VMware Cloud Community
vmproteau
Enthusiast
Enthusiast

Host Profile Compliance Anomaly

Of the 100 ESX 4.1 Hosts in our environment, 5 were showing noncompliant with "Ruleset updateManager doesn't match the specification". I'm not really clear why this worked but, I resolved it by editing the Host profile, (1) selecting the "Flag indicating whether ruleset should be enabled" box and (2) deselecting the "Validate that ruleset updateManager is enabled" (see attached images).

I was unable to find specific information on the updateManager Ruleset. Does anyone have detail as to what this particular Ruleset checks for. I'd like to understand more about why the Hosts were initially noncompliant and then why these modifications fixed it.

Reply
0 Kudos
2 Replies
adm_mtha
Contributor
Contributor

Hi,

I've seen this a little while ago where servers in the same cluster did not have the same Baseline/Baseline group in update manager.

Marc

Reply
0 Kudos
markdjones82
Expert
Expert

It appears to come from enabling or disabling certain services like SSh.  So if you had enabled or disabled on some hosts but not others it can seem to get the ruleset.  I have also see sometimes you have to refresh the gui and it will disappear from the firewall section.  I ran into this months back and your solution by disabling the ruleset check i think is the easiest way. 

http://www.twitter.com/markdjones82 | http://nutzandbolts.wordpress.com
Reply
0 Kudos