Error When Deploying VCSA or PSC

Recently when helping a customer to deploy a new greenfield VMware 6.5 environment I ran into an issue where brand new vCenter Server Appliance and Platform Service Controller 6.5 build 5973321 fail to deploy to an ESXi host build 5969303.

Stage 1 (install) of the deployment completes successfully. In Stage 2 (setup) VCSA installer both for vCenter and PSC first shows a prompt asking for credentials.

PSC Issue Description

After providing credentials, when installing an external PSC, installation fails with the following error:

Error:
Unable to connect to vCenter Single Sign-On: Failed to connect to SSO; uri:https://psc-hostname/sts/STSService/vsphere.local
Failed to register vAPI Endpoint Service with CM
Failed to configure vAPI Endpoint Service at the firstboot time

Resolution:
Please file a bug against VAPI

Installation wizard shows the following resulting error:

Failure:
A problem occurred during setup. Refresh this page and try again.

A problem occurred during setup. Services might not be working as expected.

A problem occurred while – Starting VMware vAPI Endpoint…

Appliance shows the following error in console:

Failed to start services. Firstboot Error.

Alternatively PSC can fail with the following error:

Error:
Unexpected failure: }
Failed to register vAPI Endpoint Service with CM
Failed to configure vAPI Endpoint Service at the firstboot time

Resolution:
Please file a bug against VAPI

VCSA Issue Description

After providing credentials, when installing vCenter with embedded PSC, installation fails with the following error:

Error:
Unable to start the Service Control Agent.

Resolution:
Search for these symptoms in the VMware knowledge base for any known issues and possible workarounds. If none can be found, collect a support bundle and open a support request.

Installation wizard shows the following resulting error:

Failure:
A problem occurred during setup. Refresh this page and try again.

A problem occurred during setup. Services might not be working as expected.

A problem occurred while – Starting VMware Service Control Agent…

Appliance shows the same error in console.

Alternatively VCSA can fail with the following error:

Error:
Encountered an internal error. Traceback (most recent call last): File “/usr/lib/vmidentity/firstboot/vmidentity-firstboot.py”, line 1852, in main vmidentityFB.boot() File “/usr/lib/vmidentity/firstboot/vmidentity-firstboot.py”, line 359, in boot self.checkSTS(self.__stsRetryCount, self.__stsRetryInterval) File “/usr/lib/vmidentity/firstboot/vmidentity-firstboot.py”, line 1406, in checkSTS raise Exception(‘Failed to initialize Secure Token Server.’) Exception: Failed to initialize Secure Token Server.

Resolution:
This is an unrecoverable error, please retry install. If you run into this error again, please collect a support bundle and open a support request.

Issue Workaround

This issue happens when VCSA or PSC installation was cancelled and is attempted for the second time to the same ESXi host.

Identified workaround for this issue is to use another ESXi host, which has never been used to deploy PSC or VCSA to.

Issue Resolution

VMware is aware of the bug and working on the resolution.

Advertisement

Tags: , , , , , , , , , , , , ,

18 Responses to “Error When Deploying VCSA or PSC”

  1. Alexander Reinhardt Says:

    I have the same problem here, that drives me nuts…
    Exactly the error you describe. But using another ESXi doesn’t change the situation.
    Any information, about VMware and who I could contact regarding this issue?
    Or did you find another workaround?

    I need a vCenter urgently here at a customers new site, but I have just 2 ESXi (small infrastructure).

    Awaiting your answer. Best regards,

    A. Reinhardt
    IT-Consulting Passau

    • niktips Says:

      Hi Alex, if you attempted to deploy to both ESXi hosts before and cancelled it for whatever reason (such as a DNS issue, for instance), then the second attempt will fail on both servers. The only solution I see here is to reinstall one ESXi host from scratch and try again.

      But probably the best advice I have for you is to get in touch with VMware support. They may have other workarounds or maybe even a patch.

  2. Darren Says:

    Thanks for this. After 20 or so failed VCSA installs, I reinstalled ESXi on my host and VCSA installed first time.

  3. SXS Says:

    Thanks for the Post, helped me knowing that others have the same issue.

    How I fixed it:

    using the Image VMware-VCSA-all-6.5.0-5973321.iso worked fine.
    After successful creation and setup I patched the VCSA with VMware-vCenter-Server-Appliance-6.5.0.14000-7515524-patch-FP.iso

    Hope that helps someone out.

    Regards

  4. Jens Peter Secher Says:

    The solution is described in https://kb.vmware.com/s/article/2147908

    • niktips Says:

      Hi Jens, thanks for sharing this KB article. It is indeed a (probably most) common issue, when deploying vCenter and PSC – missing A and PTR records in DNS. However, what I’m describing is a different issue. If you compare the error messages, you will quickly realize that.

  5. Ben Says:

    I had the same issue but managed to get it installed with the CLI installation without needing a reinstall. see link below.

    http://virtual-hike.com/cli-install-vmware-vcenter-server-6-5/

  6. Pete Trash Says:

    Same indication and error messages, but after re-install of ESXi – still not passing 2nd wizard step.
    Always fails beetween 5% – 22% with ‘Starting up … (something)
    Solution: Time between ESXi hosts and vCenter appliance differs a few minutes

    Arranged that both (ESXi, vCenter) use NTP and manually verified time (prior to starting 2nd vcenter appliance step, after ssh was enabled).
    After confirmed same time (within few secs.) -> Installed vCenter appliance successfully

    Thanks VMware for about 100’000 error messages / warnings in 5’000 log files …

  7. Patrick Stumpf Says:

    Had the same issue on vCenter 6.5 Appliance setup after canceling the first attempt due to DNS problems.
    Then installed vCenter 6.7 which went through the setup without any problem.

  8. Bob Smith Says:

    I was also able to bypass the stuck @ 25% error by installing via the CLI. Thanks!

  9. tarun.pk6@gmail.com Says:

    Fixed issue by configuring firewall ports as per recommendation.

    https://techkiranangal.blogspot.com/2020/07/vcenter-67-deployment-failed-with-error.html

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s


%d bloggers like this: