Quantcast
Channel: VMware Communities : All Content - vRealize Automation Tools
Viewing all 9859 articles
Browse latest View live

vRealize Automation - maximums


vRA 7.3 - vSphere Endpoint Creation

0
0

I just finished my new installation of vRA 7.3 in my lab environment. I am having and issue while adding the vSphere Endpoint (vSphere 5.5) to the platform. This is the error:

 

System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a send. ---> DynamicOps.Common.Client.UntrustedCertificateException: Certificate is not trusted (RemoteCertificateChainErrors)

 

Already followed the next KB VMware Knowledge Base importing the vCenter Server certificate to the Trusted root store of all the IAAS machines, including DEMs and Agent. But the error is still the same.

 

Also the certificate that i am using in vSphere is self signed.

 

By the way i also have connected to the same vSphere Platform a vCAC platform in version 6.2.

 

Any ideas?

Invalid certificate issue in endpoint creation in vrealize automation 7.4

0
0

Hi,

 

I have a new vra 7.4 setup. I am trying to create the endpoint with name - vCentervsaqa which is same as the agent name added in iaas.

Its failing with the below error. Can some one please help with this.

 

vCAC Server logs - C:\Program Files (x86)\VMware\vCAC\Server\Logs

UTC:2018-06-15 18:37:29 Local:2018-06-15 13:37:29] [Trace]: [sub-thread-Id="14"  context=""  token=""] Processing ping report, report queue depth is 3

[UTC:2018-06-15 18:37:29 Local:2018-06-15 13:37:29] [Trace]: [sub-thread-Id="14"  context=""  token=""] Processing ping report for agent vCenter

[UTC:2018-06-15 18:37:29 Local:2018-06-15 13:37:29] [Trace]: [sub-thread-Id="14"  context=""  token=""] Processing ping report for agent vSphere65

[UTC:2018-06-15 18:37:29 Local:2018-06-15 13:37:29] [Trace]: [sub-thread-Id="14"  context=""  token=""] Processing ping report for agent vCentervsaqa

GetWorkItem AgentID:vCentervsaqa taskType: testconnection Long Running: False Data Collection: False Can run long running data collection: True Can run long running resource intensive: True Message:<?xml version="1.0" encoding="utf-16"?><workItem id="f30e8bd1-3155-49da-8d47-a15234588e69"><task type="testconnection"><parameter name="TestConnection.Endpoint.Address">https://vcenterfqdn/sdk</parameter><parameter name="TestConnection.Endpoint.Username">ADMIN_USERNAME-OFVCENTER</parameter><parameter name="TestConnection.Endpoint.Password">5mj8vLCdmMn7ol0bFNn/Sw==</parameter><parameter name="TestConnection.Endpoint.TrustThumbprint" /><parameter name="TestConnection.Endpoint.TrustAllCertificates">False</parameter></task></workItem>

[UTC:2018-06-15 18:37:32 Local:2018-06-15 13:37:32] [Debug]: [sub-thread-Id="17"  context=""  token=""] TestConnection WorkItemResponse: [<?xml version="1.0" encoding="utf-16"?><workItemResponse id="f30e8bd1-3155-49da-8d47-a15234588e69"><task type="testconnection"><result succeeded="false"><message>Test connection failed: Certificate is not trusted (RemoteCertificateChainErrors). Subject: C=US, CN=vcenter-fqdn Thumbprint: 43C993C46A18CB228147C20B3B92F1000CA118DA</message></result><parameter name="TestConnection.Endpoint.Request.ResultCode">INVALID_CERTIFICATE</parameter><parameter name="trace_id" /></task></workItemResponse>]

[UTC:2018-06-15 18:37:32 Local:2018-06-15 13:37:32] [Trace]: [sub-thread-Id="17"  context=""  token=""] Begin completing test connection request with id [f30e8bd1-3155-49da-8d47-a15234588e69].

[UTC:2018-06-15 18:37:32 Local:2018-06-15 13:37:32] [Trace]: [sub-thread-Id="17"  context=""  token=""] Finish completing test connection request with id [f30e8bd1-3155-49da-8d47-a15234588e69].

[UTC:2018-06-15 18:37:32 Local:2018-06-15 13:37:32] [Trace]: [sub-thread-Id="17"  context=""  token=""] Deleting work item with id [f30e8bd1-3155-49da-8d47-a15234588e69].

 

Thanks!

Updating Reservations after VM relocation :: Powershell

0
0

Is there a way to update a "Managed Machine" s Reservation from Powershell/powerCLI?

I have found the PowervRA module, which offers me the Get-vRASourceMachine where I can see the ReservationName assigned to that machine, but I don't know how to change it. We have moved hundreds of VMs to new clusters and I don't want to do this manually :)

Thanks!

Unable to login to vRA 7.3 Appliance

0
0

I just have installed vRA 7.3 in my lab, Deploying OVA completed. I am able to login with root from VM console but not on management console on 5480 port. Its accepting the password on VM console but not accepting same password on 5480.

 

 

[vRSLCM 1.2] Certificate issue during vRA 7.4 deployment

0
0

Hello everyone,

 

For few days now I have been fighting with vRA 7.4 deployment using vRS Lifecycle Manager 1.2, althought it seems to be a great tool !

What I have one so far:

     - I have deployed a Windows Server 2016 VM called "vra-iaas"

     - I added the necessary DNS entries for both vRA and vRA-IaaS within my lab

     - I did set up vRSLCM as told by the VMware Documentation

     - I created a new environment with vRA deployment only, went through all the settings config steps and passed the Pre-Check at 100%

 

After I submitted the creation request, everything wend well.

Then I faced an error during the deployment task changing its state from "in progress" to "Failed":

VRA_FAIL.PNG

Apparently something went wrong with the vra-iaas certificate. Since I am not really sure about how certificates are used with vRS products, I am stuck at this point.

I don't know what I am missing and I don't know where to look ... Please someone help me !

 

Many thanks !

AWS Blueprint provisioning 30gb root drive

0
0

I am currently deploying servers into our AWS environment via an AWS Blueprint in vRA 7.3. 

In the 'Infrastructure' -> 'Administration' -> 'Instance Types' portion of vRA, I have defined the instance types to associate to my blueprints, as well as set their storage size. We are wanting to default all builds to have an 80gb root drive.

When I deply my blueprint, per my request, I do see the disk size being 80gb. But when I get into the AWS console, every build is building at 30gb. 

Is there something in AWS that I am missing causing this to happen?

Error on adding management agent to 2016 IAAS server

0
0

Hello

I have a 2016 IAAS VM and I tried to add the management agent to it from a vRA 7.3.1 appliance. I get the schannel error below. Error is when I have entered the appliance VIP and login details and have successfully got back the cert fingerprint but when i go NEXT I get the error

                    The underlying connection was closed

 

In event viewer

Event ID:38761  Schannel: A fatal error occurred while creating a TLS client credential. Internal error 10013

 

I have checked IAAS 2016 server

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

TLS 1.0 client and Server set to disabled

TLS 1.1 & 1.2 client and server set to Enabled 0xffffffff

 

Anyone any ideas?

Thanks

Chris


Configuring a PowerShell workflow in vRO and then having it as a blueprint in vRA

0
0

Hello,

 

I'm currently running vRO/vRA 7.3.1.  I've created a blueprint in vRA which has been nice, but I'd like to do more with it.  I have some PowerShell scripts that I'd like to setup as a workflow in vRO and then have them as a blueprint somehow in vRA (if possible) so anybody on my team or in the company if needed could just click and run a script.  I have created a PowerShell machine (2k12 R2) that has PowerShell 5.1 on it.  I've run the New-VICredentialStoreItem on there for a particular vCenter to test with.  Below is the code I'm using for the script:

 

$creds = Get-VICredentialStoreItem -File C:\vicredentials.xml

Connect-VIServer -Server $creds.Host -User $creds.User -Password $creds.Password

$log = Read-Host "Enter log name i.e. VRM.txt"

$GetVM = Get-VM -location VRM | sort Name

$GuestCredential = Get-Credential #Provide Guest OS credentials

$obj = foreach ($vm in $GetVM)

{

   $string = "query user /server:$vm"

   Invoke-VMScript -vm $vm -ScriptText $string -ScriptType Powershell -GuestCredential $GuestCredential | Format-List | Out-File $log -append

 

Basically I'd like to setup a workflow somehow to just list the particular vCenter this would apply to, then ask the user for the name of the log file they want and then have it pass that into the script.  They would also pass the credentials for the machines (a service account, or maybe that's in the workflow, but hidden somehow).  The script would run and somehow (I'm not sure if this is possible in vRO/vRA) the file is created and the user can access it somehow after vRA has completed it..  Perhaps I create a share they can get to that the script puts it there.  I tried looking around on google for this, but whatever I tried really didn't work, so I'm stuck.  I'm not sure if this is possible or not, but since this is the simplest script I have I want to try it first before moving onto ones that require more input from the user.  Any help is appreciated.

 

Thanks

Invoke REST Operation || vRO connect to another vRO with HTTP_REST plugin

0
0

Hi Friends,

 

Customer request to connect client vRO server to new vRO server and run the workflow.

 

So I have connected new vRO server using HTTP_REST plugin and  I have created Rest Operation to execute the workflow.

 

When i try to invoke the Rest Operation , I am getting status code :302. May be i am missing something in content.

 

Can you please help me on this.

 

Note :- I tested same thing in vRO Swagger, able to trigger the workflow (status code 202).  https://192.168.1.23:8281/vco/api/docs/index.html#!/execution-controller/startWorkflowExecutionUsingPOST_3

 

Content :   

Test-1

{

  "executionId": "string",

  "parameters": [

{

"value": {"string":{ "value": "InputValue"}},

"type": "string",

"name": "Input1",

"scope": "local"

},

{

"value":{"number":{"value": "20"}},

"type": "number",

"name": "Size",

"scope": "local"

}

  ]

}

 

Test-2

 

{

  "parameters": [

{

"value": {"string":{ "value": "InputValue"}},

"type": "string",

"name": "Input1",

"scope": "local"

},

{

"value":{"number":{"value": "20"}},

"type": "number",

"name": "shareSize",

"scope": "local"

}

  ]

}

 

 

 

RestOp.PNG

 

invoke1.PNG

invoke2.PNG

 

invoke3.PNG

vRA 7.4 Custom Forms and external values

0
0

Hi,

I want to do the following:

Use the CPU field in a Custom Form and then give it a maximum that depends on a vRO value.

Capture.PNG

 

So I use an action in vRO that returns type Number and just does return 4; nothing fancy just testing at this stage....but the error throws me.

My Blueprint has for CPU values between 1 and 16 so I get where it comes from but that smells like a bug to me.

 

Anyone any Idea?

Redundant emails when using XaaS

0
0

I created a XaaS blueprint that (amongst other things) creates a vCenter VM (via vanilla blueprint).
There is a pre approval policy on the XaaS and a post approval policy on the VM.

When a user requests the XaaS blueprint and destroys the deployment he gets the following emails:
- XaaS request submitted
- XaaS request approved
- VM request submitted
- VM request approved
- VM request completed
- XaaS deployment activated
- VM deleted
- VM deleted (again!)
- XaaS deployment deleted

Ideally I would like to reduce it to the following emails:
- XaaS request submitted
- XaaS request approved
- VM request approved
- XaaS deployment activated
- XaaS deployment deleted

Is there any way to disable notifications selectively either based on self-defined conditions (like event subscriptions) or at least for vanilla blueprints only?

I'm using vRA version 7.3.0 but may be able to upgrade to 7.4 if needed.

Many thanks in advance!

VMware Identity Manager 3.2 with vRB 7.4

0
0

Author : Vindhya Sastry

URL : http:////docs.vmware.com/en/vRealize-Business/7.4/vRBforCloud.troubleshoot.doc/GUID-2088EF7D-BB4C-4DCE-84BE-A91A41BC6921.html

Topic Name : Troubleshoot VMware Identity Manager Problems in vRealize Business for Cloud

Publication Name : vRealize Business for Cloud Troubleshooting Guide

Product/Version : vRealize Business/7.4

Question :

Just wondering if anyone has had issues accessing vRB using users synched from Active Directory? I can see all my synched users, but non allow me to login to vRB. Only the local admin user can login. Any idea would be great!

How to validate the correctness of vRealize Business Showback Statement

0
0

Hello,

 

We see a charge difference of about ~100K when compared to 2017 in the vRealize business report. Can anyone help us figure out why this may be?

 

Thanks

Opening unsubmitted Service Catalog requests causes a timeout because of too much data bindings

0
0

We've had some problems with opening 'unsubmitted' (that is only saved, not submitted) service catalog requests and have deduced it is because of a large number of data bindings. Our masks have 20-30 input fields, which are heavily dependent on each other - most of the input fields are data bound to another or even DB/API.

The masks work when we are just filling out the fields, but it timeouts when we try to load the whole unsubmitted request (we've raised the timeout to 5 minutes but it takes longer than that).

We cache data where we can (DB, API results..) but due to the nature of data bindings with each change triggering further data bindings this does not help.

How can we prevent data bindings triggering so many times? (maybe just preventing data bindings triggering for empty fields)

I'm looking for advice, similar issues and solutions on this problem.

(currently using vRA 7.1)


vRA 7.4 - Network Profile list\update REST API calls - works with curl, not with vRO REST Plugin

0
0

I want to extend an IP range in one of the network profiles. This does not seem to be possible using the GUI, since the edit option is greyed out:

The network range extension can be done using REST. In the first step, I have built a small vRO workflow that would first create a new token which is passed to the next step, where an API call takes place, to list all network profiles. This is documented here:

https://vdc-download.vmware.com/vmwb-repository/dcr-public/3419d6a8-a6be-4e0d-bb92-138965e06585/b9e10152-32cc-4668-b373-…

Now I have stumpled upon a few problems:

  1. The URL listed is not complete - the above documentation lists GET /api/network/profiles as the host extension, but it should be /iaas-proxy-provider/api/network/profiles, toherwise the request ends with an error 404. This is done correctly in the online documentation: Get a Network Profile List Since the iaas-proxy-provider API is deprecated - what should be used instead?
  2. When using curl to execute the GET call, the call ends with an error 401. This is because there is a space between "Authorization: " and "Bearer $token". After the space character is ommited, "Authorization:Bearer $token", the call works.
  3. I have tried to implement the above to be executed in vRO. First a workflow runs to extract the token. After that the token is passed to another workflow, that would generate a list of the network profiles, by executing the GET call. For that I use the "Invoke a REST operation" workflow, modified to add the authorization token, like here:

     // Add authorization header

     request.setHeader("Authorization:Bearer ", token);

Each time I run it though, I get an error 401. Is there another way to pass the token in a workflow? I could try to build a rest client with var restClient = cafeHost.createRestClient(endpoint), but what would be the endpoint here?

Is the "edit network range by api" approach valid anyway? I fear there is a risk, when executing the PUT call to edit the range, the already assigned IPs will become unallocated.

Unable to register client - Method failed: (/SAAS/jersey/manager/api/oauth2clients/) with code: 500

0
0

I wish there was more information/logs to look through provide, but here is all I have.  I go to client registration, and enter the automation userid and password.  I can confirm this part authenticates successfully, as using bad data results in an error.

 

The next screen is where I enter the client id and secret.  I have been using the same info as above - user id for client id, and password for secret.  But after I submit I recieve the error in the title.  Any assistance on how I can begin to troubleshoot would be greatly appreciated.

vRA 7.4 not showing health information from vROps

0
0

After upgrading to vRA 7.4 the health badges on the Item Details page are not visible anymore. For one or two seconds you see the frame loading, but it ends up being blank.

In the Items > Machines list the health column is not shown neither.

Under Administration > Reclamation > Deployments the health column is visible but there is also the following error message shown: Error: Unable to fetch information from configured vRealize Operations Manager

Under Administration > Reclamation > Metrics Provider I reset the vROps endpoint and the connection test is successfull, but this doesn't fix the above problem.

 

vROps itself is collecting data and I can see all the information it is collecting for VMs and so on.

 

Anyone experiencing the same behavior?

 

vRA 7.4.0 Build 8182598

vROps 6.7.0 Build 8183617

VirtualMachine.DiskN.StorageReservationPolicy

0
0

Hi,

 

vRealize Automation 7.4, vSphere machine blueprint (Create - BasicVMWorkflow), custom form

 

I have several datastores and created reservation policies for them.

 

I found the custom property VirtualMachine.DiskN.StorageReservationPolicy in the Custom Properties Reference. When I add this custom propery to the disk I get: You cannot use a reserved propery. I do not want to have the disk grid layout because it's too detailed and I only want to be able to change the Storage Policy.

 

I was thinking about a checkbox that will set the disk policy to something specific like noSRM datastore if needed.

 

Is there another way to accomplish this?

 

Thanks

vRA 7.2 Deployment description change

0
0

Hi!

 

Does anybody know how to change/edit "Deployment" description after provisioning? End-user can easy change/add VMs description after deployment (using "Reconfigure" task), but I don't see any options to edit Deployment description... I haven't been lucky with vRO/REST API, looks like no methods/functions exists to update already deployed object VCACCAFE:CatalogResource (I'll be happy to be wrong on it). Could not believe that so obvious function is missing in vRA.

Viewing all 9859 articles
Browse latest View live




Latest Images