I got some problem to use VCSA platform services controller.
After some misconfiguration that VCSA platform services controller currently using ip address to provide SSO services .
it quite confused and i wanna to change this ip to FQDN.
Already googled , but there are nothing found out from VMware KB.
Demonstrated video attached below, any suggestions are grateful.
Hello,
I have a single VCSA 6.7 appliance managing hosts in two small data centers. Each data center has two small clusters in it, with workloads split between the two clusters. Cluster A in data center 1 has similar workloads to cluster A in data center 2, and cluster B in data center 1 has similar workloads to cluster B in data center 2.
I'd like to add a "child" vCenter appliance to this configuration, so that the child vCenter server will only have visibility of the hosts in cluster B of the two data centers. Ideally, the existing vCenter server would retain its visibility of all the hosts, but it that isn't directly possible, it could do so via it's "parent" relationship of the new "child" vCenter server. Another option would be for the new vCenter server to become a parent of the existing server. Either direction is acceptable to me.
I'm a little hazy on how to go about this process, specifically with regards to the PSC. I'm not clear on how to add a new vCenter to the configuration, either as a parent or a child, and how to integrate the two without having to rebuild the existing distributed switches and other settings currently in place.
If there are any resources available that describe how to deploy a configuration like this, I'd be grateful for any pointers to them. Thanks in advance!
HI,
We have just migrated from a Windows VCenter to a VCSA 6.7 (update 2), OLD VCenter was integrated with the ADirectory and We were able to join without troubles. Migration ended succesfully.
Our question is for the new configuration, new VCSA keeps old network settings, including DNS client settings, but old Windows VCenter record were dynamically registred on the AD DNS servers.
The new VCSA will continue be registered dynamically on the DNS record ? or should we create static entries for it in DNS ?
Best Regards
Hello everyone,
since a week we recognize that the Skyline Health in our VCSA 6.7U3 seems to have some issues.
We see only three tests under Skyline Health and "Under Online Health Availability" "Online health checks execution" has a yellow mark. The "Online health connectivity" and "Customer experience improvement program (CEIP)" are green.
When we click "Retest" it will work für some time and shows us the tests but then it goes back in the faulty state. A restart of the Appliance changed nothing.
The Ask VMware link is useless. It leeds only to this page VMware Support Offerings & Services.
So where can i look what the problem is or have anyone a suggestion what to do ?
Best regards Sven
Hi, I tried to add my vSphere Host to vCenter, but This error occurred. vSphere says "Failed - Cannot change the host configuration." How to fix this?
I have created a SMB and NFS share to contain the Vcenter Management server backup and i cannot connect to the share via the Management interface. The interface give the error "Access to the backup server is denied - Check your credentials" .
Both shares have been tested, as i can connected to each of them via NFS and SMB by mouting them on a linux machine with the following commands
#SMB Share
//IP Address/backup /mnt/backup cifs vers=2.0,username=admin,password=adminpaassword,uid=1024,gid=100,iocharset=utf8,rw
OR
#NFS Shares
IP address:/volume1/backup /mnt/backup nfs rsize=8192,wsize=8192,timeo=14,intr
I am also able to connect to these shares via Windows.
Can someone let me know of how i can fix this? ans also the filename and location of the log that records theses attempts. maybe there is more info there.
Thank you in advance.
hi - wondering if a guru can help a home labber?!
My VCSA update on 7.0 is spinning at 0%
if I click cancel i get this error:
with this in the applmgmt.log:
2020-07-15T05:35:14.678 [21601]ERROR:vmware.vapi.provider.local:Error in invoking com.vmware.appliance.update in cancel - [Errno 2] No such file or directory
Traceback (most recent call last):
File "/usr/lib/applmgmt/vapi/lib/vapi_runtime-2.100.0-py2.py3-none-any.whl/vmware/vapi/provider/local.py", line 277, in invoke
service_id, operation_id, input_value, ctx)
File "/usr/lib/applmgmt/vapi/lib/vapi_runtime-2.100.0-py2.py3-none-any.whl/vmware/vapi/provider/local.py", line 248, in _invoke_int
method_result = iface.invoke(ctx, method_id, input_value)
File "/usr/lib/applmgmt/vapi/lib/vapi_runtime-2.100.0-py2.py3-none-any.whl/vmware/vapi/bindings/skeleton.py", line 371, in invoke
meth_output = method(**meth_args)
File "/usr/lib/applmgmt/vapi/py/vmware/appliance/vapi/appliance_impl.py", line 78, in cancel
s.sendto(b'{"rpc": "cancel"}', MICROSERVICE_SOCKFILE)
FileNotFoundError: [Errno 2] No such file or directory
My update files staged successfully into /storage/updatemgr/software-update6yt9kjw9/
however in update_microservice.log i see:
]# tail update_microservice.log
2020-07-15 05:23:31,104 - 29269 - update_b2b:: _is_staged:2439 - DEBUG - Checking if version 7.0.0.10400 is already staged
2020-07-15 05:23:31,104 - 29269 - dbfunctions:: executeDML: 54 - DEBUG - Executing Query {SELECT _value from config where _config = ?} with parameters ('stageDir',)
2020-07-15 05:23:31,105 - 29269 - update_b2b:: install:2061 - DEBUG - Scanning stage directory /storage/updatemgr/software-update6yt9kjw9/stage
2020-07-15 05:23:31,105 - 29269 - update_functions:: readJsonFile: 224 - ERROR - Can't read JSON file /storage/updatemgr/software-update6yt9kjw9/stage/pkg_list [Errno 2] No such file or directory: '/storage/updatemgr/software-update6yt9kjw9/stage/pkg_list'
2020-07-15 05:23:31,105 - 29269 - update_b2b:: install:2065 - DEBUG - Exception occurred while checking for discrepancies [Errno 2] No such file or directory: '/storage/updatemgr/software-update6yt9kjw9/stage/pkg_list'
2020-07-15 05:23:31,105 - 29269 - update_microservice:: _runEvent: 409 - DEBUG - Event callback succeeded
2020-07-15 05:24:01,155 - 29269 - update_microservice:: waitForEvents: 473 - INFO - Exiting by timeout
2020-07-15 05:24:01,156 - 29269 - update_microservice:: __del__: 359 - DEBUG - Closing socket...
2020-07-15 05:24:01,156 - 29269 - update_microservice:: __del__: 361 - DEBUG - Removing sockfile
2020-07-15 05:24:01,156 - 29269 - update_microservice:: _deletePidFile: 297 - DEBUG - Removing pid file: /var/run/vmware/applmgmt/update_microservice.pid
Does anyone have any thoughts why this error occurs?
Can't read JSON file /storage/updatemgr/software-update6yt9kjw9/stage/pkg_list
thanks!
ps: I can successfully cancel the update using VMware Knowledge Base but wondering why it isnt working.
Message was edited by: mgillard
We have to decomission a vcenter with embedded PSC from an ELM configuration
The main Vcenter with its embedded PSC will remain in HQ site .
Following the kb VMware Knowledge Base we performed the below steps
On the vcenter/PSC to be decomissioned we first run the command to unregister the vcenter
cmsso-util unregister --node-pnid prdvcsadr.xxx.com --username administrator@vsphere.local --passwd xxxx
the command reported
020-07-15T12:58:55.651Z Running command: ['/usr/lib/vmware-vmafd/bin/dir-cli', 'service', 'list', '--login', 'administrator@vsphere.local']
2020-07-15T12:58:55.754Z Done running command
2020-07-15T12:58:56.124Z RC = 1
Stdout = vdcleavefd offline for server prdvcsadr.xxx.com
Leave federation cleanup failed. Error[1] - Operations error
Stderr = password:
ERROR unregistering computer account.
Success
2020-07-15T12:58:56.125Z Running command: ['/usr/bin/sed', '-i', '-e', 's/cmsso-util.*/cmsso-util/g', '/var/log/vmware/procstate']
2020-07-15T12:58:59.972Z Done running command
After that we checked the main Vcenter and we found that the remote vcenter was correctly removed
So we went through the step to unregister the remote's PSC from the main site
We shut down the DR appliance ( PSC) and performed the following command on the main site's appliance
root@prdvcsa [ ~ ]# cmsso-util unregister --node-pnid prdvcsadr.xxxx.com - -username administrator@vsphere.local--passwd xxxx
and got the following error
Could not find a host id which maps to prdvcsadr.xxxx.com in Component Manage r
Failed!!!
2020-07-15T13:22:17.609Z Running command: ['/usr/bin/sed', '-i', '-e', 's/cmss o-util.*/cmsso-util/g', '/var/log/vmware/procstate']
2020-07-15T13:22:17.709Z Done running command
Can anyone explain if this expected since we already unregister the DR's vcenter or if there's something wrong in the procedure ?
thanks
I have installed vCenter6.7 on ESXi 6.7 host. In the vCenter appliance I'm seeing the below log message continuously in /var/log/vmware/messages log file.
2020-07-15T08:20:01.112590-07:00 glhc-vcsa sshd 39441 - - pam_mgmt_cli(sshd:auth): authentication successful, but failed to connect to applmgmt service (254):
2020-07-15T08:20:01.029120-07:00 glhc-vcsa cli - - - vmware.vherd.linux_cli.cli Error getting authentication cookie from applmgmt service. Verify that the applmgmt service is running and that the method requested to obtain the cookie requires authentication.
However when I login into the vCenter appliance and check the status of applmgmt service it is showing as running. However I have started restarting the service and still the issue is not solved.
How to resolve this issue?
I can log in with putty as root user into vcenter server and execute DCLI commands. If I log in with other user that is in group (SystemConfiguration.BashShellAdministrators) I am unable to run DCLI commands.
I get the below message:
/usr/bin/python: Error while finding module specification for 'vmware.vapi.client.dcli.cli' (ImportError: No module named 'vmware')
Is it possible for another user besides root user to access and use DCLI from SSH connection?
Has anyone successfully configured vcenter 6.7 appliance (I have update 3g) to send email to office 365? I've changed the relay server to smtp.office365.com, the mail sender to the from email address i'm using. Then under advanced settings i'm changing mail.smtp.port to 587, mail.smtp.username to the same account I used for mail sender, and mail.smtp.password to that account password.
Considerations:
anonymous relay to internal smtp server works fine. Trying to get away from it.
This username/password works. I'm using it successfully for other mail relays.
vcenter can ping smtp.office365.com and telnet to 587.
I know for this type of relay the from address has to match the authenticating user. Which is why I assumed they have the mail sender box
I've seen a lot of articles about hows its not supported on earlier versions but accounding to this it is supported after vCenter 6.7 U1 and 6.5 U2d.
Appliance TLS output
==================== Scanning vCenter Server TLS endpoints =====================
+---------------------+-------------------+----------------+
| Service Name | TLS Endpoint Port | TLS Version(s) |
+---------------------+-------------------+----------------+
| vmcam | | NOT RUNNING |
| vmware-rhttpproxy | 443 | TLSv1.2 |
| vmware-stsd | 7444 | TLSv1.2 |
| vami-lighttp | 5480 | TLSv1.2 |
| vmware-updatemgr | 8084 | TLSv1.2 |
| vmware-updatemgr | 9087 | TLSv1.2 |
| vmware-rbd-watchdog | | NOT RUNNING |
| vmdird | 636 | TLSv1.2 |
| rsyslog | 1514 | TLSv1.2 |
| VC Storage Clients | NOT APPLICABLE | TLSv1.2 |
| vmware-vpxd | 8089 | TLSv1.2 |
| vsphere-client | 9443 | TLSv1.2 |
+---------------------+-------------------+----------------+
Hello,
i tried to upgrade my vcenter 6.5 to last release available for my installation : VMware vCenter Server v6.5.0.6430.
The installation start but after few minutes stuck on this problem : "Installation of component VCSServiceManager failed with error code '1603'
Now the old installation does not start with this problem related on vmon.log
Service cm api-health command's stderr: ERROR:root:CM search failed. ProductId=com.vmware.cis, TypeId=cs.identity
2020-07-16T00:46:44.116+02:00| vthread-5| W115:
2020-07-16T00:46:44.116+02:00| vthread-5| W115: Service cm api-health command's stderr: ERROR:root:Error connecting to CM: {
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ "resolution": {
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ "id": "install.default.failure.resolution",
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ "localized": "This is an unrecoverable error, please retry install. If you encounter this error again, please search for these symptoms in the VMware Knowledge Base for any known issues and possible resolutions. If none can be found, collect a support bundle and open a support request.",
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ "translatable": "This is an unrecoverable error, please retry install. If you encounter this error again, please search for these symptoms in the VMware Knowledge Base for any known issues and possible resolutions. If none can be found, collect a support bundle and open a support request."
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ },
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ "detail": [
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ {
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ "args": [
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ "CM search failed. ProductId=com.vmware.cis, TypeId=cs.identity:[Errno 10061] No connection could be made because the target machine actively refused it"
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ ],
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ "id": "install.ciscommon.internal.error",
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ "localized": "Encountered an internal error.\n\nCM search failed. ProductId=com.vmware.cis, TypeId=cs.identity:[Errno 10061] No connection could be made because the target machine actively refused it",
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ "translatable": "Encountered an internal error.\n\n%(0)s"
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ }
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ ],
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ "componentKey": null,
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ "problemId": null
2020-07-16T00:46:44.116+02:00| vthread-5| W115+ }
2020-07-16T00:46:44.116+02:00| vthread-5| W115:
Some ideas for fix this problem ?
Thank you so much
Alessandro.
Hi there,
I am seeking some help from the community for a specific case I am experiencing now.
My Current vCenter is a 6.7 appliance last version but historically it has been deployed with the SSO domain same as hostname fqdn.
It works pretty well so far but I know this is not supported by VMware and documentation warns about this case. Unfortunately I am not the one who deployed this vCenter....
Now I need to change the SSO domain to vsphere.local and link a remote vcenter to this one. Indeed there is no way I keep the current SSO domain as the configuration is not following the best practices.
So I used the command to repoint vcenter to a new sso domain and the repointing fails, after some troubleshoot, it appears that the URLs in the SSO configuration uses the new SSO domain as endpoint..... and not the hostname of the vcenter.
Doing the same thing with a vcenter that have a SSO domain different from hostname from the begining works perfectly.
Any one when through this specific case ?
Thank you !!!!!
Hi everyone,
i'am looking to get an Monitoring up for VCSA and nagios.
REST API Reference Documentation
interesting is. the only Call which works for me is
https://ip/rest/appliance/health/applmgmt
Response = 200 OK
for all the others i'am getting Response = Unauthorized (like database-storage)
But i'am authorized,..... so sounds like an Bug or something
thx
Max
Hello, i need to repair component of the Vcenter 6.5 on Windows Server 2012 R2.
Can i reinstall all the components with an existing installation ?
The DB is UP but some components are with problems ?
D:\Program Files\VMware\vCenter Server\bin>service-control --status
Running:
VMWareAfdService VMWareCAMService VMWareCertificateService VMWareDirectoryService VMwareDNSService VMwareIdentityMgmtService VMwareSTS content-library rhttpproxy vPostgres vmon vmonapi vmsyslogcolle
tor vmware-autodeploy-waiter vmware-cis-config vmware-psc-client
Stopped:
EsxAgentManager VMwareComponentManager VServiceManager mbcs vapiEndpoint vimPBSM vmware-imagebuilder vmware-license vmware-network-coredump vmware-perfcharts vmwareServiceControlAgent vpxd vpxd-svcs
vsan-health vsphere-ui vspherewebclientsvc
D:\Program Files\VMware\vCenter Server\bin>service-control --start vmware-license
Perform start operation. vmon_profile=None, svc_names=['vmware-license'], include_coreossvcs=False, include_leafossvcs=False
2020-07-17T09:36:47.850Z Service cis-license state STOPPED
Error executing start on service cis-license. Details {
"resolution": null,
"detail": [
{
"args": [
"cis-license"
],
"id": "install.ciscommon.service.failstart",
"localized": "An error occurred while starting service 'cis-license'",
"translatable": "An error occurred while starting service '%(0)s'"
}
],
"componentKey": null,
"problemId": null
}
Service-control failed. Error {
"resolution": null,
"detail": [
{
"args": [
"cis-license"
],
"id": "install.ciscommon.service.failstart",
"localized": "An error occurred while starting service 'cis-license'",
"translatable": "An error occurred while starting service '%(0)s'"
}
],
"componentKey": null,
"problemId": null
}
Thank you.
Alessandro
Hello,
my last successful appliance backup was at the 22.06.2020, after updating from 7.0.0a to 7.0.0b no backup was started because the vmware-sps isn't running.
Even when i reboot the VCSA the service don't came up. In the sps.log i found this errors:
ERROR opId=W2 com.vmware.vim.storage.common.VmodlErrorStrings - ProviderLoader initialization is ongoing.
ERROR opId=W2 com.vmware.vim.sms.StorageManagerImpl - [queryProvider] Failed with exception.
ERROR opId=sps-Main-978725-506 com.vmware.vim.storage.common.kv.KvDefaultValueMarshaller - Unable to unmarshal stream to object.
ERROR opId=sps-Main-978725-506 com.vmware.vim.storage.common.kv.LocalKvReaderWriter - Failed to get values for the key prefix '' from the provider '[Name:providerInfoKvProvider Optimistic locking:]'.
ERROR opId=sps-Main-978725-506 com.vmware.vim.sms.StorageManagerImpl - Exception while loading providers!
This is going into the direction, but i can't access the sps web page, because the service isn't running: https://kb.vmware.com/s/article/78900?lang=en_US
Has anyone a hint for resolving that issue?
Stefan
good afternoon,
If I give a host in vmware disconnect, the vm that are in that host, continue to work without problems correct?, and then give it a reconnect.
The host is in a cluster with HA enabled, and with the host error option to restart the vm.
What occurs to me is:
Disable HA.
Disconnect the Host and then reconnect again.
I listen to opinions.
Hi All,
I've spend more than two days on this already and I'm absolutely clueless by now. Was hoping someone here can help.
I have one vCenter in my home lab with one ESX. Bought a second ESX and I'm trying to add it to my vCenter without success.
I already deployed a new vCenter installed different versions of ESX no luck.
Right now I have a vCenter 7 and the ESXi host I'm trying to add is running 6.7.
When I try to add the host to the vCenter I see the folloing in the vmauthd.log of the ESX host:
2020-07-20T13:59:17Z vmauthd[2102937]: Msg_SetLocaleEx: HostLocale=UTF-8 UserLocale=NULL
2020-07-20T13:59:17Z vmauthd[2102937]: Could not expand environment variable HOME.
2020-07-20T13:59:17Z vmauthd[2102937]: Could not expand environment variable HOME.
2020-07-20T13:59:17Z vmauthd[2102937]: DictionaryLoad: Cannot open file "/usr/lib/vmware/config": No such file or directory.
2020-07-20T13:59:17Z vmauthd[2102937]: DictionaryLoad: Cannot open file "~/.vmware/config": No such file or directory.
2020-07-20T13:59:17Z vmauthd[2102937]: DictionaryLoad: Cannot open file "~/.vmware/preferences": No such file or directory.
2020-07-20T13:59:17Z vmauthd[2102937]: lib/ssl: OpenSSL using FIPS_drbg for RAND
2020-07-20T13:59:17Z vmauthd[2102937]: lib/ssl: protocol list tls1.2
2020-07-20T13:59:17Z vmauthd[2102937]: lib/ssl: protocol list tls1.2 (openssl flags 0x17000000)
2020-07-20T13:59:17Z vmauthd[2102937]: lib/ssl: cipher list ECDHE+AESGCM:RSA+AESGCM:ECDHE+AES:RSA+AES
2020-07-20T13:59:17Z vmauthd[2102937]: lib/ssl: curves list prime256v1:secp384r1:secp521r1
2020-07-20T13:59:17Z vmauthd[2102937]: Connect from remote socket (192.168.2.45:58542).
2020-07-20T13:59:17Z vmauthd[2102937]: Connect from 192.168.2.45
2020-07-20T13:59:17Z vmauthd[2102937]: recv() FAIL: 1.
2020-07-20T13:59:17Z vmauthd[2102937]: VMAuthdSocketRead: read failed. Closing socket for reading.
2020-07-20T13:59:17Z vmauthd[2102937]: Read failed.
ON the vCenter side I see those errors in the vpxd.log
2020-07-20T15:59:27.291+02:00 info vpxd[14503] [Originator@6876 sub=InvtHostCnx opID=kcuf2q8s-2242-auto-1qc-h5:70001655-75-StartHostSync-61f79812] Connect in progress; [vim.HostSystem:host-2021,esxi-nuc.flammi.home]
2020-07-20T15:59:27.299+02:00 error vpxd[13388] [Originator@6876 sub=TrustedInfrastructure.HostConfig] [VapiBaseClientwrapper] failed: Error:
--> system_error
--> Messages:
--> vapi.invalid.result.code
-->
2020-07-20T15:59:27.300+02:00 warning vpxd[13499] [Originator@6876 sub=TrustedInfrastructure.HostConfig opID=kcuf2q8s-2242-auto-1qc-h5:70001655-75] [AcquireJWToken] Host 'esxi-nuc.flammi.home' is missing trusted VAPI service. Exception: N4Vpxd7Langley29BadVapiConfigurationExceptionE(Error:
--> system_error
--> Messages:
--> vapi.invalid.result.code
--> )
-->
Any ideas?
Thanks a lot fellas!
Hi everyone
I am looking to find a way in vcenter 6.7 to alert us via email when a single datastore has:
While searching in alarm definition section , i found one "Datastore Disk usage alarm" but it is showing options with 75 % or any other percentage of memory left .
I am wandering if we can have any other option or alarm where i can define the threshold in terms of TB or GB space left ?
Thanks
Hi All,
I have a vCenter Server Appliance and it has syslog forwarded to a syslog server. The following log is being flooded to the server like for every 30 seconds.
cli: root Error in executing command: 8002: Can't serialize output: cannot marshal None unless allow_none is enabled
May I know which process is causing this to be logged and how to stop this log?