Hello,
I have a vcenter 6.5 in production and i monitor this vmware services.
I setup a new vcenter in version 7.0 in order to test it.
But there some services which had changed / disapear ? :
In 6.5 :
"vmware-cm" = VMware_Component_Manager
"vmware-sts-idmd" = VMware_Identity_Management_Service
"vsphere-client" = VMware_Web_Client
I can't find this inforamtion cleary in the documenation, can you give some guidance ?
Regards.
Do I risk any VM performance issues during vCenter VCSA upgrade from v6.5 to v6.7 on vSAN cluster? From my experience the only caveat of performing a vCenter upgrade is not being able to access the vCenter GUI for a limited time, but VM's should continue to function during vCenter upgrade. Just want to confirm this with the community. If there is a high risk of affecting any CPU/MEM/Network/IO VM performance, I will opt to perform the upgrade during off-peak hours.
Feedback appreciated.
regards...
Perform start operation. vmon_profile=None, svc_names=['vmware-mbcs'], include_coreossvcs=False, include_leafossvcs=False
2020-08-15T01:18:58.541Z Service mbcs state STOPPED
Error executing start on service mbcs. Details {
"resolution": null,
"detail": [
{
"args": [
"mbcs"
],
"id": "install.ciscommon.service.failstart",
"localized": "An error occurred while starting service 'mbcs'",
"translatable": "An error occurred while starting service '%(0)s'"
}
],
"componentKey": null,
"problemId": null
}
Service-control failed. Error {
"resolution": null,
"detail": [
{
"args": [
"mbcs"
],
"id": "install.ciscommon.service.failstart",
"localized": "An error occurred while starting service 'mbcs'",
"translatable": "An error occurred while starting service '%(0)s'"
}
],
"componentKey": null,
"problemId": null
}
Hello,
I cannot login to our vCenter 6.0 with Internet Explorer and I receive an error. I tried to upgrade the VMWare Tools with the following steps:
1. Inventory
2. Virtual Machine
3. Guest
4. Install / Upgrade VMWare Tools
I restarted the vCenter VM but the VM Tools were not upgraded. I received and error in the Events Log which you can see on the attached
screenshot. Then I setup the VM Tools to be upgraded automatically during the VM restart with the below steps:
1. Edit virtual machine settings
2. Options
3. VMWare Tools
4. Check and upgrade Tools during power cycling - selected
5. OK
I power off and then power on the vCenter virtual machine but the tools again were not updated. Then I tried to login with SSH client to this
vCenter VM. When I login there I received the message "Error connecting to the server". I was not able to execute any Linux commands.
The log files are attached to this post. Can you please help me to fix our vCenter 6.0 virtual machine ?
I am trying to create a vcenter user by using the dir-cli command and Invoke-Script module. The command works in some vCenters and in some of the vCenters it gives the following error:
This is a vSphere 6.7 update 3 environment. VCSA is 6.7.0.44100 build 16275304. Hosts are 6.7.0 Update 3 build 16316930.
I recently swapped out my Edgerouter X for a pfSense appliance, and while everything seemed to come back online fine after the move my VCSA is having a bad time of it.
The host name and IP address of the VCSA has not changed.
Health status is all good in the VAMI, and SSO shows as running with the vsphere.local domain.
The VCSA is joined to my active directory domain run on two win2019 VMs on the same network.
DNS is set up on the pfSense box to point to both Windows domain controllers which have static A records created for the VCSA and other infrastructure pieces like the hosts and VMs.
I also have forwarders configured on each domain controller to point to a set of pi-holes for external resolution to Cloudflare.
Before making the router switch I shut everything down, VMs, hosts, switches, Synology, modem. I set up the new pfSense box, set up the reservations to give the same address to everything and brought them back online in reverse.
Now when logging into the VCSA both hosts shows as not responding and all VMs show as disconnected. I try to connect the hosts but it fails before even trying to authenticate saying, "The host may not be available on the network, a network configuration problem may exist, or the management services on this host may not be responding." However, I can connect directly to the hosts.
It seems clear that this is DNS related, but I can't imagine what is different as I feel like I set it up on pfSense the same as it was on the ERX.
VCSA backup also fails with the message, "Backup PNID 'vcsa.my.domain' is not resolved on the network. Configure the network DNS service accordingly."
Any ideas what I did here, and how I can get things back on track?
Thank you
Hello all!
We have had an issue with certs over the last couple of days.
Our vcenter is installed on a windows machine, it is not an appliance. We are on vCenter 6 version 3g. I know it is out of date, we are not in a position to update any of it. We currently have a new environment with updated software but it will be a few months as we migrate. Within our vcenter we also have NSX and VCD so we are cautious about doing anything cert related.
Currently we cannot log into our vsphere environment unless we role back the time to a date prior to 8/15, after changing the date and restarting the web service, we are able to log in. I know the location of the certificate manager application on the windows machine but we are unsure the best route to take dealing with these certs. Again, we do not want to use custom certs or redo root certs, we just need to extend these 4 certs to get everything working while we migrate to the new environment.
Any help would be greatly appreciated.
Anyone else notice that the release notes for VCSA 6.7 U3i (6.7.0.44200 build 16616482) are no where to be found? I find that odd, even though it's just Photon patches, there should be something detailing what's been patched and such.
I'm trying to follow the vSphere Client SDK (6.7 U2) documentation for setting up the development environment and I'm stuck with the following message when trying to access https://localhost:9433/ui.
[400] An error occurred while sending an authentication request to the vCenter Single Sign-On server - An error occurred when processing the metadata during vCenter Single Sign-On setup - null.
I'm just trying the simplest thing - to run tomcat server located in vsphere-ui/server. It looks like being started successfully, but in the browser I'm getting the aforementioned message. I should note that I can access and log into the vCenter UI URL without any issues, the error only happens when I access the UI through local server. These are the messages I'm getting in the vsphere_client_virgo.log:
[2020-04-03T15:23:14.173+02:00] [ERROR] cm-catalog-manager-pool-25 com.vmware.vise.vim.security.sso.impl.NgcSolutionUser Solution user login into domain vsphere.local failed. com.vmware.vim.sso.client.exception.AuthenticationFailedException: Request signature is not valid. Check if the confirmation certificate matches the given private key. at com.vmware.vim.sso.client.impl.SecurityTokenServiceImpl$RequestResponseProcessor.handleFaultCondition(SecurityTokenServiceImpl.java:1070) at com.vmware.vim.sso.client.impl.SecurityTokenServiceImpl$RequestResponseProcessor.sendRequest(SecurityTokenServiceImpl.java:932) at com.vmware.vim.sso.client.impl.SecurityTokenServiceImpl$RequestResponseProcessor.executeRoundtrip(SecurityTokenServiceImpl.java:856) at com.vmware.vim.sso.client.impl.SecurityTokenServiceImpl.acquireTokenByCertificate(SecurityTokenServiceImpl.java:477) at com.vmware.vise.vim.security.sso.impl.SsoUtilInternal.acquireTokenByCertificate(SsoUtilInternal.java:987) at com.vmware.vise.vim.security.sso.impl.NgcSolutionUser.login(NgcSolutionUser.java:237) at com.vmware.vise.vim.security.sso.impl.NgcSolutionUser.getLoggedInTokenEx(NgcSolutionUser.java:164) at com.vmware.vise.vim.security.sso.impl.NgcSolutionUser.getLoggedInToken(NgcSolutionUser.java:148) at com.vmware.vise.vim.lookup.LsCatalogManager.executeDownload(LsCatalogManager.java:1373) at com.vmware.vise.vim.lookup.LsCatalogManager.downloadResourceBundle(LsCatalogManager.java:1326)
[2020-04-03T15:23:14.172+02:00] [ERROR] cm-catalog-manager-pool-25 com.vmware.vim.sso.client.impl.SoapBindingImpl SOAP fault com.sun.xml.internal.ws.fault.ServerSOAPFaultException: Client received SOAP Fault from server: Signature is invalid. Please see the server log to find more detail regarding exact cause of the failure. at com.sun.xml.internal.ws.fault.SOAP11Fault.getProtocolException(SOAP11Fault.java:178)
I tried to investigate and solve these, but it didn't bring me much further. What I've tried so far:
Really lost at this point as nothing seems to work. Help highly appreciated.
We have a single on-premises VCSA 6.5 instance that recently ran into the certificate expiration detailed in this KB:
https://kb.vmware.com/s/article/76719
All the certificates have been regenerated using the certificate-tool via the CLI, and now show up as up-to-date using the one-liner in the above KB (they were all previously expired a week ago):
STORE MACHINE_SSL_CERT
Alias : __MACHINE_CERT
Not After : Aug 18 19:56:50 2022 GMT
STORE TRUSTED_ROOTS
Alias : 9bd7b30bcb1dcecfe2491a3e91fcd3dd756f347f
Not After : Aug 1 13:58:01 2028 GMT
Alias : c0af9d76ae9fab214298c6b11d4efb72f64b6c13
Not After : Aug 13 18:18:55 2030 GMT
Alias : ac50bb369ff7dce7e8c372b9b3e50f6e3aaaa528
Not After : Aug 13 18:20:03 2030 GMT
Alias : 3e816060d6322a45114eac30798edbf1a4a1397d
Not After : Aug 13 18:28:26 2030 GMT
Alias : 074ddc83baeea4c6588f3f11837ed4fc77b25220
Not After : Aug 13 19:21:38 2030 GMT
Alias : 4bbaf83d23a818f2e8122b60ca0edc6dabf76d7d
Not After : Aug 13 19:33:49 2030 GMT
STORE TRUSTED_ROOT_CRLS
Alias : a45f284d7b9325005381b1b14d3ac3c823e104c9
Alias : 4b3b32cf9bb0d212aa6551bdd97dd3aaf029dde5
Alias : 02c60981250d68d94e1fcd31c93d0c50ae26d531
Alias : c4df908ec94dc3b1b774ca4a8768acfdbee90e59
Alias : f65b7ab274c5d949e8e914101797260d9e40fd70
Alias : 84d8635a51db3a011bab257873555c6776381d37
STORE machine
Alias : machine
Not After : Aug 18 19:12:42 2022 GMT
STORE vsphere-webclient
Alias : vsphere-webclient
Not After : Aug 18 19:12:43 2022 GMT
STORE vpxd
Alias : vpxd
Not After : Aug 18 19:12:43 2022 GMT
STORE vpxd-extension
Alias : vpxd-extension
Not After : Aug 18 19:12:44 2022 GMT
STORE SMS
Alias : sms_self_signed
Not After : Aug 7 14:06:21 2028 GMT
STORE BACKUP_STORE
Alias : bkp___MACHINE_CERT
Not After : Aug 18 19:11:39 2022 GMT
Alias : bkp_machine
Not After : Aug 18 19:12:42 2022 GMT
Alias : bkp_vsphere-webclient
Not After : Aug 18 19:12:43 2022 GMT
Alias : bkp_vpxd
Not After : Aug 18 19:12:43 2022 GMT
Alias : bkp_vpxd-extension
Not After : Aug 18 19:12:44 2022 GMT
When I try to start all services now, it returns the following after ~5 minutes:
Service-control failed. Error Failed to start vmon services.vmon-cli RC=1, stderr=Failed to start vpxd-svcs, vapi-endpoint services. Error: Operation timed out
When using service-control to start just the vpxd-svcs service by itself, it returns the following error:
Perform start operation. vmon_profile=None, svc_names=['vmware-vpxd-svcs'], include_coreossvcs=False, include_leafossvcs=False
2020-08-18T21:10:50.484Z Service vpxd-svcs state STOPPED
Error executing start on service vpxd-svcs. Details {
"resolution": null,
"detail": [
{
"args": [
"vpxd-svcs"
],
"id": "install.ciscommon.service.failstart",
"localized": "An error occurred while starting service 'vpxd-svcs'",
"translatable": "An error occurred while starting service '%(0)s'"
}
],
"componentKey": null,
"problemId": null
}
Service-control failed. Error {
"resolution": null,
"detail": [
{
"args": [
"vpxd-svcs"
],
"id": "install.ciscommon.service.failstart",
"localized": "An error occurred while starting service 'vpxd-svcs'",
"translatable": "An error occurred while starting service '%(0)s'"
}
],
"componentKey": null,
"problemId": null
}
The web UI returns the following 503 error (which it has been returning since the certs expired):
503 Service Unavailable (Failed to connect to endpoint: [N7Vmacore4Http20NamedPipeServiceSpecE:0x000056033c080640] _serverNamespace = / action = Allow _pipeName =/var/run/vmware/vpxd-webserver-pipe)
Can anyone point me to what log files specifically I need to be looking at to diagnose this and figure out what keeps the service from starting? I've already covered the following:
Our last resort is to simply wipe and reinstall VCSA, but I'd like to avoid it if this is possible to fix.
Since i upgraded to the latest build of vCenter 7 (16620013), one CPU core is constantly kept busy at 99% and when I check in top I see:
| 53945 root | 20 0 753.2m 75.1m 96.0 0.6 16:24.61 S /usr/lib/vmware-wcp/wcpsvc --port 8920 --logfile /var/log/vmware/wcp/wcpsvc.log --configfile /etc/vmware/wcp/wcpsvc.yaml --audit-logfile /var/log/vmware/wcp/wcp-audit.log --+ |
When I search for the process info, it seems to be the vSphere integrated Kubernetes master process.
I checked its logs at /var/log/vmware/wcp/wcpsvc.log and it seems to be all regular action - at least no warnings or error.
The only thing that meets the eye is the repeating message:
2020-08-18T21:02:57.492Z debug wcp informer.processLoop() lister.List() returned
But it sounds ok'ish - OTOH I'm not sure if it's supposed to run all the time.
Any ideas?
Hi, all.
I'm using vCenter 5.5 U2 on Windows server 2008 R2.
I want to upgrade the OS of vCenter from 2008 R2 to 2012 R2.
In this situation, which one is the best way ?
1. Creating a new Win 2012 R2 VM, vCenter re-installation, and reconnecting SSO and external databases
2. Upgrade Windows Server 2008 R2 (vCenter installed) to Windows 2012 R2 (Is it possible?)
Thank you very much.
Regards.
Is there any way to change the time it takes for vCenter to detect changes in AD group membership?
Example:
GroupA is assigned permissions to a folder in vCenter. UserA is a member of GroupA
UserA logs in and everything is fine.
Remove UserA from GroupA
UserA is still able to login and it seems to take 24 hours before they lose permission.
I tried changing the validation period under advanced settings in vcenter but that didn't seem to help. Is there something I'm missing?
Trying a similar test to grant access worked right away detects the change right away but removing access doesn't get detected until the next day (I think I've seen a similar issue with nested groups and not detecting a change in membership in the past which I assume is related)
Thanks
I need to run a script in my VMware vcenter server. The Instructions are:
I downloaded the WMware CLI in powershell 7 using: Install-Module -Name VMware.PowerCLI -RequiredVersion 6.5.4.7155375
I connected to my vSphere server using the command Connect-VIServer -Server -My server name-
How would I run the script files from my windows PC in this CLI shell? I turned on BASH shell in my appliance.
hi , i'm running a lab with a server which has EXSI and a couple of running VMs on it .
i'm managing it from the VMWARE ESXI web tool , i have 2 datastores (one big and one small ).
And here is the problem... i am trying to install VCSA 6.5 on a VM with windows server 2016 ,
I'm deploying the VCenter to a VM with ESXI OS , and then i'm getting stuck where i need to pick datastore for storing the VCSA files , because
the requirements tells that i need 250 GB of free space , which i don't have on the small datastore , but i do have on the big datastore , but it's not viewed
in the options to select , like the EXSI host does not know about it , even do it stored in the big datastore .
even with the thin disk mode i still can't get forward with the installation .
what am i doing wrong ? please help
thanks!
Hello,
I'm starting the learning process on the VMWare platform with a home lab setup. ESXI 6.5 is installed on my server and I am able to successfully manage the system via the web interface. However, I'd like to explore some of the options present in the vCenter Server application. However, I'm unable to locate the correct download for this product.
Pressing the "Get vCenter Server" button from the ESXI web interface does not direct to the correct link.
Browsing through the downloads page seems to be the correct location but I do not have permissions to download: https://my.vmware.com/en/group/vmware/downloads/details?downloadGroup=VC65U3K&productId=614&rPId=50173
Message: You either are not entitled or do not have permissions to download this product. Check with your My VMware Super User, Procurement Contact or Administrator. If you recently purchased this product thorugh VMware Store or through a third party, try downloading later.
I'm looking for help in 1 of 2 ways:
1. Describe how to obtain permissions required for downloading the product from the link below
2. If the link below is not the right approach, please redirect me to a download location for the client interface that I install on my desktop PC.
Download Link I tried:
Version of ESXi
ESXi 6.5 A03 (based on ESXi VMKernel Release Build 5310538)
Hi,
So I can't access the VCSA using root as the password says it's incorrect. This seems to have happened after the upgrade from 6.5 - 6.7 but I really thought I had the right password but I'm willing to accept that there may have been a mistype when upgrading. Anyway I looked on line and there is a simple procedure to rest the root password by restarting VCSA, pressing "E" on the Photon splash screen then editing the GNU GRUB menu. All goes smoothly, confirms new password has been accepted but when I reboot it won't accept the password? I've tried this quite a few times each time choosing a different password but for some reason it just doesn't seem to work.
Should maybe say I'm running vCenter HA if that makes a difference?
Thanks
Are there a solution for this bug or error?
https://ip-adress:5480 works fine and all services are started
VMware OS Photon (64 bit) has been manuelly set
What is to do?
- New installation
- Redo installation on same places?
- who have a solution that works correctly
It is not a certificate problem.
A new server with Vsphere 7 was installed and a new installation for vcenter.
Thanks for help
Hello,
When applying a certificate using our Microsoft CA (I followed the VMware article/video on how to create a certiifcate template) to our vCenter (Windows) server, it fails and rolls back. The issue I'm getting is the same as the following discussion posted a few months back. However, there's no fix provided:certificate-manager 'lstool reregister' failed: 1 / VCSA Certificate Manager Option 1: Replace Machine SSL certificate with Custom Certificate
The error in the log:
2017-10-19T00:26:19.474Z ERROR certificate-manager Error while replacing Machine SSL Cert, please see C:\ProgramData\VMware\vCenterServer\logs\vmca\certificate-manager.log for more information.
2017-10-19T00:26:19.474Z ERROR certificate-manager 'lstool reregister' failed: 1
2017-10-19T00:26:19.476Z INFO certificate-manager Performing rollback of Machine SSL Cert...
Is there an actual fix to this that can be made available instead of me having to call VMware support?
Thanks!
Environment:
VMware ESXi, 6.7.0, 15160138
vCenter: 6.7.0.41000 build number: 14836122
We cannot remove one crashed VMware host from our datacenter. We do not have any clusters configured. We do have a vDS. Other hosts are working fine and in production. Remove from inventory is greyed out in vCenter.
The following action I already tried:
Disconnect the host (succesfully)
Remove host from vDS (succesfully)
Remove from inventory is greyed out
Used PowerCLI but came with this error:
Remove-VMHost : 21-4-2020 08:23:16 Remove-VMHost The method is disabled by 'com.vmware.vcIntegrity'
At line:1 char:1
+ Remove-VMHost ESXVN0XX.FQDN
Any ideas?