Upgrade from 6.5 to 6.7 fails: "

[hwaltari]

All,

I'm trying to upgade a 2 host cluster from 6.5 to 6.7U3. But remediation fails in early stage. The messaage is

"Could not stage image profile '(Updated) HPE-ESXi-6.7.0-Update3-iso-Gen9plus-670.U3.10.5.0.48': ('MSCC_bootbank_smartpqi_1.0.4.3008-1OEM.670.0.0.8169922', 'Could not find a trusted signer.')"

What does that actually mean and how to correct the issue?

These are HP DL380G9 -servers.

[Nawals]

Can you confirm are you using ISO image for upgrade or offline bundle?

[daphnissov]

Nawals​ how are you determining that the smartpqi driver is actually unused by OP? Unless you know this isn't needed by the existing hardware, it's not a good idea to recommend to someone that they blindly remove a driver from a system.

[Nawals]

@daphnissov - I worked on HP Proliant server many years and face such issue. So ask to check if not in used. Anyway I remove my replied.

[daphnissov]

Yeah, I get that, but just because you weren't using that driver and could remove it doesn't mean someone else isn't using it. The error message means the signing can't be verified. Removing it is like taking a sledgehammer to it and not addressing the real issue.

[hwaltari]

All,

The image I'm using is: HPE-ESXi-6.7.0-Update3-iso-Gen9plus-670.U3.10.5.0.48.iso

The smartpqi driver is at least loaded currently

~] esxcli software vib get -n smartpqi
MSCC_bootbank_smartpqi_1.0.0.1060-1OEM.650.0.0.4598673
   Name: smartpqi
   Version: 1.0.0.1060-1OEM.650.0.0.4598673
   Type: bootbank
   Vendor: MSCC
   Acceptance Level: VMwareCertified
   Summary: SmartPqi Native driver
   Description: VMware native driver module for Microsemi SmartPqi controllers
...

[Nawals]

Okay. So you upgraded ESXi successfully or still facing same issue? Is still facing issue I would suggest to use offline bundle.zip file for upgrade instead of ISO.

[hwaltari]

Hi, Nawals​

I have not upgraded, as the remediation process fails.

Thanks for the suggestion. i just wonder if the driver is not signed, as I suspect in the ISO, how would an offline bundle be any different? Ofc my experience with this kind of issues is limitedm and I  would like to hear your opinion.

[Nawals · Accepted solution]

Okay. Offline bundle is zip file which you can download from VMware portal based on vendor hardware. This is very easy way to upgrade using single command and reboot.

Following steps:

1. First download customized offline bundle based on hardware model which you are using.

2. Upload to datastore

3. SSH to target ESXi Host

4. Browse datastore using cd /vmfs/volumes

Below given example command for upgrade ESXi using offline bundle.

# esxcli software sources profile list -d "/vmfs/volumes/5b48662e-e1e205e8-92b7-0017a477240c/Mware-ESXi-6.5.0-Update2-9298722-HPE-preGen9-650.U2.9.6.8.3-Sep2018-depot.zip"

Name                                           Vendor                      Acceptance Level

---------------------------------------------  --------------------------  ----------------

HPE-ESXi-6.5.0-Update2-preGen9-650.U2.9.6.8.3  Hewlett Packard Enterprise  PartnerSupported

#esxcli software profile update -d /vmfs/volumes/5b48662e-e1e205e8-92b7-0017a477240c/ISO/VMware-ESXi-6.5.0-Update2-9298722-HPE-preGen9-650.U2.9.6.8.3-Sep2018-depot.zip -p aboveProfilename

_______________________________________________________________________________________________________

"Did you find this helpful? Let us know by completing this survey (takes 1 minute!)"

[hwaltari]

Thanks. I'll try that and see what happens.

[Sooperfly]

I had the same issue with an upgrade on a Dell server. This worked for me. The offline bundle was slighly a version less. Upgrade with original baseline completed after applying this.

[joseph_balon]

Hello,

Do you need a paid service account to get to ESXi 6.7 upgrades?  I can only see 6.0 and 6.5 with my account.

Thanks,