To cut this long story short – if you have vCenter Server 5.5 update 2 you will have issues if you patch your hosts to the latest available patch level for ESXi. VMware disabled SSLv3 (POODLE and all that..) in update 3b for ESXi meaning if your vCenter Server is running update 2 you won’t be able to connect until the vCenter is patched to update 3b as well. Running ESXi hosts on update 3b and having vCenter Server on update 2 is normally a perfectly valid configuration but because SSLv3 got disabled as part of this process the connectivity is broken.
Example error messages in vpxd log file when patched host in being added to vCenter Server include:
2016-02-26T15:47:12.729Z [07448 error 'HttpConnectionPool-000001'] [ConnectComplete] Connect failed to <cs p:0000000017ddfdf0, TCP:spn-esx-04.alex.com:443>; cnx: (null), error: class Vmacore::Ssl::SSLException(SSL Exception: error:140000DB:SSL routines:SSL routines:short read)
2016-02-26T15:47:12.729Z [07400 error 'httphttpUtil' opID=30D532A7-00000053-90] [HttpUtil::ExecuteRequest] Error in sending request - SSL Exception: error:140000DB:SSL routines:SSL routines:short read
2016-02-26T15:47:12.730Z [07400 error 'vpxdvpxdHostAccess' opID=30D532A7-00000053-90] [VpxdHostAccess::Connect] Failed to discover version: vim.fault.HttpFault
Pretty silly thing to do really – I have left the default site name when installing SRM 5.8 so it has FQDN of my vCenter box instead of a proper name:
From vSphere Web Client point of view having FQDN in there is not ideal as well as introducing confusion which site is which (live vs. recovery):
To get the site name changed we need to edit vmware-dr.xml which lives (by default) in the following location:
I thought that it would be a good idea to finally install vCenter Multi-Hypervisor Manager to manage my 3rd party hosts i.e. Hyper-V – at least that was the initial idea anyway since I don’t have enough time to mess around with SCVMM for now. Multi-Hypervisor Manager server installation was pretty straight forward and so was the client. With plugin enabled in vSphere C# client I was able to see the relevant icon in my client:
but the next screen was not so pretty:
Basically ‘NoPermission’ but I can access vCenter server just fine since I have all the relevant rights! It turns out Multi-Hypervisor Manager assigns the default ‘Admin’ role only to the user specified during the installation of MHM and no one else. During the installation of MHM you have to specify the account that will be made administrator of the third-party hosts inventory:
Today I was testing some new Windows Server 2012 templates and noticed something rather odd. Basically my costomisations would cause the deployments from template to fail for no real reason. Error message that came up was:
A specified parameter was not correct. spec.identity.userData.computerName
Lets dive straight into this error message which happens to be affecting two of my VMs:
As you can see I’m unable to get the console window working! Exact message displayed across the top sheds some light into why this is happening – “Unable to connect to the MKS: Console access to the virtual machine cannot be granted since the connection limit of 0 has been reached.”
I know of at least three different ways to make this error message go away and get to the console window again.