VMware Networking Community
i1wan
Enthusiast
Enthusiast
Jump to solution

Error after deploying vShield Endpoints (Guest Introspection Service not ready)

Hi all,

I am getting the error "Guest Introspection Service not ready" after I deployed vShield Endpoints from NSX.

I am deploying this on a cluster with three ESXi hosts and after deployment it also creates three "Guest Introspection" Virtual Machines (one on each ESXi).

Does anyone know what I am doing wrong?

screenshot_461.png

screenshot_462.png

Reply
0 Kudos
1 Solution

Accepted Solutions
larsonm
VMware Employee
VMware Employee
Jump to solution

This is listed in the release notes for 6.1.3:


Cannot remove and re-add a host to a cluster protected by Guest Introspection and third-party security solutions

If you remove a host from a cluster protected by Guest Introspection and third-party security solutions by disconnecting it and then removing it from vCenter Server, you may experience problems if you try to re-add the same host to the same cluster.


I was able to replicate your issue by doing what was described here.  You may see some benefit moving the hosts out of the cluster, removing the guest introspection services, adding the hosts back to the cluster, and re-adding the guest introspection service.  I went as far as removing the hosts from vCenter, but that is likely not necessary.

View solution in original post

Reply
0 Kudos
10 Replies
larsonm
VMware Employee
VMware Employee
Jump to solution

I've seen this error in my environment and resolved it by rebooting the Guest Introspection appliance.

Reply
0 Kudos
i1wan
Enthusiast
Enthusiast
Jump to solution

I tried this, rebooting the three Guest Introspection machines, but this did NOT resolve my issue...

screenshot_467.png

Reply
0 Kudos
larsonm
VMware Employee
VMware Employee
Jump to solution

This is listed in the release notes for 6.1.3:


Cannot remove and re-add a host to a cluster protected by Guest Introspection and third-party security solutions

If you remove a host from a cluster protected by Guest Introspection and third-party security solutions by disconnecting it and then removing it from vCenter Server, you may experience problems if you try to re-add the same host to the same cluster.


I was able to replicate your issue by doing what was described here.  You may see some benefit moving the hosts out of the cluster, removing the guest introspection services, adding the hosts back to the cluster, and re-adding the guest introspection service.  I went as far as removing the hosts from vCenter, but that is likely not necessary.

Reply
0 Kudos
i1wan
Enthusiast
Enthusiast
Jump to solution

Hey larsonm‌,

Thanks for your answer, this was not an "removal" and then a "add" or the other way around...

This was a "new" implementation.

I even upgraded to 6.1.4 and deployed the Guest Introspection (after I removed it from 6.1.3) again and I still received the same error...

With moving the "host" out of the cluster you mean the ESXi host right? and not the VM (web, db, app) application machines right?

Reply
0 Kudos
larsonm
VMware Employee
VMware Employee
Jump to solution

Yes, host refers to ESXi host.

Reply
0 Kudos
i1wan
Enthusiast
Enthusiast
Jump to solution

well ...

I fixed it with your help!

Thanks for this...

This is what I needed to do in order to get it fixed:

  1. Remove Guest Introspection
  2. Shut down all the VM's that where on the ESXi hosts
  3. Bring the ESXi hosts into maintenance mode
  4. Drag-and-drop the hosts out of the cluster into the Data Center (level)
  5. Drag-and-drop the hosts back into the cluster
  6. Exit the maintenance mode of the ESXi hosts
  7. Rebooted the ESXi hosts
  8. clicked "resolve" on the "host preparation" section
  9. And installed the Guest Introspection back on together with "Data Security"
  10. Turned back on my VM's that where on the ESXi hosts

And finally I saw this screen 🙂

screenshot_476.png

Reply
0 Kudos
i1wan
Enthusiast
Enthusiast
Jump to solution

Here is a video of how I solved the problem:

Reply
0 Kudos
Kamuthiking
Enthusiast
Enthusiast
Jump to solution

Hi

As advised i have did the work around  but still i am getting the error

vs.jpg

error1jpg.jpg

error2jpg.jpg

While adding both Guest Introspection  and Data Security got the below message too

err4.jpgerror5.jpg

Please help

Reply
0 Kudos
Kamuthiking
Enthusiast
Enthusiast
Jump to solution

HI ,

Please can some one help on on the below  error i got the same error and tried the solution provided  but didn't help

Reply
0 Kudos
Kamuthiking
Enthusiast
Enthusiast
Jump to solution

Hi

Please find the screen shot

56109_56109.jpgvs.jpg

56110_56110.jpgerror1jpg.jpg

56111_56111.jpgerror2jpg.jpg

While adding both Guest Introspection  and Data Security got the below message too

56112_56112.jpgerr4.jpg56113_56113.jpgerror5.jpg

Please help

Reply
0 Kudos