Quantcast
Channel: VMware Communities: Message List

Re: VCF 4.1 deployment : Bring up is failing with error "Failed to import ESXi certificate in trust store"

$
0
0

It seems that the validation of ESXi thumbprints is broken in this release. Can you try running bringup with selecting the option to skip ESXi thumbprint validation?


Re: Deletion of Snapshot Action & Result

$
0
0

Appreciate the help in clarifying this point. Ran the snapshot deletion function and worked like a charm.

Re: SEL fullness error, I get 5 "n/a" events a minute

$
0
0

You could try to login into the physical server OOB / IPMI interface (iDRAC, ILO, IMM, etc.) and check what's going on there.

You can start on checking what's filling the logs there.

This is really vendor / system specific and it's really hard to guess what's causing this

Re: Login Message

$
0
0

Everytime I tried to open that link up now and before it would not pop up.

 

I wish I could take a screenshot, but I do not have external internet access on that machine and I can not transfer anything from that machine.

 

Basically we upgraded half of our system (the system that does not have external internet access) from 6.5 to 6.7. Under the administration tab - configuration section you can add a consent forum for someone to check when logging into the vSphere client.

 

As soon as we check that box, a red box pops up. If i check off the "I agree to terms" it says - "you must agree to blah blah blad". I figure it was an error box but it shouldnt be there unless there is an error. If you have no idea that is fine, I will add a screen shot when we do the side of our network that has internet access.

Re: Deletion of Snapshot Action & Result

Re: The results get by snmpwalk are garbled.

VMWare Workstation Slows Down When Saving State

$
0
0

I've got VMWare Workstation 16 Pro (16.0.0 build-16894299) and recently whenever I try to take a snapshot my computer will get extremely laggy. My mouse will jitter around if I try to move it and if I am listening to music it will get glitchy. Note this is outside of the VM on the host. Additionally, if I click the suspend button for the guest it will stop lagging and take the snapshot. It seems that while the snapshot process is in the background and not prioritized it slows down? If I open task manager there doesn't seem to be any bottle necking of my CPU / RAM.

Re: ovftool v4.4 failing on extra config even when passing --allowExtraConfig

$
0
0

The sched.mem.min and sched.mem.minSize values should not be 0 if you are "Reserving all memory". It should be equal to the configured RAM size for the VM. Assuming it is processed serially line by line, probably best to go with min and minSize before the pin.


Re: VMware workstation 16 Player にWindowsXPがインストールできない

$
0
0

その後ですが、まだ解決していません。

 

windows10をクリーンインストールしてまっさらな状態でVmware workstation 16 playerのインストールも試してみたのですが、結果は同じでした。

 

■環境

・Vmware workstation 16 player ver16.0.0

・ホストOS:WIndows10 pro 64bit ver2004

・ゲストOS:WIndowXP professional ver2002 ※設定値はデフォルトのまま

・ホストPC:CPU AMD Ryzen7 1700 Eight-Core Processor 3.00GHz メモリ48GB

 

■現象

・インストール処理→『15秒後に再起動します』と出る→再起動→WindowsXPタイトル画面が出る→真っ暗→真っ暗なまま

・同じゲストOSイメージをVirturlBoxでは正常にインストールが完了する

・ゲストOSWindows10(32bit)、Windows7(64bit)、Ubuntu(64bit)では正常動作

 

■報告

・gowatana氏)Windows XP SP2 32bit、Windows 10 Home 1909、Lenovo ThinkPad X1、Core i5-8300Hで正常動作

 

※普遍的な現象なのか知りたいので解決に至っていなかったとしても、同じような症状になった方の報告などあれば助かります。

もし何か情報があれば引き続きよろしくお願いします。

Re: SRM+vSphere Replication+Reprotect takes long time

$
0
0

Hi JoaquinC,

 

Re-protect with vSphere replication is expected to take time as it has to perform checksum operations. It takes time because VR has to read the entire disk for change in data blocks and then replicate any recent changes.

 

Please look for this question 'What are the replication and synchronization types in VMware vSphere Replication?' under FAQs. (Refer details about Full sync)

 

vSphere Replication Frequently Asked Questions (FAQ) - The current version of this doc has moved to: https://storagehub.vmware.com/#!/vsphere-replication/vsphere-replication-faq

vSphere Replication FAQ | VMware

 

I hope that helps

Migration between isolated ESXi/vCenter environments (active snapshots)

$
0
0

We are migrating an active isolated sandbox environment (AD authentication, internal DNS, Exchange, Solarwinds, SQL, as well as some RH Linux 6.4 servers) from one ESXi/vCenter environment to another. This migration will all be offline as both environments are isolated. We have read and reviewed the documentation related to this process, but there is one item which cannot find any direct information on.

 

Prior to any major changes (including patch updates) we make snapshots of the virtual servers. For folks that have done offline migrations such as this, does it help to remove the snapshots before making the OVF?  We have a back and forth between some of the team about whether or not the presence may cause an issue at the migration end site. 

 

All hosts within the source and target environments are running the same version/build of ESXi 6.5, and all of the servers in both locations are the same Compatibility - ESXi 6.5 (VM Version 13)

 

Thanks for the assist!

 

Patrick

Re: Task conflict with Update Manager

$
0
0

Hi vMarkusK1985

 

vSphere replication automatically pushes hms vibs to all ESXi hosts in vCenter. This is expected and you can disable the auto-install feature post deployment:

 

1. SSH to vSphere replication appliance and run these commands:

 

/opt/vmware/hms/bin/hms-configtool -cmd reconfig -property hms-auto-install-vr2c-vib=false

/opt/vmware/hms/bin/hms-configtool -cmd reconfig -property hms-auto-install-hbragent-vib=false

 

Once disabled, you can check the values in /opt/vmware/hms/conf/hms-configuration.xml file. One of the parameters might not exist on newer versions(8.x), however still check the xml file

 

2. Restart hms service:  service hms restart

 

This does not impact existing or new replications

 

I hope that helps

Re: Share host VPN with guest

$
0
0

I've only been able to test this with Catalina and Cisco AnyConnect. It works for me in that I can VPN to a customer site (or into work from home) on the Mac, change my VM (Windows 10 Pro) to use NAT instead of a bridged connection, and then do things like RDP to remote servers, access shares on our NAS box at work (from the VM) etc. Not sure exactly what you mean about web sites that are only available in VPN aren't - ie. they're only available if you use a VPN on the MAC and then browse to them for some security or other reason? Or that you can't browse the Internet at all from your VM.

 

Currently not able to test with Big Sur

Datastores not visible

$
0
0

I have 3 Esxi 6.7 hosts on Essentials Plus licensing. Using standard switche. All connextend to shared NAS storage.

 

 

only one of the three hosts successfully connects via iSCSI own connection. The other two esxi 6.7 hosts cannot connect To the same NAS datastore. . All host configured identically

 

what may be wrong?  Why does only one host connect to the NAS while other two will not.

 

 

vCenter 6.7 connects successfully to NAS DATASTORE

Re: VM causes host to start freezing at seemingly random intervals.

$
0
0

Unfortunately, the issue is still happening. I am unsure what s causing it.


Re: Horizon 8.0.5 iOS: Magic Trackpad not functioning

$
0
0

Here is the doc for this feature: External Keyboards and Input Devices

 

Please pay attention to this sentence,

"To use a physical mouse, you must disable the Windows Native Touch Gestures setting in Horizon Client."

 

"Windows Native Touch Gestures" is an option under "Settings->Touch" and the default status is on.

 

In order to give users a better using experience of guest os, when entering the remote desktop, we hide the mouse pointer on the host. When this option is turned off, then you can see the mouse pointer on the guest.

 

Windows can also handle touch events. Some users like to use Windows touch screen devices. In order to give these users the same experience as using Windows touch screen devices, we set this option. When this option is enabled, we send touch events to the guest instead of mouse events, so the mouse pointer on the guest cannot be seen.At the same time, we hide the host pointer, so you won't be able to see any pointers.

 

Hope the above information can solve your problem, thank you!

Re: Horizon 8.0.5 iOS: Magic Trackpad not functioning

$
0
0

Additional instructions for Apple Magic Trackpad:

Apple Magic Trackpad 2 is fully supported. For Apple Magic Trackpad 1, since it cannot support multi-touch gestures on iPad, we also cannot provide full support.

Can't share Mac folders with Centos 8 VM.

$
0
0

I have clicked 'Enable Shared Folders' but a warning says "Shared folders will not be available in the virtual machine until VMware Tools is installed and running".

In the "Virtual Machine" menu, "Reinstall VMware Tools" is greyed out.

In the VM, I did 'yum install open-vm-tools openvm-tools-desktop' which appeared to go hunky-dory. I can indeed see both packages listed when I do 'yum list'. However, 'systemctl start open-vm-tools' gives me "Failed to start open-vm-tools.service: Unit open-vm-tools.service not found."

I bought a pro license which I believe came with 3 months support or something, but so far I have been completely unable to open a support ticket. Getting very   .

Help anyone?

Re: Datastores not visible

$
0
0

Are the ESXi hosts in the same network?
Can you ping the NAS server from the esxi hosts?
HAve you tried mounting the NAS from CLI?
Manage a NAS File System with ESXCLI

 

 

 

 

1

List all known NAS file systems.

esxcli <conn_options> storage nfs list

For each NAS file system, the command lists the mount name, share name, and host name and whether the file system is mounted. If no NAS file systems are available, the system does not return a NAS filesystem and returns to the command prompt.

2

Add a new NAS file system to the ESXi host.

Specify the NAS server with --host, the volume to use for the mount with --volume-name, and the share name on the remote system to use for this NAS mount point with --share.

esxcli <conn_options> storage nfs add --host=dir42.eng.vmware.com --share=/<mount_dir> --volume-name=nfsstore-dir42

This command adds an entry to the known NAS file system list and supplies the share name of the new NAS file system. You must supply the host name, share name, and volume name for the new NAS file system.

3

Add a second NAS file system with read-only access.

esxcli <conn_options> storage nfs add --host=dir42.eng.vmware.com --share=/home --volume-name=FileServerHome2 --readonly

4

Delete one of the NAS file systems.

esxcli <conn_options> storage nfs remove --volume-name=FileServerHome2

This command unmounts the NAS file system and removes it from the list of known file systems.

Re: Migration between isolated ESXi/vCenter environments (active snapshots)

$
0
0

Hey hope you are doing fine:

 

Having snapshots older than 14 days can cause consistency and performance issues to your VMs.
Having a big snapshot chain on a VM can cause performance degradation and consistency issues
The proper usage of a Snapshot should be:

 

1. Take it before any change
2. Change goes by
3. After 48/72 hs without an issue snapshot is deleted.

 

since you will be exporting and OVF the snapshots will be added into the OVF and will make the OVF chain bigger with no actual usage.

 

TL;DR: yes, delete the snapshots before exporting.

Re: ESXI 6.7 UI not allowing me to login

$
0
0

Is it possible that root password has expired?
Can you login via ssh? if not root password has expired
What you need to do is:


Connect to the server console (using KVM/iLO/Idrac or your preferred method)
try to log in with root credentials, this way it should work

 

type: chage --list root

this should show you if root password is expired

 

then type: chage -M 99999 root

 

 

Warm regards

Path Differences Between Command line & running programs from Installbuilder on Mac

$
0
0

Hello Support,

 

Right now i am trying to set up properly git-lfs as part of my install process on the mac.  I've installed git successfully and installed git-lfs, so that it works correctly on the command prompt and git comands will work in installbuilder.  However either 'git-lfs' command or 'git lfs' are not found when invoked from <runProgram>  when i display the value of ${env(PATH)} within the installer i get:

 

${env(PATH)}:

/sbin:/usr/sbin:/usr/local/sbin:/usr/bin:/bin:/usr/sbin:/sbin

 

versus from the command prompt:

echo $PATH

/usr/locabin:/usr/bin:/bin:/usr/sbin:/sbin

 

And since git-lfs is installed in usr/local/bin and that isn't included in the installbuilder version of the path I think that is the problem.  My question is why are these 2 variables different, and how can i change the path within installbuilder? 

I've tried both <setEnvironmentVariable> & <addDirectorytoPath> to try to modify the path but neither seem to have an effect.  Also note i am turning on the flag <requireInstallationByRootUser> so i can have admin privileges for my installer, not sure if that is relevant to.this issue or not.

 

Thanks,

Jeff


Re: Can't share Mac folders with Centos 8 VM.

$
0
0

Hey, hope you are doing good
Might be the silliest question, but what is the uptime for this VM?
Have you tried rebooting it? Can you please try and share VM's processes? (with ps)

Re: Can't share Mac folders with Centos 8 VM.

$
0
0

Thanks, yes I have tried rebooting, several times while trying various things. So do you really want a list of all running processes (it's long!)?

vm15不可以安装win10

$
0
0

vm15在安装win10时,卡在正在准备要安装的文件,有时候卡在10%,有时候卡在80%就不动了,这是怎么回事,安装win7没问题

Re: Horizon Connect | RDS wrong type

$
0
0

You select a snapshot from a master image.

Horizon creates a template VM that boots from the master snapshot. After some prep, the template VM shuts down and creates a new snapshot.

The template snapshot is copied to a Replica VM on every LUN (datastore) that will host RDS Farm VMs.

For each datastore, Horizon creates a Parent VM on every host in the cluster. This parent VM is powered on and running at all times.

The linked clones can finally be created by forking the parent VM to new linked clone VMs. Notes:

Once the Parent VMs are created, creating/recreating linked clones is fast. But it takes time to create all of the Parent VMs.

And the Parent VMs consume RAM on every host. If you have multiple datastores and/or multiple pools, then there are multiple Parent VMs per host, all of them consuming RAM.

You can schedule a periodic reboot of the Instant Clones, which causes the Instant Clone machines to refresh (revert) from the parent VM.

Instant Clones require Distributed vSwitch and Distributed Port Group with Static Binding and Fixed Allocation. Standard vSwitch is not supported. alaskasworld.com

How can see total size of reclaimable disk

$
0
0

Is there any solution to calculate and see total size of reclaim or unmap disk on each datastore ?

Re: Fedora 32 VMware-Remote-Console-11.2.0-16492666 install failing. USB Arbitration Service failed

$
0
0

Hi NPark,

 

great, works! thanks for you help. I hadn't seen the parameter ignore-errors.

 

regards

Re: plink issues

$
0
0

let me check it out.

 

Thanks Luc


Re: VMware license changed to evaluation mode after upgrading from 6.7 to 7.0

$
0
0

thank you all, I managed to split the license and upgrade it

 

thanks again for your support

Re: Status of other host hardware objects error after upgrade to ESXi 6.7

$
0
0

I can confirm, the same for 6.5U3 and ML110 Gen10 and ML350 Gen10. The end result of my vmware case about hard disks not shown in Hardware health->Storage is that there is nothing that can be done, "known issue" etc. Recommendation was to update ESXi from 6.5 to 6.7 and see if the problem persist. I suppose I will do an vsphere upgrade to 7.0 U1 after couple moths since it was just released.

How to find the package/vib that helps to recognize the sensor category

$
0
0

Hi All,

 

I looking for a way to find which package/vib to install in order to the sensor to recognize the disk's category as Storage

 

in ESXi-6.7.0-8169922-standard it is not detect but in ESXi-6.7.0-20191104001-standard  it is recognizing

 

ESXi-6.7.0-8169922-standard

 

 

 

ESXi-6.7.0-20191104001-standard

Re: Datastores not visible

$
0
0

What happens when they “cannot connect”?

What sort of errors do you get?

What troubleshooting have you tried?

Re: Remote access to Horizon Connection Admin Console via UAG

$
0
0

There is no issue here, everything is working as it is supposed to do.
But apparently, this is not how you would like it to work.

;-)

The UAG is an appliance built to allow for secure remote connections to (among others) VMware Horizon, within the secure part this also means to not allow access to /admin of the Connection Server(s).

If this is something you would like to achieve, which is something I would not recommend, you could add a proxy pattern on your UAG’s.

 

You can add one under Horizon Settings > Proxy Pattern. On my fresh version 2006 UAG this looks like:

(/|/view-client(.*)|/portal(.*)|/appblast(.*))

But if you want the admin portal enabled externally you could change it to something like:

(/|/view-client(.*)|/portal(.*)|/appblast(.*)|/admin(.*))

 

Again, not recommending this!

Self-Hosted Content Library Connection to VCSP Server Failed

$
0
0

Recently I set up a 3rd party content library of my own following the excellent instructions provided here: https://www.virtuallyghetto.com/2015/06/creating-your-own-3rd-party-content-library-for-vsphere-6-0-vcloud-director-5-x.…

 

I used an updated version of the script mentioned in the article from here: vghetto-scripts/make_vcsp_2018.py at master · lamw/vghetto-scripts · GitHub

 

However when I try to Synchronize the library I get a general system error with the message in the error stack:

 

Connection to VCSP server 10.0.0.252 failed

 

Comparing against a publicly available library that I was able to sync (https://download3.vmware.com/software/vmw-tools/lib.json ) the json generated by the script looks ok.

 

I pretty much used the default Apache config, with the content library root at /var/www/html/content-library/ and everything in that directory is owned by www-data with open read permissions. I can get to the all the files when accessing the server via a browser.

 

I can ping the content library server from vCenter and was able to download files using curl. Looking at the Apache logs I do see successful GETs for the root lib.json and items.json.

 

Unsure of how to proceed from here, all suggestions welcome.

Re: Get-hvlocalsession for multiple users

$
0
0

Do the logoff events produce a similar object?


Re: Get-hvlocalsession for multiple users

$
0
0

Yes lucd...Logoff event also has the similar object.

DEM not working after desktop restart

$
0
0

We are using VMware Horizon 7.12 and DEM 9.11 with dedicated linked clones. We also have Microsoft FSLogix. We are seeing a strange issue where DEM does not apply any settings after a desktop is restarted. It does not create any logs as well. After a login, if we logoff from the desktop (not a reboot), it start working from the next logon onwards (it also starts creating logs). Again if we reboot, it worn't work just after the reboot until we logoff again.

 

This is the exact issue mentioned in the comments of the thread Let’s troubleshoot User Environment Manager (#UEM) 9.X: How to avoid errors during the installation – vLenzker by TJ Derrick. He resolved it by setting the GPO "System\Logon\Wait for network" but we have installed DEM in NoAD mode, so I don't this this setting will make any difference.

 

Any thoughts on why this strange behaviour?

 

DEMdev

PowerCLIでのクロスvCentervMotionがvSphere single sign-on failed for connectionで失敗する。

$
0
0

解決事例があればご教示お願いいたします。

 

移行元 :vCenter6.5

     ESXi6.5

移行先 :vCenter6.7

                  ESXi6.7

 

クロスvCentervMotionをpowerCLIから実行すると以下エラーで6.5→6.7vCenter環境へ仮想マシンの

移行がうまくいきません。

 

・PowerCLIから両vCenterへのネットワーク疎通確認(実行コマンド①、②問題なく動作)

・single sign-onドメインは移行元、移行先インストール時vsphere.local で作成済み。

 

■エラー内容

Move-VM : 2020/10/22 15:00:00   Move-VM         vSphere single sign-on failed for connection '/VIServer=vsphere.local\ad

ministra

tor@vCenterFQDDN:443/' during a previous operation. The current operation requires such single sign-on

and therefore failed. Future operations which require single sign-on on this connection will fail. The underlying cause

was available in the error message which initially reported the single sign-on failure.

発生場所 行:1 文字:40

+ ... me testikou2 | Move-VM -Destination $hv -Datastore $ds -PortGroup $pg

+                    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    + CategoryInfo          : NotSpecified: (:) [Move-VM], SsoNotAuthenticatedException

    + FullyQualifiedErrorId : VICore_SsoExceptionCausedByEarlierSsoFailure,VMware.VimAutomation.ViCore.Cmdlets.Command

   s.MoveVM

 

■実行コマンド

①$vc_a = Connect-VIServer 移行元vCenterFQDN

②$vc_b = Connect-VIServer 移行先vCenterFQDN

③$ds = Get-Datastore -Server $vc_b -Name "datastore1"

④$pg = Get-vDPortgroup -Server $vc_b -Name "DPortGroup1"

⑤$hv = Get-VMHost -Server $vc_b -Name "ESXi1"

⑥et-VM -Server $vc_a -Name testikou2 | Move-VM -Destination $hv -Datastore $ds -PortGroup $pg

 

何卒、宜しくお願い申し上げます。

Re: SSO in PKS supports more that one Identity Source?

$
0
0

Photon has no complexity requirements it enforces for root. For different users, it does so whilst the usage of passwd as there are many resources in article. If you want to lift the ones, you could edit /and many others/pam.D/gadget-password and remark out the "password required" line and modify the considered necessary line to just kingdom "pam_unix.So". When you are logged in as a non-root account and call passwd you'll don't have any boundaries.

Re: UEM not backing up Office products

$
0
0

Hi RachelW,

Woohoo!  The good news I now have an Outlook profile after logging out and back in to the desktop!!

Happy to hear that!

 

I'm afraid I can only help with DEM-related questions; I don't know enough about individual applications to help troubleshoot issues around application-specific configuration.

Probably good to start a new thread about these, with config details and logs?

Re: Esxi 6.5, PCI.IDS and PCI passthrough with pci bridge

Re: VCS Appliance - SSD or HDD/ Thin vs Thick

$
0
0

Hey scherian,

 

1- Yes go ahead and deploy the vCSA into the HDD also if you need expansion you will have more space to do it.

2- I recommend you, if you have the resources, to deploy a Small VCSA which is an excellent point to start and for production workloads in all my projects I always start with this size unless some specific constraints.

3-  The impact of taking these Snapshots every 2 hours could be a problem but is not in most of the cases, however, this changes depending the application running inside the VM. And regarding Veeam for Domain Controllers, absolutely is recommended, even they have an application login integration where in case of a failure you can restore AD objects such as groups, computer objects, users, etc!

 

Regards!


Re: LUN does not show correct size after extend

$
0
0

I ran the command on all hosts simultaneously, then went to vCenter - Datastores, clicked refresh, then increase, but it still shows the old size and there is no available space for increase.

Re:Failing to register the local vsphere Client  with vCenter

$
0
0

Hi,

 

Whenever I try to register vSphere Client 7.0 with vCenter server 6.7 , I am getting this error.

"An error occurred while sending an authentication request to the vCenter Single Sign-On server - An error occurred when processing the metadata during vCenter Single Sign-On setup - Couldn't find SSO servers for the local domain."

 

But if I try to register vSphere Client 7.0 with vCenter server 7.0, there is sso error , but the sample plugin "html-sample" fails to get deployed due to the error "Plugin configuration for reverse proxy failed"

 

How are the files in the directory "C:\ProgramData\VMware\vCenterServer\cfg\" created?

I am guessing the errors are due to missing files. I am attaching the log file again for reference. This log is after running startup.bat file in my dev environment.

 

 

Re: IOInsight not working (VCF 4.1)

$
0
0

I just got access to a VCF 4.1 lab, just testing it now to see if it works here.

Re: VCSA 6.5 with HA & 2 PSCs - VUM Service Can't Start

$
0
0

Hello Lalegre,

 

I just checked both PSCs and on PSC01 under this path: /etc/vmware/vmware-vmafd missing both: machine-ssl.crt  machine-ssl.key - on the other PSC02 both of them are exist. On both of them have the ca.crt

 

The thing now is while I run before the wizard, I choose the number 4. and now the ca.crt has been replaced with a new one...

[ /storage/certmanager ]# /usr/lib/vmware-vmca/bin/certificate-manager

                 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

                |                                                                     |

                |      *** Welcome to the vSphere 6.5 Certificate Manager  ***        |

                |                                                                     |

                |                   -- Select Operation --                            |

                |                                                                     |

                |      1. Replace Machine SSL certificate with Custom Certificate     |

                |                                                                     |

                |      2. Replace VMCA Root certificate with Custom Signing           |

                |         Certificate and replace all Certificates                    |

                |                                                                     |

                |      3. Replace Machine SSL certificate with VMCA Certificate       |

                |                                                                     |

                |     4. Regenerate a new VMCA Root Certificate and                  |

                |         replace all certificates                                    |

                |                                                                     |

                |      5. Replace Solution user certificates with                     |

                |         Custom Certificate                                          |

                |                                                                     |

                |      6. Replace Solution user certificates with VMCA certificates   |

                |                                                                     |

                |      7. Revert last performed operation by re-publishing old        |

                |         certificates                                                |

                |                                                                     |

                |      8. Reset all Certificates                                      |

                |_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|

 

 

 

The problem now is that the wizard is not running...

 

[ /storage/certmanager ]# /usr/lib/vmware-vmca/bin/certificate-manager
                 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
                |                                                                     |
                |      *** Welcome to the vSphere 6.5 Certificate Manager  ***        |
                |                                                                     |
                |                   -- Select Operation --                            |
                |                                                                     |
                |      1. Replace Machine SSL certificate with Custom Certificate     |
                |                                                                     |
                |      2. Replace VMCA Root certificate with Custom Signing           |
                |         Certificate and replace all Certificates                    |
                |                                                                     |
                |     3. Replace Machine SSL certificate with VMCA Certificate       |
                |                                                                     |
                |      4. Regenerate a new VMCA Root Certificate and                  |
                |         replace all certificates                                    |
                |                                                                     |
                |      5. Replace Solution user certificates with                     |
                |         Custom Certificate                                          |
                |                                                                     |
                |      6. Replace Solution user certificates with VMCA certificates   |
                |                                                                     |
                |      7. Revert last performed operation by re-publishing old        |
                |         certificates                                                |
                |                                                                     |
                |      8. Reset all Certificates                                      |
                |_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|
Note : Use Ctrl-D to exit.
Option[1 to 8]: 3

Please provide valid SSO and VC priviledged user credential to perform certificate operations.
Enter username [Administrator@vsphere.local]:administrator@domain.local
Enter password:


Traceback (most recent call last):
  File "/usr/lib/vmware-vmca/bin/certificate-manager", line 716, in <module>
    exit(main())
  File "/usr/lib/vmware-vmca/bin/certificate-manager", line 710, in main
    parse_arguments()
  File "/usr/lib/vmware-vmca/bin/certificate-manager", line 701, in parse_arguments
    get_machine_ssl_cert_to_dir()
  File "/usr/lib/vmware-vmca/bin/certificate-manager", line 573, in get_machine_ssl_cert_to_dir
    vecs.get_cert_file(Constants.MACHINE_SSL_STORE, Constants.MACHINE_SSL_ALIAS, oldcert)
  File "/usr/lib/vmware/site-packages/cis/certificateManagerOps.py", line 438, in get_cert_file
    raise e
cis.exceptions.InvokeCommandException: {
    "resolution": null,
    "detail": [
        {
            "args": [
                ""
            ],
            "id": "install.ciscommon.command.errinvoke",
            "localized": "An error occurred while invoking external command : ''",
            "translatable": "An error occurred while invoking external command : '%(0)s'"
        },
        "Error while creating backup cert file for MACHINE_SSL_CERT"
    ],
    "componentKey": null,
    "problemId": null
}

 

 

 

As I mentioned on my previous post, I followed this link below but didn't work:

I found a VMware article which suggests to delete and re-create the directory for the backup/VMware certs but didn't work. https://kb.vmware.com/s/article/67660

 

 

 

To summarize the steps now:

 

- Fix the PSC01 Wizard and re-create the self-signed certificate - I am looking how to fix the wizard and re-create the self-signed certificate

- Update the expired self-signed certificate on PSC02 - Need to find how to update the expired self-signed certificate

- Update the self-signed certificate from PSC01 to VCSA - Need to find how to update the self-signed certificate on VCSA

SRM and GPUs

$
0
0

Hi,

is it possible to protect using SRM, VMs that are using a Nvidia M60 GPU ?

Re: IOInsight not working (VCF 4.1)

$
0
0

Just tested it, it works as expected here. Not sure why it fails in your situation, but it works fine here.

Re: IOInsight not working (VCF 4.1)

$
0
0

Thx for checking. I have already filed a support case today.






Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596344.js" async> </script>