vROPS appliances password remediation tasks failed from SDDC manager

-



Issue details:-  

Password remediation tasks on SDDC manager getting failed with below error.



However, we are able to connect SSH with root password on the vROPS appliances, no issues with credentials.

I checked Operations logs on SDDC manager and found below logs, indicating the SSH connectivity issues from SDDC to vROPS appliances.



Tried to do SSH vROPS appliance from SDDC manager, getting below error...


Seems some issue with ECDSA key..


Resolution:-

SSH to vROPS appliance and retrieve the ECDSA ssh keys as below.



Now, we have 2 options to update the correct SSH keys for vROPS appliance on SDDC manager known_Hosts files located at below location.

  /root/.ssh/known_hosts

  /etc/vmware/vcf/commonsvcs/known_hosts

  /home/vcf/.ssh/known_hosts

  /opt/vmware/vcf/commonsvcs/defaults/hosts/known_hosts

First option is manually copy and paste the SSH key on all the known_hosts files and restart the SDDC manager services and then try to remediate the password again. it will be successful this time.

Second option is to update the SSH keys on all the known_hosts files via script (fix_known_hosts.sh) provided by VMware.

Below are the steps to run the fix_known_hosts.sh script on SDDC manager. Script is available at https://github.com/asingh2021/VCF-script/blob/main/fix_known_hosts.sh

Note: Please do take a snapshot of SDDC manager before running this script.

1) Download the file "fix_known_hosts" zip file and copy it to /tmp on SDDC manager.
2) SSH to the SDDC Manager with the vcf user, and su root
3) Make the script executable, run "chmod +x /tmp/fix_known_hosts.sh".
4) Run "/tmp/fix_known_hosts.sh"
5) Provide the FQDN and the IP address of the node for which we need to update the Host Keys for.
Note: You need to enter the FQDN and IP for the vROPS node while running this script.




Restart the SDDC manager services or reboot SDDC manager once and then re-try the failed password remediation tasks for vROPS appliance, it should be completed this time.


sh /opt/vmware/vcf/operationsmanager/scripts/cli/sddcmanager_restart_services.sh


Cheers !!

Comments

Post a Comment

Popular posts from this blog

How to migrate the N-VDS as the host switch to VDS 7.0 in NSX-T 3.x

-
Image
  Hello There, In this article, i am covering how to migrate the ESXi host switch from N-VDS to VDS 7.0 switch in NSX-T 3.2.x version. When using N-VDS as the host switch,  NSX-T  is represented as an opaque network in  vCenter Server . N-VDS owns one or more of the physical interfaces (pNICs) on the transport node, and port configuration is performed from  NSX-T Data Center . You can migrate your host switch to  vSphere  Distributed Switch (VDS) 7.0 for optimal pNIC usage and manage the networking for  NSX-T  hosts from  vCenter Server . When running  NSX-T  on a VDS switch, a segment is represented as an  NSX-T  Distributed Virtual Port Groups. Any changes to the segments on the  NSX-T  network are synchronized in  vCenter Server. We have an NSX-T environment running with NSX-T 3.2.2.1 version. this environment was designed and implemented with NSX-T 2.x version and that time we used the N-VDS as host switch configuration on the transport nodes bcuz VDS was not supported that time. 
Read more

How to Import/Register a VM into vRA portal

-
Image
You can import an unmanaged virtual machine to a vRealize Automation environment. An unmanaged virtual machine exists in a vCenter but is not managed in a vRealize Automation environment and cannot be viewed in the vRA portal . Once you import an unmanaged virtual machine, the virtual machine is managed by using the vRealize Automation management interface. you can see the virtual machine on the Managed Machines tab or the Items tab. Please follow below steps to Import/Register VM into a vRA portal. Log in to vRealize Automation as a fabric administrator and as a business group manager. If you are importing virtual machines that use static IP addresses, prepare a properly configured address pool.  If you use bulk import to import a virtual machine with a static IP address that is allocated to another virtual machine, the import fails. Create a Blueprint and should not have even network attached as well. See below snapin. Create Network profile that shoul
Read more