• VXLAN vib agent installations fails immediately with the error “Agent VIB module not installed”

      I ran into an issue the other day in a new NSX lab deployment I was building out. Whenever I tried to prepare the ESXi hosts for VXLAN the install would immediately fail with no real good error messages; tasks and events displayed “Cannot complete the operation. See the event log for details.” Task: XXX eam.agent.enable.label not found XXX.”After digging a little bit deeper, I was able to find the following error message in my NSX Manager log.     2015-06-28T20:02:58.323-06:00 | ERROR | agent-4 | AuditedJob.java | 75 | JOB FAILED: [#2025773242] EnableDisableAgentJob(AgentImpl(ID:’Agent:7cd8e40b-7892-4755-977f-b847b4d35eae:bb36baa5-dd5d-46cc-b80c-eb38df42ff3c’)), com.vmware.eam.EamException: VibInstallationFailed 2015-06-28T20:02:58.324-06:00 | DEBUG […]

    Read more »
  • Unable to deploy NSX VIBs after updating certificates in vSphere 6.0

    I ran into an issue the other day while helping a customer install the NSX agents on his ESXi hosts. Whenver we tried to deploy the agents to the host, we would get a generic error in the vSphere Web Client. To troubleshoot the issue, we first navigated to Home -> Administration -> vCenter Server Extensions and double clicked vSphere ESX Agent Manager.     By clicking the Manage tab we saw no ESX Agencies / an error similar to:   “Error while creating eam agency for deployment”   In the NSX Manager log you see the following:   show […]

    Read more »
  • Upgrading from embedded SSO 5.5 to External SSO (PSC) 6.0

      UPDATE: As of vCenter 6.0 Update 1, there are more options available to reconfigure an existing embedded topology to an external setup without the need to reinstall. More information can be found in this post   There has been a lot of discussion surrounding an upgrade from vSphere 5.1 or 5.5 to vSphere 6.0 when you currently have Single Sign-On (SSO) embedded and want to move to an external deployment. I highly recommend, in anyone’s environment that you future proof by setting up vSphere 6 in an external deployment. There are multiple reasons for this, but a few of […]

    Read more »
  • Using vecs-cli to manage VMware Certificate Endpoint Store (VECS) instances

    VMware introduced a brand new certificate architecture to ease the process of implementing certificates in vSphere 6.0. I have outlined the new architecture changes and the process of Replacing Certificates in vSphere 6.0 already, but I wanted to go through some of the VECS-CLI commands for anyone that was interested in diving deeper into the certificate architecture.   The VMware Certificate Endpoint Store (VECS) is is a repository for SSL certs and private keys. VECS is a requirement for vCenter Server, so you must use it, unlike the VMware Certificate Authority (VMCA), which is optional. Regardless of your topology for […]

    Read more »
  • VMware vCenter Server 6.0 Availability Guide

    The VMware vCenter Server 6.0 Availability Guide has recently been released by Mohan Potheri, Blair Fritz, and Puneet Gupta. I highly recommend reading this technical white paper as it gives in depth insight on both the vCenter Server 6.0 and the Platform Services Controller availability solutions, configurations, considerations, and recovery options. The various vCenter Server availability options that this technical paper focuses on are VMware vSphere High Availability (HA), VMware vSphere Fault Tolerance (FT), Symantec ApplicationHA, and VM Guest OS Clustering Solutions. It also focuses on Platform Services availability via load balancing and Recovery Options using VMware vSphere Replication and […]

    Read more »
  • Creating Microsoft CA templates for certificates in vSphere 6.0

    vSphere 6 certificate implementation is much easier than vSphere 5.x thanks to a lot of changes made by VMware. I wrote a previous article on how to replace the Machine SSL certificate, use VMCA as a subordinate CA, and ESXi 6.0 certificate replacement. From my experience, a majority of our customers are using Microsoft for their internal Certificate Authority. One thing I wanted to document for everyone is how to properly create Microsoft CA templates to sign the Certificate Signing Requests (CSRs). There are a few different templates to create, depending on what certificates you are replacing.   Template for […]

    Read more »
  • Quick stats is not up-to-date in vSphere 5.5, 6.0 and 6.5

    This error is very common and is a known issue in VMware support. The issue was resolved in ESXi 5.5b but has been popping up again with customer’s who have upgraded to 6.0. Although there is currently no resolution for vSphere 6.0, The workaround to resolve this issue in both versions is below.   Resolution through vSphere Web Client   Step 1. Log into to the vSphere Web client as a vCenter Server administrator.   Step 2. Navigate to the vCenter Server -> Manage -> Settings -> Advanced Settings     Step 3. Click Edit on the top right, then […]

    Read more »
  • vSphere Web Client 5.0 displays RSL Error # of 29 or Error 2046

    A new issue has recently appeared for all vSphere 5.0 environments when using the vSphere Web Client. The error appears to be a flash error caused by a .swz signature expiring on May 5th.   RSL Error # of 29 Error 2046   The good news is there does appear to be a workaround to resolve this issue while VMware continues to investigate a permanent fix. I have provided the steps to workaround the issue below.   Step 1. Download the following files:   http://fpdownload.adobe.com/pub/swz/flex/4.1.0.16076/spark_4.1.0.16076.swz http://fpdownload.adobe.com/pub/swz/flex/4.1.0.16076/datavisualization_4.1.0.16076.swz http://fpdownload.adobe.com/pub/swz/flex/4.1.0.16076/rpc_4.1.0.16076.swz http://fpdownload.adobe.com/pub/swz/flex/4.1.0.16076/framework_4.1.0.16076.swz http://fpdownload.adobe.com/pub/swz/flex/4.1.0.16076/osmf_flex.4.0.0.13495.swz http://fpdownload.adobe.com/pub/swz/tlf/1.1.0.604/textLayout_1.1.0.604.swz   Step 2. Remove the versioning from the file names […]

    Read more »
  • Passed the VCIX-NV yesterday: tips, thoughts and recap

      VMware Certified Implementation Expert!   Well, I passed the VCIX-NV yesterday after about 2-3 weeks of study. This may have been one of the toughest certification tests that I have taken, but I appreciated the challenge throughout the process. In support, I don’t focus on NSX so I knew I had to put in more work and study time since I didn’t have any hands on experiencing prior to the Hands on Labs or ICM. Three weeks ago I set my mind to obtaining this certificate, so I scheduled the test before touching the product and gave myself just […]

    Read more »
  • NSX Manager SSL certificate replacement with CA

    During my study for the VCIX-NV exam I was writing a post on using the REST API client in Google Chrome when I hit an issue connecting to my NSX Manager via the API call. The error message that I received was below.   Could not get any response This seems to be like an error connecting to https://nsxmanager.vcloud.local/api/2.0/services/ssoconfig. The response status was 0. Check out the W3C XMLHttpRequest Level 2 spec for more details about when this happens.   After checking the certificate on NSX Manager, I noticed that the certificate showed localhost rather than the actual hostname for […]

    Read more »

Back to Top