{"id":2232,"date":"2015-08-05T08:01:46","date_gmt":"2015-08-05T06:01:46","guid":{"rendered":"http:\/\/vm.piszki.pl\/?p=2232"},"modified":"2015-08-05T13:10:57","modified_gmt":"2015-08-05T11:10:57","slug":"vcenter-6-0-esx-agent-manager-solution-user-fails-to-log-in","status":"publish","type":"post","link":"https:\/\/vm.piszki.pl\/?p=2232","title":{"rendered":"vCenter 6.0 &#8211; ESX Agent Manager solution user fails to log in."},"content":{"rendered":"<p align=\"justify\">Ostatnio do\u015b\u0107 intensywnie testujemy vSphere 6.0, w tym staramy si\u0119 wypracowa\u0107 w\u0142a\u015bciwe podej\u015bcie do jednej z nowo\u015bci jak\u0105 jest VMCA. Do tej pory u\u017cywali\u015bmy z powodzeniem w\u0142asnego, lokalnego CA (w obu wariantach, RootCA i SubCA). Wprowadzenie przez VMware kolejnego, w\u0142asnego (po\u015brednicz\u0105cego) CA troch\u0119 nam skomplikowa\u0142o zarz\u0105dzanie certyfikatami (jak pewnie wszystkim). Jako \u017ce Certificate Manager jest ma\u0142o wygodny w u\u017cyciu gdy generujemy certyfikaty dla maszyn lub us\u0142ug to ja osobi\u015bcie polecam m\u00f3j w\u0142asny skrypt <a href=\"https:\/\/vm.piszki.pl\/vmware-lab-cz%c4%99%c5%9b%c4%87-3-certyfikaty-ssl-w-vcenter-z-naciskiem-na-vcsa\/\" target=\"_blank\">CA<\/a>. Wystarczy zainicjowa\u0107 w tym skrypcie nowy po\u015brednicz\u0105cy CA a nast\u0119pnie przekopiowa\u0107 certyfikat i klucz (root_signing_cert) z VMCA do mojego CA. Szybko\u015b\u0107 i wygoda u\u017cycia s\u0105 o wiele lepsze (szczeg\u00f3lnie gdy musimy wygenerowa\u0107 i zainstalowa\u0107 certyfikaty na ESXi).<\/p>\n<p align=\"justify\">Temat tego wpisu jest jednak inny, problem z jakim si\u0119 spotkali\u015bmy dotyczy i vCSA i vCenter zainstalowanym na systemie Windows. Po wygenerowaniu nowego certyfikatu dla vCenter podpisanego przez nasze CA (opcja 2 w Certificate Manager \u2013 Custom Signing Certificate) i restarcie us\u0142ugi okaza\u0142o si\u0119, \u017ce s\u0105 spore problemy z ESX Agent Manager (EAM). Wystarczy\u0142o wej\u015b\u0107 w vSphere Web Client do Administration \u2013&gt; vCenter Server Extension \u2013&gt; vSphere ESX Agent Manager \u2013&gt; Solution aby zetkn\u0105\u0107 si\u0119 z komunikatem \u201cHTTP Status 500 \u2013 NoVCenterConnection\u201d:<\/p>\n<p align=\"justify\"><a href=\"https:\/\/vm.piszki.pl\/wp-content\/uploads\/2015\/06\/eam0.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; float: none; padding-top: 0px; padding-left: 0px; margin-left: auto; display: block; padding-right: 0px; margin-right: auto; border-width: 0px;\" title=\"eam0\" src=\"https:\/\/vm.piszki.pl\/wp-content\/uploads\/2015\/06\/eam0_thumb.png\" alt=\"eam0\" width=\"413\" height=\"196\" border=\"0\" \/><\/a><\/p>\n<p><!--more--><\/p>\n<p align=\"justify\">W logu EAM \/storage\/log\/vmware\/eam\/eam.log pojawiaj\u0105 si\u0119 wpisy \u015bwiadcz\u0105ce o tym, \u017ce EAM nie mo\u017ce si\u0119 zalogowa\u0107 do vCenter.<\/p>\n<p><a href=\"https:\/\/vm.piszki.pl\/wp-content\/uploads\/2015\/06\/eam2.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; float: none; padding-top: 0px; padding-left: 0px; margin-left: auto; display: block; padding-right: 0px; margin-right: auto; border-width: 0px;\" title=\"eam2\" src=\"https:\/\/vm.piszki.pl\/wp-content\/uploads\/2015\/06\/eam2_thumb.png\" alt=\"eam2\" width=\"747\" height=\"109\" border=\"0\" \/><\/a><\/p>\n<p align=\"justify\">Okaza\u0142o si\u0119, \u017ce jest to spowodowane nieprawid\u0142ow\u0105 podmian\u0105 certyfikatu w trakcie restartu us\u0142ug vCenter. Na szcz\u0119\u015bcie jest na to odpowiednie <a href=\"http:\/\/kb.vmware.com\/selfservice\/microsites\/search.do?language=en_US&amp;cmd=displayKC&amp;externalId=2112577\" target=\"_blank\">KB<\/a>, rozwi\u0105zanie jest proste, wymaga jednak dodatkowego restartu vCenter:<\/p>\n<p><a href=\"https:\/\/vm.piszki.pl\/wp-content\/uploads\/2015\/06\/eam1.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; float: none; padding-top: 0px; padding-left: 0px; margin-left: auto; display: block; padding-right: 0px; margin-right: auto; border-width: 0px;\" title=\"eam1\" src=\"https:\/\/vm.piszki.pl\/wp-content\/uploads\/2015\/06\/eam1_thumb.png\" alt=\"eam1\" width=\"745\" height=\"109\" border=\"0\" \/><\/a><\/p>\n<p align=\"justify\">Po restarcie wszystko wraca do normy.<\/p>\n<p><a href=\"https:\/\/vm.piszki.pl\/wp-content\/uploads\/2015\/06\/eam3.png\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; float: none; padding-top: 0px; padding-left: 0px; margin-left: auto; display: block; padding-right: 0px; margin-right: auto; border-width: 0px;\" title=\"eam3\" src=\"https:\/\/vm.piszki.pl\/wp-content\/uploads\/2015\/06\/eam3_thumb.png\" alt=\"eam3\" width=\"410\" height=\"147\" border=\"0\" \/><\/a><\/p>\n<div style='text-align:left' class='yasr-auto-insert-visitor'><\/div>","protected":false},"excerpt":{"rendered":"<p>Ostatnio do\u015b\u0107 intensywnie testujemy vSphere 6.0, w tym staramy si\u0119 wypracowa\u0107 w\u0142a\u015bciwe podej\u015bcie do jednej z nowo\u015bci jak\u0105 jest VMCA. Do tej pory u\u017cywali\u015bmy z powodzeniem w\u0142asnego, lokalnego CA (w obu wariantach, RootCA i SubCA). Wprowadzenie przez VMware kolejnego, w\u0142asnego &hellip; <a href=\"https:\/\/vm.piszki.pl\/?p=2232\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"yasr_overall_rating":0,"yasr_post_is_review":"","yasr_auto_insert_disabled":"","yasr_review_type":"","footnotes":""},"categories":[36],"tags":[44,86,57,80],"class_list":["post-2232","post","type-post","status-publish","format-standard","hentry","category-analiza","tag-ca","tag-eam","tag-vcenter","tag-vcsa"],"yasr_visitor_votes":{"stars_attributes":{"read_only":false,"span_bottom":false},"number_of_votes":0,"sum_votes":0},"_links":{"self":[{"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/posts\/2232"}],"collection":[{"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2232"}],"version-history":[{"count":4,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/posts\/2232\/revisions"}],"predecessor-version":[{"id":2399,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=\/wp\/v2\/posts\/2232\/revisions\/2399"}],"wp:attachment":[{"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2232"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2232"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vm.piszki.pl\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2232"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}