VMware

This Question is Answered

1 "correct" answer available (10 pts)
5 Replies Last post: May 29, 2009 2:12 AM by dellboy  

vCenter server FQDN too long posted: Apr 30, 2009 8:34 AM

Click to view dellboy's profile Enthusiast 34 posts since
Mar 13, 2007
Hi

I have a customer with a production vCenter 2.5u4 and ESX 3.5u4 environment. They want to install SRM, however during installation, I get the following error

Failed to generate cert: Error: Invalid Argument DR_CERT_SERVER cerfificate field is too long > 32

The FQDN for vCenter and ESX Hosts comes to 34 characters

I found VMware KB 1007458 which recommends changing the DNS record for vCenter with 32 characters or less, however I want to find out what the potential implications may be...

  • Do I have to change the computername, or just add a 32 character DNS record pointing to the 'unchanged' vCenter?
  • If I have to rename vCenter, what should I look out for, as far as potential issues (e.g. impact on other services; licensing; vCenter database; ESX Host etc)
  • If I have to rename vCenter, will i have to rename the ESX Hosts too?

Additionally, I found VMware KB 1008390 which discusses requirements for using trusted certificates with SRM, however it only talks about installing them on vCenter.

  • Would we run into the same problem during SRM install, if we kept the long FQDN, and used Windows CA certificates?
  • If we use Windows CA certificates, what do we have to generate them for (i.e. vCenter only, or for each ESX Host too)
  • Would we have to install certificates on any other hosts (ESX, VCB etc)


Lots of questions, I know, but I'm looking for a solution which will have the least impact on the customer

Thanks

Re: vCenter server FQDN too long

1. May 4, 2009 1:36 AM in response to: dellboy
Click to view Smoggy's profile Hot Shot 187 posts since
Nov 9, 2005

Hi

first bit of info is that this 32 char limitation will be lifted in the next SRM update due later this year. to the questions:

  • Do I have to change the computername, or just add a 32 character DNS record pointing to the 'unchanged' vCenter?
Ans: if the current FQDN is > 32 char it needs to be less than this. how many characters are in the computername?
  • If I have to rename vCenter, what should I look out for, as far as
    potential issues (e.g. impact on other services; licensing; vCenter
    database; ESX Host etc)
Ans: you will need to rename some of the windows services to reflect the correct computername. this can be done by editing the ODBC DSN
  • If I have to rename vCenter, will i have to rename the ESX Hosts too?
Ans: no

  • Would we run into the same problem during SRM install, if we kept the long FQDN, and used Windows CA certificates?
Ans: you mean following process outlined in this KB article http://kb.vmware.com/kb/1008390 then yes. If your VC servers use your own signed certs then SRM must also use your own certs. The process for the SRM side is covered in this document http://viops.vmware.com/home/docs/DOC-1261
  • If we use Windows CA certificates, what do we have to generate them for (i.e. vCenter only, or for each ESX Host too)
Ans: vCenter and SRM servers. Refer to the viops site doc for example on creating the SRM certificates. also search on this forum for other useful posts on this
  • Would we have to install certificates on any other hosts (ESX, VCB etc)

Ans: no

best regards,

Lee Dilworth

Re: vCenter server FQDN too long

3. May 5, 2009 5:57 AM in response to: dellboy
Click to view depping's profile Champion 2,997 posts since
Jan 17, 2005
I wouldn't run SRM on the same server as vCenter. SRM puts a lot of stress on the Server... will it be a VM or a physical host?


Duncan
VMware Communities User Moderator


Blogging: http://www.yellow-bricks.com
Twitter: http://www.twitter.com/depping

If you find this information useful, please award points for "correct" or "helpful".

VMware Developer

SDKs, APIs, Videos, Learn and much more in the Developer community.

Learn More

Developer Sample Code

Increase your developer productivity with VMware API sample code.

Learn More

VMworld Sessions & Labs

Online access to the latest VMworld Sessions & Labs and online services.

Learn more

Purchase PSO Credits Online

Purchase credits to redeem training and consulting services online.

Buy Now

Community Hardware Software

View reported configurations or report your own.

Learn More

VMware vSphere

Come witness the next giant leap in virtualization.

Register Today

Communities