Hi all,
i'm quite new to vsphere infrastrcture.
I installed Update manager and the plugin is installed and working in vSphere Client but the plugin is not present in vSphereWebClient.
In WebClient the plugin seems up and running:
and also in extensions:
but Update tab is not present anywhere in webclient.
I already tried rebooting vcenter appliance without success
Someone can help me to understand what happened?
Thanks
Hi,
We are upgrading vSphere Infrastructure from 5.1 to 6.0, part of which we have fresh installed the 6.0 VUM and vCenters. But the issue is how do we take (export) all the existing baselines which are created in 5.x update manager. We followed below link however it is not working.
Note: Customer has many custom baseline created for specific packages/plugins/software and want us to export those and import in new 6.x infra.
Regards,
Ravindra
Hello everyone!
I am fairly new to VMWare and vSphere administration so I hope I didn't miss important things regarding my question. If so feel free to tell me.
So here is what I want to archive:
I want to setup the following enviroment (all hosts v6.x):
The UMDS Server will have internet connection, the 4 vCenter servers won't. But they will be able to access a shared drive, where the UMDS Server should place the updates and patches.
The vCenter servers exist already and have Update Manager installed. I want to roll out the UMDS with a minimum of costs. The UMDS is not critical but would enhance our infrastructure.
To get me started I have some general questions:
My research so far:
UM & UMDS DBs on one host - possible? This question would help me move on but it has no answer yet.
Setting up UMDS for vSphere This guide gives some details about an offline setup but does not go into detail about the UMDS infrastructure.
Setting up Vmware Update Manager Download Service for Isolated Networks Pretty much the same scenario as the abouve post.
I will update this post as I aquire information to be always up to date and to have a How-To or something similar in the end.
Thanks for all your help and support!
UMDS 5.5.0 Update 2 running on a windows server that has internet access and IIS configured per the vSphere Documentation Center procedure. On a firewall protected DMZ VUM server, when selecting the "Shared Repository" option we enter the URL of the UMDS server (which we can browse using IE) and try to validate the URL, we get the dreaded incompatible repository message saying we need to provide a repository compatible with UMDS 5.5.0. Checked the version.txt files and they appear to be correct. WTF? Thanks in advance for the solution.
I just installed VUM but I cannot see the tabs or icon in the Web Client. I am however able to see and manage things in the C# client.
vCenter server appliance with embedded PSC - 6.0.0.10200 Build Number 3343022
VUM installed on Server 2012 R2
I re-registered using the IP instead of the FQDN as well as rebooted the VCSA but nothing changed.
Any ideas?
Hi all, i'm in the process of upgrading my site and just recently i came across two hosts that after 22% complete in the upgrade process stops responding to pings. I log in to the console of the ESXi host that is in question and i can see it has been upgraded and sitting as if it was fine, but can't ping at all and the process is stuck at 22% or 23%.
I am upgrading from ESXi 5.1 to ESXi 6.0 using VUM 6.0. i have been able to upgrade about 20 so far with no issues but these last two are having problems. I have tried the following
1. remove the host from domain membership
2. remove host from cluster
3. try upgrade from vCenter directly
I will continue to look for more information but i don't know what else to try at this point.
Regards.
I have 6 host running esxi 6.0 with the enterprise plus edition. I installed VUM so i can keep the host up to date, upon scanning the hosts I get the following error "The last operation failed for the entity with the following error message. There was an error connecting to VMware vSphere Update Manager"
The next place I went to look was the event viewer on on vcenter server, inside the application logs I found these:
| Error entry 1 in the event viewer |
|---|
The description for Event ID 1000 from source VMware VirtualCenter Server cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
Log directory: S:\ProgramData\VMware\vCenterServer\logs\vmware-vpx.
the message resource is present but the message is not found in the string/message table |
| Error entry 2 in the event viewer |
|---|
The description for Event ID 1 from source VMware vSphere Update Manager Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
VMware vSphere Update Manager Service service started |
The next place i checked was the log directory mentioned in error entry 1. I found a few logs in that directory which are super long but while review them the one thing that jumped out was this
| Error from the vcenter txt logs |
|---|
| 2016-10-03T15:24:35.344-07:00 info vpxd[04640] [Originator@6876 sub=Libs] FILE: FileCreateDirectoryRetry: Non-retriable error encountered (C:\ProgramData\VMware): Cannot create a file when that file already exists (183) |
How can I resolve this?
I have VUM 6 installed in my enviornment at present but i need to upgrade a few hosts from ESX 5.5 u2 to 5.5 u3 before going to ESX 6. As you cant use the ESX 5.5 iso's with VUM 6, is it possible to either rollback VUM from 6 to 5.5 or else have two seperate VUM vm's running?
If there were two VUM vm's could i power off VUM 6 while upgrading the ESX 5.5 hosts and then power it back on after?
Thanks!
Hello community,
after a short research I couldn't find an answer to my question "What permissions does a created user need to connect to vCenter and patch hosts?".
The thing is I would like to create a special user only for the update manager. For security reseasons he shouldn't have admin permissions. There is allready a predefined role "VMware vSphere Update Manager", which I allready applied to the created user, but when I try to connect to vCenter with this user, I get connection failed message. Does someone know, what permission(s) the user need, to connect from update manager to vCenter?
Thanks a lot for some suggestions and help.
Hello!
We recently setup, a VCSA 6.0 Update 2 Appliance (External PSC installation) we wish to use VUM 6.0 Update 2 installed on a Windows 2008 Server, and have it connect to a database that resides on a SQL 2012 server.
I'm having troubles finding a guide on how to setup VUM using a external database while also running a VCSA Appliance configured to use its PostGre (I believe?) database thats created when VCSA is built.
The article i'm referencing is the following: http://pubs.vmware.com/vsp40/wwhelp/wwhimpl/js/html/wwhelp.htm#href=install/t_configure_a_sql_server_odbc_connection.htm…
I'm confused on how to actually go about this in a way where I can use VUM w/ SQL 2012 DB server, while using VCSA's built in database method.
If someone has a guide or article that would be great, thanks!
Hi,
Trying to get VUM 6.0 running and its able to connect to the http download source but fails against the two HTTPS sources. How do I troubleshoot this issue. I assume its some type of security issue but not sure where. the VUM logs don't show anything.
We are also using a proxy.
I was able to setup this config up in another environment here using the same proxy details.
Im using the 6.0 U2 Appliance as well.
I am sure this has asked before and I apologize in advance for asking again, but can we expect to get a VUM appliance sometime in the near future? I love all of the new appliance offerings and getting away from Windows for my core VMware infrastructure servers but the continuation of VUM on Windows is hard to swallow given all of the progress with the other vSphere appliances.
Hi @all,
we have a vCenter 6 and a good running update manager. Everything is fine - almost.
To the vCenter I have connected some ESXi hosts over a very, very bad WAN. For the daily work the WAN is sufficient. But I'm not able to stage any (bigger) patches or upgrades via the Update Manager to these ESXi's.
Is there a way to install a second download service on site? So that the update mangager does the management but the repository is handeled on a second site.
Thanks !
Wolfgang
Hi,
I think VUM in the past could update the SO of the VM's (Windows, Linux, etc) but i cant information about this in vmware 6 or 6.5, only patch for ESX and VA in VM's, can you help me with information about this? I would use Vmware for deploy and management patches and not a WUS server of Microsoft...
Thanks so much.
Hi,
I'm trying to upgrade VCSA 6.0 to 6.5. We had to renumbered whole dataceter subnet including VCSA and VUM hosting Windows VM some time ago. VUM works well but if I run migration assistant on VUM Windows it try to connect old IP of VCSA. Where does migration assistant take VCSA IP from? I see no settings for it. How can I correct bad IP?
Thanks for tips
Tomas
Hi,
I´ve updated my vcenter Appliance to V6.5 and now I´m using also UpdateManager on this new appliance.
So, now I´m trying update hosts also to V6.5, but I cannot import the ESXi Image (VMware-ESXi-6.5.0-OS-Release-4564106-HPE-650.9.6.0.28-Nov2016.iso).
Any ideas?
Hi,
I have a 3 node cluster which has 3 VDR instances. VDR is unsupported if running more than one on the same host, so I have created 3 DRS rules basically mapping each VDR appliance to a host. So VDR1 to ESX1, VDR2 to ESX2 and VDR3 to ESX3. These rules have been set to "Should". With this setup, I can enter Maintenance Mode on each host manually and it moves the corresponding VDR appliance off the host, and when Maintenance Mode has exited, DRS puts the VDR appliance back on the host.
However when I attempt to patch my hosts, VUM will not enter Maintenance Mode to patch the host because of these VDR appliances, What I get in the log is this:
'VciTaskBase.VciClusterJobDispatcherTask{320}' 4832 ERROR] [vciClusterJobSchedulerTask, 1058] Host host-299 cant go into maintenance mode for following reason : DRS has determined that correcting the soft VM/Host affinity rules constraint violation for VM 'vdr2' would impact respecting cluster constraints or performance goals.
Is there anyway I can fix this?
Edit: Should have mentioned all running vSphere 5 on vCenter 5 and VUM 5!
Hi,
I have three vcsa 6.0 and want to deploy the update manager in every vcenter. Can I deploy three update manager in the same windows machine with three different IPs?
Thanks
So, the inital question is simple: Have you ever successfully installed Update Manager 6.0x using PowerShell?
I'm attempting to automate a VUM install using vRA/vRO, and the easiest way to do this is to use a powershell script.
However, when we attempt an unattended install using a powershell script (www.vtagion.com...stallation-vum/) to setup VUM 6 under Windows 2012R2 / SQL Server 2012, we get an error and the installation fails.
[Error 25085.Setup failed to register VMware vCenter Update Manager extension]
Of course, the error does ot meet the crieteria set forth in the only KB we found related to the error message (KB1036055) - It seems that the error is a symptom, but not caused by the issue related in KB1036055.
The command we're building in power shell uses this format:
$Command = "/V" /qr /L*v C:\temp\vmvci.log WARNING_LEVEL=0 VMUM_DATA_DIR="$VUM_DATA_DIR" VCI_DB_SERVER_TYPE=Custom VCI_FORMAT_DB=1 DB_DSN=$DSN DB_USERNAME=$DatabaseUser DB_PASSWORD=$DatabasePass VC_SERVER_IP=$vCenterFDQN VC_SERVER_PORT=$port VC_SERVER_ADMIN_USER=$vCenterAdmin VC_SERVER_ADMIN_PASSWORD=$vCenterAdmin_Pass""
Note: The whole thing is escaped for powershell, and the Data Dir especially because it can have spaces.
The only difference is if you want to make a pre-answered install, you remove the /qr. Then you get all of the options in manual install for VUM pre-populated, and the installing person clicks Next a bunch of times. (It's actually pretty neat in a 1990s kinda way. )
The install logs shows us this (the server name has been removed):
MSI (s) (DC:80) [TimeStamp]: Executing op: ActionStart(Name=VM_RegisterExtension,Description=Registering Update Manager extension with the VMware vCenter Server ( FDNQ of vCenter:80),)
Action [Time]: VM_RegisterExtension. Registering Update Manager extension with VMware vCenter Server (vCenter FQDN:80)
MSI (s) (DC:80) [TimeStamp]: Executing op: CustomActionSchedule(Action=VM_RegisterExtension,ActionType=11265,Source=BinaryData,Target=*******,CustomActionData=*******)
MSI (s) (DC:78) [TimeStamp]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI4740.tmp, Entrypoint: VMRegisterExtension
Error 25085.Setup failed to register VMware vSphere Update Manager extension to VMware vCenter Server: (FQDN to vCenter Server).
MSI (s) (DC!14) [TimeStamp]: Product: VMware vSphere Update Manager -- Error 25085.Setup failed to register VMware vSphere Update Manager extension to VMware vCenter SErver: (FQDN to vCenter Server).
If we run the install semi-manually, that is we remove /qr from the $Command above and click next alot, the install works without issue. (...but it's not unattended / automated)
Thoughts?
Hi to all,
I've installed VUM 6.0 Update 2 (with embedded db and vcenter - AiO installation)
Now I can not connect VUM for download the patch through Proxy with Authentication.
The Proxy (Palo Alto) use local user db for authentication (Not AD integration)
From Release Note I found this:
VMware Update Manager does not use the configured proxy authentication
When you initiate a patch download task, even though Update Manager is configured to use a proxy with authentication, Update Manager uses anonymous credentials to authenticate to the proxy server. If the proxy server does not accept anonymous credentials, the patch download task may fail.
Workaround: Change Update Manager service to run using a local administrator account with local administrator rights or a domain account with local administrator rights.
I've tried these common steps:
From logs (vmware-vum-server-logXcpp.log ) i see this:
[2017-02-22 11:17:05:227 'DownloadMgr' 125152 DEBUG] [downloadMgr, 438] Adding download job {45044496} to scheduler
[2017-02-22 11:17:05:227 'DownloadMgr' 125152 DEBUG] [downloadMgr, 458] Waiting for download job {45044496} to finish...
[2017-02-22 11:17:05:227 'DownloadMgr' 70764 INFO] [downloadMgr, 593] Executing download job {45044496}, url=https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml
[2017-02-22 11:17:05:227 'httpDownload' 70764 INFO] [httpDownload, 571] Downloading https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml via proxy 10.0.1.7:8080
[2017-02-22 11:17:05:228 'httpDownload' 70764 INFO] [httpDownload, 573] Proxy user: vmware.aod
[2017-02-22 11:17:05:228 'httpDownload' 70764 INFO] [httpDownload, 791] Status code: 407
[2017-02-22 11:17:05:228 'httpDownload' 70764 ERROR] [httpDownload, 1039] Error 4317 from WinHttpQueryAuthSchemes
[2017-02-22 11:17:05:229 'httpDownload' 70764 INFO] [httpDownload, 926] Retrying https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml with proxy off
[2017-02-22 11:17:05:229 'httpDownload' 70764 INFO] [httpDownload, 556] Downloading https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml
[2017-02-22 11:17:05:247 'httpDownload' 163740 ERROR] [httpDownload, 732] Error 12030 from WinHttpSendRequest for url https://hostupdate.vmware.com/software/VUM/PRODUCTION/csco-main/csco-depot-index.xml
[2017-02-22 11:17:05:248 'httpDownload' 163740 WARN] [httpDownload, 420] Download https://hostupdate.vmware.com/software/VUM/PRODUCTION/csco-main/csco-depot-index.xml failed: Error 12030 from WinHttpSendRequest for url https://hostupdate.vmware.com/software/VUM/PRODUCTION/csco-main/csco-depot-index.xml
[2017-02-22 11:17:05:248 'httpDownload' 163740 ERROR] [httpDownload, 435] Reached retry download limit
I get the feeling that the VUM does not send the authentication credentials to the proxy.
On the proxy when the VUM tries to connect, the session is logged in with no credentials. It's possible ???
Thanks to all for any suggestions.