Quantcast
Channel: VMware Communities : Popular Discussions - vCenter™ Server
Viewing all 18256 articles
Browse latest View live

VM permission to allow only mounting of an iso in local datastore.

$
0
0

 

I have a set of limted users who are only given the 'power options and media' permissions to their specific VM's and nothing else.  They can get to do what they need; however, I have a need to let them edit the cd settings and mount an .iso file directly out of the local datastore on the esx host.

 

 

They also get permission denied when its set to "Client Device" and hit the button to mount their local CD.

 

 

I would prefer to mount the .iso from the 'Datastore ISO file" but it would suffice to get the "Client Device" working.

 

 

I have tried to give datatstore browse and modify device settings but they do not ungrey the browse next to the mounting of iso file.  Manual type in doesnt work either.  I still want to limit them without giving administrator access.

 

 


vCenter 6 'Empty Inventory' due to permissions

$
0
0

I have a fully functional, completely working vCenter 6 environment. Admin users can log in and see the entire inventory, as they're supposed to.

 

However, I have a number of business users that need restricted permissions in a subfolder in the inventory. I have added a new role to vCenter with the permissions they need, and applied that role for that user to the specific subfolder.

Now: those users are not supposed to see any other folders in the inventory tree above of on the same level in the tree, just their own folder.

Before I upgraded to vCenter 6 (appliance), I had it working fine. With vCenter 6, this model broke: the users only see the 'empty inventory' text in the 'VMs and Templates' view.

 

Weird thing is: when that same user browses to 'vCenter Inventory Lists', clicks 'Virtual Machines', he sees his own (and only his own) VM and can interact with it in accordance with his permissions.

So it seems there's a new permission needed in vCenter to see only that part of the Inventory tree applicable to a specific user, but I (1) haven't found that permission yet and (2) wouldn't even know to which object in the tree to assign the permission

 

Any thoughts?

VMware Tools Status "Out of Date"

$
0
0

Dear Team,

 

In vcenter server inventory list, VM Tools status is displayed as "Out of date", just want to know what does it mean (vmware tools functions will work or not),

 

regards

Mr VMware

Cant add a .vmx file to inventory!

$
0
0

Hello,

 

Can someone Help me?

 

I uploaded a VM from an External HDD to my NFS datastore.

 

After it completed uploading, I went to browse the contents of the VM folder and i have the following files.

 

RHEL5IMGDB-0.vmdk

RHEL5IMGDB.vmx

RHEL5IMGDB.vmdk

RHEL5IMGDB-1.vmdk

RHEL5IMGDB-2.vmdk

RHEL5IMGDB-3.vmdk

 

I noticed the .vmx file looks like a text docuement icon. Ive never see it like that before.

Anyways when i right click the .vmx file the Add to inventory option is grayed out!

 

please help

 

thanks

Event ID 7024 - The VMware VirtualCenter Server service terminated with service-specific error 2 (0x2) upon starting up VC Server

$
0
0

I am currently running VC 2.5 virtualized. WIndows 2003 SP2 with SQL Express 2005. Everytime I reboot the server I received Event ID 7024 - The VMware VirtualCenter Server service terminated with service-specific error 2 (0x2). Eventually I am able to manually start the service and everything is fine. Has anyone else experienced this issue?

 

Thanks

Vcenter 6 Services failing to start on boot

$
0
0

Physical Server 2012R2 VCenter 6 server was cleanly shutdown for some hardware maintenance and booted up fine afterwards.

 

During shutdown this event was logged in the Application log:

 

The description for Event ID 1000 from source VMware VirtualCenter Server cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

Initiating VMware VirtualCenter shutdown

the message resource is present but the message is not found in the string/message table

 

After boot most of the Vcenter services had not started, nor could they be manually started.  I traced it back to the first failure logged in the System log:

 

The VMware HTTP Reverse Proxy service terminated with the following service-specific error:

Incorrect function.

 

I cannot start this service manually it fails with the same error.  All other services fail with a dependancy error.

 

This is extremely frustrating because we upgraded this server from Server 2008R2 for the same reason, Services would fail to start.  When it had Server 2008R2 its was running 5.1, we tried upgrading to 6 but it failed and we could not resolve it, so we completely removed Vcenter and tried a fresh install, this failed until I managed to "trick" the installer by altering the VMware vCenter workflow manager service to run as local system otherwise it always failed.  So we got it installed and running, then after the first reboot just failed to start the services!!!  So we fresh installed Windows 2012R2, installed VCenter without any AV or other "cruft" to ensure it would work, which it did.  Now the darn thing just fails like this again!

 

DNS is functiong fine and the server has survived a number of restarts yesterday, No idea why it would just fail now!

 

James

vCenter Server 6.5 503 Service Unavailable and don't see vSphere Web client service

$
0
0

All -

I installed vCenter Server 6.5 successfully a few months ago and it was working fine. Now I get this error in a web browser:

503 Service Unavailable (Failed to connect to endpoint: [class Vmacore::Http::NamedPipeServiceSpec:0x000000a052fbb510] _serverNamespace = / action = Allow _pipeName =\\.\pipe\vmware-vpxd-webserver-pipe) .

 

I have seen many people referring to the vSphere Web Client Service but just do not see that as an installed service. Event logs show nothing. All vmware

services are running. Also an ODBC connection to the SQL server tests okay.

 

What happened???

 

...AR

ESX 3.5 U2 - Health status warning

$
0
0

We just upgraded to 3.5U2 and VC2.5U2 and now we're getting server health warnings on all servers ("ProcHot for System Board 2 - Normal") for some reason. All machines are HP Proliant DL385G2 with the latest HP tools installed (v8.1). The HP tools don't show any hardware degradation and everything is running just fine, yet VC keeps complaining. Anyone else having the same issue?


Maximum latency between vCenter and ESXi hosts

$
0
0

Hi,

 

We want to install a single vCenter server (6.0 U2a) that will manage ESXi hosts from multiple datacenters around the world.

We will Create a datacenter and cluster for each "physical" datacenter.

 

My question is, what is the maximum latency allowed between the vCenter and ESXi hosts?

vmotion times out at 20%

$
0
0

Situation is this...

 

vSphere 6

 

I have about a dozen VMs that fail at 20% when trying to vmotion. VMware Tools is up to date. I have three hosts in a cluster and the problem is not specific to any one host. I have cloned these VMs and the issues persists on the clones suggesting the problem is with a VM config or possibly within the guest OS. Most of the VMs on these host are not experiencing any issues during vmotion. The physical network is good.

vCenter 6.7 / VMCA as a Subordinate CA / Incomplete certification path on ESXi 6.7 hosts; but ESXi 6.5 hosts work OK.

$
0
0

VCSA with Embedded PSC v6.7 (Build 9451876)

VMCA configured as Subordinate CA to a Windows 2012 R2 Enterprise Root CA. (SHA256 Hash / 2048 bit Key)

VMCA replaces the SSL certificate on a ESXi v6.5 (Build 5969303) host and the 'certification path' is complete. All works as expected, no browser errors.

VMCA replaces the SSL certificate on a ESXi v6.7 (Build 8169922) host and the 'certification path' is incomplete. Still get the standard browser errors. The root CA and VMCA certificates are NOT in the path, only the ESXi host certificate!

 

ESXi v6.5 Host - Complete Certification Path.
Good SSL Certificate- ESXi 6.5 Host.png

A dump of the SSL connection using the TestSSLServer utility (GitHub - pornin/TestSSLServer ) shown below.

 

Connection: mc-esxi-v-204.momusconsulting.com:443

SNI: mc-esxi-v-204.momusconsulting.com

  TLSv1.0:

     server selection: uses client preferences

     3-- (key:  RSA) RSA_WITH_AES_128_CBC_SHA

     3-- (key: RSA)  RSA_WITH_AES_256_CBC_SHA

     3f- (key: RSA) ECDHE_RSA_WITH_AES_128_CBC_SHA

     3f- (key: RSA) ECDHE_RSA_WITH_AES_256_CBC_SHA

  TLSv1.1: idem

  TLSv1.2:

     server selection: enforce server preferences

     3f- (key: RSA) ECDHE_RSA_WITH_AES_256_GCM_SHA384

     3f- (key: RSA) ECDHE_RSA_WITH_AES_128_GCM_SHA256

     3-- (key: RSA)  RSA_WITH_AES_256_GCM_SHA384

     3-- (key: RSA)  RSA_WITH_AES_128_GCM_SHA256

     3f- (key: RSA) ECDHE_RSA_WITH_AES_256_CBC_SHA384

     3f- (key: RSA) ECDHE_RSA_WITH_AES_256_CBC_SHA

     3f- (key: RSA) ECDHE_RSA_WITH_AES_128_CBC_SHA256

     3f- (key: RSA) ECDHE_RSA_WITH_AES_128_CBC_SHA

     3-- (key: RSA)  RSA_WITH_AES_256_CBC_SHA256

     3-- (key: RSA)  RSA_WITH_AES_256_CBC_SHA

     3-- (key: RSA)  RSA_WITH_AES_128_CBC_SHA256

     3-- (key: RSA)  RSA_WITH_AES_128_CBC_SHA

=========================================

+++++ SSLv3/TLS: 1 certificate chain(s)

+++ chain: length=3

names match:        yes

includes root:      yes

signature hash(es): SHA-256

+ certificate order: 0

thumprint:  A18830247B90395EE003D706CE3AEB3CDA96BC6D

serial:     E032A1675443F48D

subject: EMAILADDRESS=admin@momusconsulting.com,CN=mc-esxi-v-204.momusconsulting.com,OU=Momus Labs,O=Momus Consulting,L=Basingstoke,ST=Basingstoke,C=GB

issuer:     CN=VMCA-mc-vcsa-v-204,OU=Momus Labs,O=Momus Consulting,L=Basingstoke,ST=Hampshire,C=GB

valid from: 2018-10-06 14:22:12 UTC

valid to:   2020-10-05 12:06:47 UTC

key type:   RSA

key size:   2048

sign hash:  SHA-256

server names:

   mc-esxi-v-204.momusconsulting.com

+ certificate order: 1

thumprint:  6313EF9061D1ED748298F0DB7D693F6CC2099046

serial:     5D0000000BA3C47E6295F579B400000000000B

subject:    CN=VMCA-mc-vcsa-v-204,OU=Momus Labs,O=Momus Consulting,L=Basingstoke,ST=Hampshire,C=GB

issuer:     CN=Momus Root CA on mc-addc-v-101,DC=momusconsulting,DC=com

valid from: 2018-10-06 12:06:47 UTC

valid to:   2020-10-05 12:06:47 UTC

key type:   RSA

key size:   2048

sign hash:  SHA-256

+ certificate order: 2

thumprint:  A3BD98D6B6C712A510E11669A84D0571C2D2F0F1

serial:     65F1DEEF09DD1A9A436075662D731F0F

subject:    CN=Momus Root CA on mc-addc-v-101,DC=momusconsulting,DC=com

issuer:     CN=Momus Root CA on mc-addc-v-101,DC=momusconsulting,DC=com

valid from: 2018-10-05 15:11:29 UTC

valid to:   2028-10-05 15:21:28 UTC

key type:   RSA

key size:   2048

sign hash:  SHA-256

(self-issued)

=========================================

Server compression support: no

Server sends a random system time.

Secure renegotiation support: yes

Encrypt-then-MAC support (RFC 7366): no

SSLv2 ClientHello format (for SSLv3+): yes

Minimum EC size (no extension):   256

Minimum EC size (with extension): 256

ECDH parameter reuse:  no

Supported curves (size and name) ('*' = selected by server):

  * 256 secp256r1 (P-256)

=========================================

  WARN[CS006]: Server supports cipher suites with no forward secrecy.

 

 

ESXi v6.7 Host - Incomplete Certification Path.
Bad SSL Certificate - ESXi 6.7 Host.png

Again, a dump of the SSL connection is shown below.

 

Connection: mc-esxi-v-205.momusconsulting.com:443

SNI: mc-esxi-v-205.momusconsulting.com

  TLSv1.2:

     server selection: enforce server preferences

     3f- (key: RSA) ECDHE_RSA_WITH_AES_256_GCM_SHA384

     3f- (key: RSA) ECDHE_RSA_WITH_AES_128_GCM_SHA256

     3-- (key: RSA)  RSA_WITH_AES_256_GCM_SHA384

     3-- (key: RSA)  RSA_WITH_AES_128_GCM_SHA256

     3f- (key: RSA) ECDHE_RSA_WITH_AES_256_CBC_SHA384

     3f- (key: RSA) ECDHE_RSA_WITH_AES_256_CBC_SHA

     3f- (key: RSA) ECDHE_RSA_WITH_AES_128_CBC_SHA256

     3f- (key: RSA)  ECDHE_RSA_WITH_AES_128_CBC_SHA

     3-- (key: RSA)  RSA_WITH_AES_256_CBC_SHA256

     3-- (key: RSA)  RSA_WITH_AES_256_CBC_SHA

     3-- (key: RSA)  RSA_WITH_AES_128_CBC_SHA256

     3-- (key: RSA)  RSA_WITH_AES_128_CBC_SHA

=========================================

+++++ SSLv3/TLS: 1 certificate chain(s)

+++ chain: length=1

names match:        yes

includes root:      no

signature hash(es): SHA-256

+ certificate order: 0

thumprint:  9CB7BEC3BD58491A36069B182093F22BE9813042

serial:     FD682ECC9662D00C

subject: EMAILADDRESS=admin@momusconsulting.com,CN=mc-esxi-v-205.momusconsulting.com,OU=Momus Labs,O=Momus Consulting,L=Basingstoke,ST=Basingstoke,C=GB

issuer:     CN=VMCA-mc-vcsa-v-204,OU=Momus Labs,O=Momus Consulting,L=Basingstoke,ST=Hampshire,C=GB

valid from: 2018-10-06 14:44:04 UTC

valid to:   2020-10-05 12:06:47 UTC

key type:   RSA

key size:   2048

sign hash:  SHA-256

server names:

   mc-esxi-v-205.momusconsulting.com

=========================================

Server compression support: no

Server sends a random system time.

Secure renegotiation support: yes

Encrypt-then-MAC support (RFC 7366): no

SSLv2 ClientHello format (for SSLv3+): yes

Minimum EC size (no extension):   256

Minimum EC size (with extension): 256

ECDH parameter reuse:  no

Supported curves (size and name) ('*' = selected by server):

  * 256 secp256r1 (P-256)

=========================================

  WARN[CS006]: Server supports cipher suites with no forward secrecy.

 

Any ideas?

 

Thanks

M

VCSA 6.7 ISO cannot boot. I have tried it on multiple system and it just doesn't boot even though all other .iso's do.

$
0
0

Does anyone have a solution to the non-boot issue of the .iso?

Export VM List incomplete

$
0
0

 

Hi

 

 

 

 

 

When I try to export a list of all our vm's to excel - we only get the first hundred or so - in tests anywhere from 85 to 120 -- I would like to see all 800..... Is this a known issue? Or is it just me?

 

 

 

 

 

Any ideas gratefully recieved

 

 

 

 

 

TIA

 

 

The VMware vCenter Inventory Service service terminated with service-specific error Incorrect function..

$
0
0

Tried connecting into the web interface and it states it cannot connect to the inventory server.  I see the service is stopped and when I try to start it, it fails.  Error message in event log: The VMware vCenter Inventory Service service terminated with service-specific error Incorrect function..

 

I have rebooted the server and had the same issue.  I have a backup of the SQL/server but I have never ran the backup.bat as referred to in here: VMware KB: vCenter Inventory Service fails to start and cannot back up the Inventory Service database

 

I cannot seem to find a great article on what will be impacted by resetting the service fresh?

Upgrade from 5.5 latest to 6.0U2m using migration assistant fails in pre upgrade checks

$
0
0

Hello

 

I have two vCenter Servers, Production and Recovery Site, both Windows boxes, apart of same SSO domain, in linked mode and both at the latest build of 5.5. I am trying to upgrade my recovery site first to 6.0U2 using the migration assistant to create an appliance. The upgrade is failing in the pre-upgrade checker with the below errors in the migration-assistant.log:

 

2016-11-02 13:16:27.406Z| migration-assistant-4191364| E: LaunchUpgradeRunnerCommon: Failed to run pre-upgrade phase: "C:\mig58D2.tmp\PFiles\VMware\CIS\python\python.exe" "C:\mig58D2.tmp\PFiles\VMware\CIS\cis_upgrade_runner\UpgradeRunner.py" --mode=requirements --configFile="C:\Users\MS_VCE~1\AppData\Local\Temp\UpgradeRunnerInput.json" --logDir="C:\Users\MS_VCE~1\AppData\Local\Temp\vcsMigration"  --locale=en --outputFile="C:\Users\MS_VCE~1\AppData\Local\Temp\UpgradeRunnerPreupgradeOutput.json"

2016-11-02 13:16:27.406Z| migration-assistant-4191364| I: RemoveDirectoryIfEmpty: Successfully deleted empty directory C:\mig58D2.tmp.

2016-11-02 13:16:27.407Z| migration-assistant-4191364| I: LaunchUpgradeRunnerCommon: Successfully deleted file: C:\Users\MS_VCE~1\AppData\Local\Temp\UpgradeRunnerInput.json

2016-11-02 13:16:27.407Z| migration-assistant-4191364| I: Leaving function: LaunchUpgradeRunnerCommon

2016-11-02 13:16:27.407Z| migration-assistant-4191364| I: ParseExportEstimatesFromPreUpgradeOutput: Component 'upgrade_framework': Export disk req [0 MB], Export time estimate [0 mins] and Import time estimate [0 mins].

 

 

Error: Failed to discover a system name that is compatible with both your VMware vCenter Server certificate and your VMware Single Sign-On certificate that can be used to migrate to a VMware vCenter Server Appliance with an embedded Platform Services Controller.

2016-11-02 13:16:27.439Z| migration-assistant-4191364| I: ParsePreUpgradeOutput: Resolution: Regenerate your VMware vCenter Server SSL certificate and your VMware Single Sign-On SSL certificate to have a common system name that can be used to migrate your system to VMware vCenter Server Appliance with Platform Services Controller. DHCP IP Address cannot be used as a system name to migrate to a VMware vCenter Server Appliance.

 

So I have done my due diligence and replaced the certs on the vCenter (Embedded deployment with external/remote SQL DB) but I am still getting the same error. I can confirm the certificates have been regenerated and applied successfully. Also did a complete uninstall and re-install to no avail.

 

Thoughts?


can't delete content library

$
0
0

Get following when trying to delete a content library that's no longer being used.

 

A general system error occurred:

Cannot delete content from library d85475ca-a19c-42ad-968c-4bfe6b09024a, reason: (vim.fault.CannotDeleteFile) {

   faultCause = null,

   faultMessage = null,

   file = [LUN1] /contentlib-d85475ca-a19c-42ad-968c-4bfe6b09024a

}.

vCenter Server Appliance checking for update hangs

$
0
0

Hey all,

 

I just wanted to update a vCSA appliance. Unfortunately it hangs in the status "Checking for aivailable updates..." as has no internet access.

 

I changed the settings to CD-ROM  updates, mounted the update-repo iso and restarted the appliance, but no luck, it's still in the checking for updates mode.

 

Anyone has an idea how to stop this process? As the check and install update buttons are disabled during the update search.

 

Thanks

 

Tim

Health of Memory changed from red to green. Sensor name: Memory Device 1B 12: Uncorrectable ECC, Current state: Deassert

$
0
0

I have an issue where I am getting constant notification of events as below:

Health of Memory changed from red to green.  Sensor name: Memory Device 1B 12: Uncorrectable ECC, Current state: Deassert (raw value).

 

I have switched memory, but socket number stayed the same, so have been in contact with server manufacturer, who have replaced the memory - same event, and replaced the motherboard with a faulty motherboard, so they put the original back in.

However looking at the IDRAC and logs etc, there are no errors showing on the hardware device.

 

I have tried to reset the sensor in the webclient, but this has not fixed the event.

 

Help please?

 

Thank you

vCenter Server Appliance High Availability - passive DOWN

$
0
0

Hi

I'm currently testing VCSA HA in a lab and I am seeing the following situation.

When I initiate a manual failover everything works fine and the Passive vCenter server becomes the active server and the old active server becomes the passive server. I can also fail back all fine.

However, when I simulate an uncontrolled failure of the active vCenter instance (eg power off the vm) the failover works fine, but the failed vCenter instance fails to rejoin the cluster when powered back up. This has happened every time I have done this.

Is it common for the VCHA cluster to need to be destroyed and recreated after such a failure as I see this is quite a common way to remediate issues?

 

I'd like to troubleshoot this scenario rather than just to rebuild the cluster each time, but I'm not sure where to look.

 

If I log into the vCenter server that is failing to rejoin the cluster (the passive node) I can run the Service-Control --status --all command and I notice that not many service are running. Is anyone able to tell me which services should be running on the passive node? In particular should vmware-vcha be running? as when I try to start this it returns the response that the service type is not set to automatic and skips it.

From the VCHA monitoring screen, it shoes me the Active and Witness nodes as 'UP' and the passive as 'DOWN' and suggests I check the passive node is online and accessible over the heartbeat network and I can ping the passive node from the active node all ok using the heartbeat ip address. It then says to check the replication is ok - how do I do this? I can see the vmware-postgres service is running (I had to start this manually) but what more can I do to check the replication is in synch.

 

Any thoughts would be very much appreciated. I'm most keen to understand what services should be running on the passive as I feel this is going to be the issue.

 

kind regards

VCSA 6.0 appliance uses over 10 disks?

$
0
0

This is the first time I've used a VCSA appliance, and I just find it strange that I have 11 virtual disks assigned to this appliance. Is this a normal occurrence? Here's what I see when I got to Manage Hard Disks in the VM settings.

 

Hard disk 1 - 12.00 GB

Hard disk 2 - 1.27 GB

Hard disk 3 - 25.00 GB

Hard disk 4 - 25.00 GB

Hard disk 5 - 10.00 GB

Hard disk 6 - 10.00 GB

Hard disk 7 - 5.00GB

Hard disk 8 - 10.00 GB

Hard disk 9 - 1.00 GB

Hard disk 10 - 10.00GB

Hard disk 11 - 5.00 GB

Viewing all 18256 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>