello everyone!
We are using OKTA with logins in email format (user@site.com).
As OKTA has LDAP interface, I was able to add a new identity source under Single Sign On -> Configuration. I can see users and groups.
So now we have:
username: user@site.com
and
domain: domain.com
In order to login into vCenter I have to specify username@domain, in our case, this should be something like:
user@site.com@domain.com
which is not acceptable by vCenter.
My question is: is it possible to get it working without changing usernames on OKTA/LDAP side and how to?
PS: It's wotking fine with usernames without @.
Thanks!
Hi,
We have few doubts on Clock Tolerance in Vmware SSO as below
1.From our application we are calling SSO "Issue token" API and we are getting a bearer token; without any lifetime parameter input.
2.we try to validate the token using "validate" API in a guest vm
3.the clock tolerance of the setup is 10 minutes
Observation:
the token is valid when guest vm is faster than VCSA within 10 mins range
VCSA-3 p.m. IST and Guest Vm is 3.08 pm IST
the token is invalid when guest vm is slower than VCSA within 10 mins range
VCSA-3.08 p.m. IST and Guest Vm is 3.00 pm IST
How does clock tolerance works in this scenario?
Hey all,
I tried to install a couple of updates for JRE on a Windows vCenter server and while it stated that the update was not applicable/needed, it is crashing the vCenter GUI with a 503 error.
I reverted it back to the snapshot of the VM and while the GUI is now back, there was a warning for perflib in the Event Logs:
"The configuration information of the performance library "perf-MSSQL$VIM_SQLEXP-sqlctr11.2.5058.0.dll" for the "MSSQL$VIM_SQLEXP" service does not match the trusted performance library information stored in the registry. The functions in this library will not be treated as trusted."
Per the KB article, https://kb.vmware.com/s/article/1004149?lang=en_US&queryTerm=the+functions+in+this+library+will+not+be+treated+as+trusted. I tried to run
unlodctr "servername" - this ran fine and deleted the content and tried to run lodctr servicename.ini.
It is returning an error that the ini file does not exist. Now I am getting an error
"The Open Procedure for service "MSSQL$VIM_SQLEXP" in DLL "perf-MSSQL$VIM_SQLEXP-sqlctr11.2.5058.0.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code."
Am I missing something here as far as the ini file is concerned? I am running both the unlodctr and lodctr command under the Sytem32 directory as an admin.
Trying to ascertain if there is anything that needs manual configuration to allow use of STARTTLS when sending SMTP alerts to office365 connector?
I have used curl to test connectivity from VCSA Shell but I cannot see how I can configure STARTTLS?
On a vCenter 6.7 I want to add a 3PAR VASA Storage provider. This is working fine when both vCenter and the 3PAR Management (VASA provider) are on the same subnet.
But now I'm on 2 different subnets and the vCenter connection need to go through a Proxy server to reach the 3PAR VASA storage provider URL.
However when adding this new Storage on vCenter the request is failing
com.vmware.vim.sms.provider.ProviderFactory - Error during the validation of the provi URL java.net.SocketTimeoutException: connect timed out
My question is: how can I have the vSphere storage provider adding request going through the Proxy server to reach my VASA storage provider ? Any specific additional configuration to do?
On the VCS Appliance I do have my proxy server set at the Networking menu Level.
And by the way doing a manual wget to the VASA storage provider URL though the VCSA CLI goes as expected through the proxy (and reach the destination)
Thanks in advance, Nicolas