I have update manager setup correctly within one of our three environments and have been able to patch our servers with no problem. I have two other environments (these two are disconnected however) which are both managed by separate instances of VCenter. I was wondering what the best approach would be to patching these disconnect servers. I have read the VMware guides and have tried downloading all patches using UMDS, exporting the patches to an external USB, and then trying to import them into the disconnect environment's VCenters but have been unsuccessful in the import. Not sure if anyone has had any luck with this and if they have any tips on how to do this successfully.
Here is my problem. I try using the following command to import the patches
vmware-updateDownloadCli.exe --update-patch e:/vmpatches --config-import esx --vc-user vcadmin --> e:/vmpatches it the local directory on VCenter where the patches are located
It looks like it is working and then I get the "Download/Import Task Failed"error after a bit. I then go into VI Client to check the details and it tells me, "Failed to import the update signatures and update packages from E:/VMpatches. Downloading host update metadata failed after trying 1 time"
Any ideas?
Still receiving the error and have seen this problem in some other posts but have not seen a solution. I have attached my output in case this helps at all.
C:\Program Files\VMware\Infrastructure\Update Manager>"C:\Program Files\VMware\Infrastructure\Update Manager\vmware-updateDownloadCli.exe" --update-path e:\host pdate --config-import esx --vc-user vcenteradmin -i verbose
2009-11-10 14:30:44.058 'App' 3216 info Current working directory: C:\ProgramFiles\VMware\Infrastructure\Update Manager
2009-11-10 14:30:44.058 'Libs' 3216 info HOSTINFO: Seeing Intel CPU, numCoresPerCPU 2 numThreadsPerCore 2.
2009-11-10 14:30:44.074 'Libs' 3216 info HOSTINFO: numPhysCPUs is 0, bumping to 1.
2009-11-10 14:30:44.074 'Libs' 3216 info HOSTINFO: This machine has 1 physicalCPUS, 1 total cores, and 2 logical CPUs.
2009-11-10 14:30:44.074 'ThreadPool' 3216 verbose TaskMax=10, IoMin=1, IoMax=21
2009-11-10 14:30:44.090 'Libs' 3216 info Using system libcrypto, version 90709
2009-11-10 14:30:45.980 'App' 3216 info Vmacore::InitSSL: doVersionCheck = true, handshakeTimeoutUs = 120000000
Please type in password for user <vcenteradmin>:
Connecting to VMware Update Manager Service to import updates
2009-11-10 14:30:55.621 'VcIntegrityProxy' 3216 info Connecting to host localhost on port 443 using protocol https
2009-11-10 14:30:55.980 'Libs' 3216 warning SSLVerifyCertAgainstSystemStore: Subject mismatch: VMware vs localhost
2009-11-10 14:30:55.980 'Libs' 3216 warning SSLVerifyCertAgainstSystemStore: The remote host certificate has these problems:
The host name used for the connection does not match the subject name on the host certificate
A certificate in the host's chain is based on an untrusted root.
2009-11-10 14:30:55.980 'Libs' 3216 warning SSLVerifyIsEnabled: failed to readregistry value. Assuming verification is disabled. LastError = 0
2009-11-10 14:30:55.980 'Libs' 3216 warning SSLVerifyCertAgainstSystemStore: Certificate verification is disabled, so connection will proceed despite the erro
r
2009-11-10 14:30:56.011 'VcIntegrityProxy' 3216 info Authenticating user vcentradmin
2009-11-10 14:30:56.058 'VcIntegrityProxy' 3216 info Logged in!
DEBUG - (vim.Extension.ServerInfo) [ (vim.Extension.ServerInfo) { dynamicType = <unset>, url = "https://192.168.1.101/vci/sdk/",
description = (vim.Description) { dynamicType = <unset>, label = "VMware Update Manager SOAP Server", summary = "VMware Update Manager SOAP server", }, company = "VMware, Inc.", type = "SOAP", adminEmail = (string) "a@vmware.com", "b@vmware.com" ,
}
]
2009-11-10 14:30:56.168 'ClientConnection' 3216 info Creating adapter...NFO - Successfully connected to Integrity.VcIntegrity
2009-11-10 14:30:56.215 'Libs' 3216 warning SSLVerifyCertAgainstSystemStore: Subject mismatch: VMware vs 192.168.1.101
2009-11-10 14:30:56.215 'Libs' 3216 warning SSLVerifyCertAgainstSystemStore: Te remote host certificate has these problems:
The host name used for the connection does not match the subject name on the hst certificate
A certificate in the host's chain is based on an untrusted root.
2009-11-10 14:30:56.215 'Libs' 3216 warning SSLVerifyIsEnabled: failed to read registry value. Assuming verification is disabled. LastError = 0
2009-11-10 14:30:56.230 'Libs' 3216 warning SSLVerifyCertAgainstSystemStore: Certificate verification is disabled, so connection will proceed despite the erro
r
DEBUG - User: VCenterAdmin; session: D16FC8A3-A3B8-4790826D-F462217358E5
(integrity.UserSession) {
dynamicType = <unset>,
key = "9128BFF1-D0FE-4E2A-8CE2-98E2E154AF9A",
userName = "VCenterAdmin",
locale = "en",
}
INFO - Get configure file information successfully
INFO - Set configure file information successfully
INFO - Waiting for a task to complete...
INFO - Download/Import task failed.
For detailed information, please refer to Virtual Infrastruture Client.
C:\Program Files\VMware\Infrastructure\Update Manager>
I suppose that you mean --update-path e:\vmpatches and not --update-patch e:/vmpatches
Have you export the e:\vmpatches with this command?
vmware-umds -E --dest e:\vmpatches
Andre
1) I suppose that you mean --update-path e:\vmpatches and not --update-patch e:/vmpatches
Please look at the output I posted.
C:\Program Files\VMware\Infrastructure\Update Manager>"C:\Program Files\VMware\Infrastructure\Update Manager\vmware-updateDownloadCli.exe" --update-path e:\host pdate --config-import esx --vc-user vcenteradmin -i verbose
2)Have you export the e:\vmpatches with this command? vmware-umds -E --dest e:\vmpatches
Yes
Should I be able to copy everything (all the patches) from the Update Manager download folder from one VCenter Instance to the download folder for Update Manager in my disconnect environment and have update manager automatically recognize those patches?
You have to import the patches before.
Do you have enough free space on your vCenter Server disk?
Andre
20GB of free space on the HD
Hello,
Moved to Update Manager Forum.
Best regards,
Edward L. Haletky VMware Communities User Moderator, VMware vExpert 2009
Virtualization Practice Analyst[/url]
Now Available: 'VMware vSphere(TM) and Virtual Infrastructure Security'[/url]
Also available 'VMWare ESX Server in the Enterprise'[/url]
[url=http://www.astroarch.com/wiki/index.php/Blog_Roll]SearchVMware Pro[/url]|Blue Gears[/url]|Top Virtualization Security Links[/url]|
[url=http://www.astroarch.com/wiki/index.php/Virtualization_Security_Round_Table_Podcast]Virtualization Security Round Table Podcast[/url]