Wissensdatenbank
Buehl, Kevin
22 Juli 2018
25 Juli 2018
2.614

Wissensdatenbank

VCSA Upgrade - A problem occurred while - Starting VMware vCenter Server

Inhaltsverzeichnis

Situation

Failed to start vpxdFailed to start vpxd

Failed to start vpxd


Ich hatte das Problem das beim dem Upgrade von VMware vCenter Server Appliance 6.5 auf 6.7 die folgende Meldung erhalten habe:
A problem occurred while - Starting VMware vCenter Server...


Analyse


Sucht man nach dem Fehler findet man im Internet eine Lösung vom VMware Support, welche besagt das man folgenden Befehl in der Shell ausführen soll:
echo "::1 localhost.localdom localhost" >> /etc/hosts
Leider konnte dies mein Problem nicht lösen und somit habe ich weiter das System analysiert und folgendes gefunden:
tail -f /var/log/vmware/vpxd/vpxd.log
2018-07-22T17:45:58.194Z info vpxd[09633] [Originator@6876 sub=VpxdAuthClient] fallback to loginByCertificate
2018-07-22T17:45:58.206Z error vpxd[09633] [Originator@6876 sub=ServerAccess] Remote login failed: N7Vmacore3Ssl18SSLVerifyExceptionE(SSL Exception: Verification parameters:
--> PeerThumbprint: 8D:4B:42:D2:4B:42:EF:4B:42:51:4B:42:AF:4B:42:15:DB:C8:8E:43
--> ExpectedThumbprint:
--> ExpectedPeerName: localhost
--> The remote host certificate has these problems:
-->
--> * Host name does not match the subject name(s) in certificate.)
--> [context]zKq7AVzby42AA==[/context]
2018-07-22T17:45:58.208Z error vpxd[09633] [Originator@6876 sub=AuthzStorageProvider] [AuthzStorageProvider::CreateAuthzMgr] Failed to connect to IS: <N5Vmomi5Fault17HostCommunication9ExceptionE(Fault cause: vmodl.fault.HostCommunication
--> )
--> [context]zKq7AV1ADy42AAE19FA=[/context]>
2018-07-22T17:45:58.212Z error vpxd[09633] [Originator@6876 sub=Default] Failed to instantiate AuthzStorageProvider: N5Vmomi5Fault17HostCommunication9ExceptionE(Fault cause: vmodl.fault.HostCommunication
--> )
--> [context]zKq7AVECAAAAGliYy5zby42AAE19FA=[/context]
2018-07-22T17:45:58.216Z error vpxd[09633] [Originator@6876 sub=Authorize] Failed to initialize authorizeManager
2018-07-22T17:45:58.216Z warning vpxd[09633] [Originator@6876 sub=VpxProfiler] Start [VpxdAuthorize::Start()] took 187345 ms
2018-07-22T17:45:58.216Z warning vpxd[09633] [Originator@6876 sub=VpxProfiler] ServerApp::Start [TotalTime] took 187490 ms
2018-07-22T17:45:58.216Z error vpxd[09633] [Originator@6876 sub=Default] Failed to start VMware VirtualCenter. Shutting down
2018-07-22T17:45:58.216Z info vpxd[09633] [Originator@6876 sub=SupportMgr] Wrote uptime information
2018-07-22T17:46:48.863Z info vpxd[09633] [Originator@6876 sub=Default] Forcing shutdown of VMware VirtualCenter now

Zudem sollten Sie unbedingt einen RDNS Eintrag erstellen und prüfen ob dieser korrekt ist!

Lösung


/usr/lib/vmware-vmca/bin/certificate-manager
                 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
| |
| *** Welcome to the vSphere 6.7 Certificate Manager *** |
| |
| -- Select Operation -- |
| |
| 1. Replace Machine SSL certificate with Custom Certificate |
| |
| 2. Replace VMCA Root certificate with Custom Signing |
| Certificate and replace all Certificates |
| |
| 3. Replace Machine SSL certificate with VMCA Certificate |
| |
| 4. Regenerate a new VMCA Root Certificate and |
| replace all certificates |
| |
| 5. Replace Solution user certificates with |
| Custom Certificate |
| |
| 6. Replace Solution user certificates with VMCA certificates |
| |
| 7. Revert last performed operation by re-publishing old |
| certificates |
| |
| 8. Reset all Certificates |
|_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|
Note : Use Ctrl-D to exit.
Option[1 to 8]: 4
Do you wish to generate all certificates using configuration file : Option[Y/N] ? : Y

Please provide valid SSO and VC privileged user credential to perform certificate operations.
Enter username [Administrator@vsphere.local]:
Enter password:

Incorrect Password! Try Again! (2 attempt/s left)
Password:

Incorrect Password! Try Again! (1 attempt/s left)
Password:

Please configure certool.cfg with proper values before proceeding to next step.

Press Enter key to skip optional parameters or use Default value.

Enter proper value for 'Country' [Default value : US] :

Enter proper value for 'Name' [Default value : CA] :

Enter proper value for 'Organization' [Default value : VMware] :

Enter proper value for 'OrgUnit' [Default value : VMware Engineering] :

Enter proper value for 'State' [Default value : California] :

Enter proper value for 'Locality' [Default value : Palo Alto] :

Enter proper value for 'IPAddress' (Provide comma separated values for multiple IP addresses) [optional] :

Enter proper value for 'Email' [Default value : email@acme.com] :

Enter proper value for 'Hostname' (Provide comma separated values for multiple Hostname entries) [Enter valid Fully Qualified Domain Name(FQDN), For Example : example.domain.com] :

Hostname should not be empty, please enter valid FQDN.

Enter proper value for 'Hostname' (Provide comma separated values for multiple Hostname entries) [Enter valid Fully Qualified Domain Name(FQDN), For Example : example.domain.com] : vcenter.4b42.net

Enter proper value for VMCA 'Name' :

VMCA Name should not be empty, please enter valid VMCA Name.

Enter proper value for VMCA 'Name' :vcenter.4b42.net

You are going to regenerate Root Certificate and all other certificates using VMCA
Continue operation : Option[Y/N] ? : Y
Get site nameCompleted [Replacing Machine SSL Cert...]
4b42
Lookup all services
Get service 4b42:efb21edf-df06-4963-9898-6d3accdcc871
Update service 4b42:efb21edf-df06-4963-9898-6d3accdcc871; spec: /tmp/svcspec_i0chg46r
Get service 4b42:e142788f-e8e5-478b-9aae-d869b145780a
Update service 4b42:e142788f-e8e5-478b-9aae-d869b145780a; spec: /tmp/svcspec_wka06ge1
Get service 4b42:facac1c5-7cd3-46c2-a2d0-3fdc13b824a7
Update service 4b42:facac1c5-7cd3-46c2-a2d0-3fdc13b824a7; spec: /tmp/svcspec_zdrh5nm0
Get service 3b8e38aa-5710-47dd-89b7-ac9859d97f7a
Update service 3b8e38aa-5710-47dd-89b7-ac9859d97f7a; spec: /tmp/svcspec_rdq6scmi
Get service b00e243a-7750-4007-84b5-8ea93edfb9a4
Update service b00e243a-7750-4007-84b5-8ea93edfb9a4; spec: /tmp/svcspec_so9nm9nf
Get service e2f1afec-b157-412c-82b8-1a617aa56527
Update service e2f1afec-b157-412c-82b8-1a617aa56527; spec: /tmp/svcspec_oqckzvrj
Get service ee2dc01f-abf0-4916-936d-5bd2a0facf48
Update service ee2dc01f-abf0-4916-936d-5bd2a0facf48; spec: /tmp/svcspec_owjgvu0l
Get service 39a3cd0b-eed7-4045-a37b-9de266c6e308
Update service 39a3cd0b-eed7-4045-a37b-9de266c6e308; spec: /tmp/svcspec_9hcf15kk
Get service 8a99a2d6-e5d4-4baf-9b4f-2f5ea98bdb2f
Update service 8a99a2d6-e5d4-4baf-9b4f-2f5ea98bdb2f; spec: /tmp/svcspec_flc916m2
Get service b95fb42c-cbbb-4c49-8712-2f7cceec97b8
Update service b95fb42c-cbbb-4c49-8712-2f7cceec97b8; spec: /tmp/svcspec_h_9z769l
Get service df343b51-ff6c-4844-949b-5fbefc88be05
Update service df343b51-ff6c-4844-949b-5fbefc88be05; spec: /tmp/svcspec_xn50675z
Get service c7eef50a-035e-45dd-8a23-231ee583fa27
Update service c7eef50a-035e-45dd-8a23-231ee583fa27; spec: /tmp/svcspec_w44bynw6
Get service 87982029-b40a-4bca-92a1-5ea8941186ae
Update service 87982029-b40a-4bca-92a1-5ea8941186ae; spec: /tmp/svcspec_c73u5vxk
Get service 97f77b52-dbc4-4416-a32e-f5e8c2cc72a8
Update service 97f77b52-dbc4-4416-a32e-f5e8c2cc72a8; spec: /tmp/svcspec_g9_f4t1z
Get service 7d7e9386-104d-40da-8e32-1d9ea4721d88
Update service 7d7e9386-104d-40da-8e32-1d9ea4721d88; spec: /tmp/svcspec_ztg2hi31
Get service 7d8921b2-6415-429b-9dc4-b8b265819945
Update service 7d8921b2-6415-429b-9dc4-b8b265819945; spec: /tmp/svcspec_h1l_663q
Get service 68796484-48a3-4368-a20d-2f77a85d5a8b_kv
Update service 68796484-48a3-4368-a20d-2f77a85d5a8b_kv; spec: /tmp/svcspec_nqphfto9
Get service 68796484-48a3-4368-a20d-2f77a85d5a8b
Update service 68796484-48a3-4368-a20d-2f77a85d5a8b; spec: /tmp/svcspec_t6ytwjmt
Get service b54a3cd0-f817-4b0c-9a3a-1ae21d11a85c
Update service b54a3cd0-f817-4b0c-9a3a-1ae21d11a85c; spec: /tmp/svcspec_ah7jt3gs
Get service 13d1f302-0f42-4c0c-a81f-92d66401509b
Update service 13d1f302-0f42-4c0c-a81f-92d66401509b; spec: /tmp/svcspec_1v_uz_7l
Get service 60c8e5a1-7d95-49aa-8fd2-2a34ca13a0d1
Update service 60c8e5a1-7d95-49aa-8fd2-2a34ca13a0d1; spec: /tmp/svcspec_ofzcfser
Get service 74625858-c6c5-4e83-a5c5-efc6ae7841c9
Update service 74625858-c6c5-4e83-a5c5-efc6ae7841c9; spec: /tmp/svcspec_w5ph1nze
Get service ae116e8e-5e99-4921-9ca8-c30cf909b09f
Update service ae116e8e-5e99-4921-9ca8-c30cf909b09f; spec: /tmp/svcspec_l5op9cl7
Get service 1ec956fd-ea27-47c1-8fc0-35f076b322d0
Update service 1ec956fd-ea27-47c1-8fc0-35f076b322d0; spec: /tmp/svcspec_9hl82szp
Get service 4d290310-2fe5-4ee7-b169-afcf454d3520
Update service 4d290310-2fe5-4ee7-b169-afcf454d3520; spec: /tmp/svcspec_h67lgkdz
Get service 0a3eebab-88d0-4e01-910c-8e4c13cfd17b
Update service 0a3eebab-88d0-4e01-910c-8e4c13cfd17b; spec: /tmp/svcspec_9a0ifuaz
Get service 46603bb2-5fe5-4de1-910b-a01b89643cc0
Update service 46603bb2-5fe5-4de1-910b-a01b89643cc0; spec: /tmp/svcspec_f5vmnd3b
Get service 68796484-48a3-4368-a20d-2f77a85d5a8b_authz
Update service 68796484-48a3-4368-a20d-2f77a85d5a8b_authz; spec: /tmp/svcspec_i59e98ei
Get service 7276cfb5-28a1-4d80-8a63-f0593efdbcd6
Update service 7276cfb5-28a1-4d80-8a63-f0593efdbcd6; spec: /tmp/svcspec_kgkcqjgd
Get service 795d75ea-11a5-4560-b9ec-3d3e599ffbc9
Update service 795d75ea-11a5-4560-b9ec-3d3e599ffbc9; spec: /tmp/svcspec_gu2zcgjl
Get service psc_vcenter.4b42.net
Update service psc_vcenter.4b42.net; spec: /tmp/svcspec_d6s0savy
Updated 31 service(s)
Status : 60% Completed [Replace vpxd-extension Cert...]
2018-07-22T18:01:54.123Z Updating certificate for "com.vmware.vim.eam" extension


2018-07-22T18:01:54.469Z Updating certificate for "com.vmware.rbd" extension


2018-07-22T18:01:54.807Z Updating certificate for "com.vmware.imagebuilder" extension

Status : 100% Completed [All tasks completed successfully]