Esxcli command against specific host not working from vMA

[RanjnaAggarwal]

I am facing an issue where esxcli commands are not working against specific host but vicfg commands are working against this host. Sharing the screenshot. Any suggestions?

[npadmani]

last time I experienced this, it was wrong SSL thumbprint which got added by mistake.

had to take SSL thumbprint from ESXi host and added it again using credstore_admin.pl and it worked.

I actually ran the credstore_admin.pl for this host with host FQDN and IP address both one by one and it got resolved.

[RanjnaAggarwal]

Thanks Worked

[RanjnaAggarwal]

This means executing vicfg commands doesn't check certificate trust but esxcli checks the validation of certs. Any Official documentation where i can find this?

[npadmani]

ESXCLI in vSphere 6.0 is more secure than in earlier versions of vSphere and requires a trust relationship between the system on which you run an ESXCLI vCLI command and the target vCenter Server system or ESXi host.

Ref: Thumbprint error when running ESXCLI command as a vCLI command (2108416) | VMware KB

regarding vicfg-*, I haven't seen it in documentation anywhere, I am sure it must be there though. But tests also proves that vicfg-* would run as it is, but esxcli wouldn't in vSphere 6.0

[RanjnaAggarwal]

Thumbprint error i have seen many times as stated in KB but as in this case it was not generating any thumbprint error while executing the command. Even the error message was not giving much detail in this case.