VMware Cloud Community
twd711
Contributor
Contributor

Update Manager/UMDS Error (Disconnect Environment)

I have update manager setup correctly within one of our three environments and have been able to patch our servers with no problem. I have two other environments (these two are disconnected however) which are both managed by separate instances of VCenter. I was wondering what the best approach would be to patching these disconnect servers. I have read the VMware guides and have tried downloading all patches using UMDS, exporting the patches to an external USB, and then trying to import them into the disconnect environment's VCenters but have been unsuccessful in the import. Not sure if anyone has had any luck with this and if they have any tips on how to do this successfully.

Here is my problem. I try using the following command to import the patches

vmware-updateDownloadCli.exe --update-patch e:/vmpatches --config-import esx --vc-user vcadmin --> e:/vmpatches it the local directory on VCenter where the patches are located

It looks like it is working and then I get the "Download/Import Task Failed"error after a bit. I then go into VI Client to check the details and it tells me, "Failed to import the update signatures and update packages from E:/VMpatches. Downloading host update metadata failed after trying 1 time"

Any ideas?

Reply
0 Kudos
7 Replies
twd711
Contributor
Contributor

Still receiving the error and have seen this problem in some other posts but have not seen a solution. I have attached my output in case this helps at all.

C:\Program Files\VMware\Infrastructure\Update Manager>"C:\Program Files\VMware\Infrastructure\Update Manager\vmware-updateDownloadCli.exe" --update-path e:\host pdate --config-import esx --vc-user vcenteradmin -i verbose

2009-11-10 14:30:44.058 'App' 3216 info Current working directory: C:\ProgramFiles\VMware\Infrastructure\Update Manager

2009-11-10 14:30:44.058 'Libs' 3216 info HOSTINFO: Seeing Intel CPU, numCoresPerCPU 2 numThreadsPerCore 2.

2009-11-10 14:30:44.074 'Libs' 3216 info HOSTINFO: numPhysCPUs is 0, bumping to 1.

2009-11-10 14:30:44.074 'Libs' 3216 info HOSTINFO: This machine has 1 physicalCPUS, 1 total cores, and 2 logical CPUs.

2009-11-10 14:30:44.074 'ThreadPool' 3216 verbose TaskMax=10, IoMin=1, IoMax=21

2009-11-10 14:30:44.090 'Libs' 3216 info Using system libcrypto, version 90709

2009-11-10 14:30:45.980 'App' 3216 info Vmacore::InitSSL: doVersionCheck = true, handshakeTimeoutUs = 120000000

Please type in password for user <vcenteradmin>:

Connecting to VMware Update Manager Service to import updates

2009-11-10 14:30:55.621 'VcIntegrityProxy' 3216 info Connecting to host localhost on port 443 using protocol https

2009-11-10 14:30:55.980 'Libs' 3216 warning SSLVerifyCertAgainstSystemStore: Subject mismatch: VMware vs localhost

2009-11-10 14:30:55.980 'Libs' 3216 warning SSLVerifyCertAgainstSystemStore: The remote host certificate has these problems:

  • The host name used for the connection does not match the subject name on the host certificate

  • A certificate in the host's chain is based on an untrusted root.

2009-11-10 14:30:55.980 'Libs' 3216 warning SSLVerifyIsEnabled: failed to readregistry value. Assuming verification is disabled. LastError = 0

2009-11-10 14:30:55.980 'Libs' 3216 warning SSLVerifyCertAgainstSystemStore: Certificate verification is disabled, so connection will proceed despite the erro

r

2009-11-10 14:30:56.011 'VcIntegrityProxy' 3216 info Authenticating user vcentradmin

2009-11-10 14:30:56.058 'VcIntegrityProxy' 3216 info Logged in!

DEBUG - (vim.Extension.ServerInfo) [ (vim.Extension.ServerInfo) { dynamicType = <unset>, url = "https://192.168.1.101/vci/sdk/",

description = (vim.Description) { dynamicType = <unset>, label = "VMware Update Manager SOAP Server", summary = "VMware Update Manager SOAP server", }, company = "VMware, Inc.", type = "SOAP", adminEmail = (string) "a@vmware.com", "b@vmware.com" ,

}

]

2009-11-10 14:30:56.168 'ClientConnection' 3216 info Creating adapter...NFO - Successfully connected to Integrity.VcIntegrity

2009-11-10 14:30:56.215 'Libs' 3216 warning SSLVerifyCertAgainstSystemStore: Subject mismatch: VMware vs 192.168.1.101

2009-11-10 14:30:56.215 'Libs' 3216 warning SSLVerifyCertAgainstSystemStore: Te remote host certificate has these problems:

  • The host name used for the connection does not match the subject name on the hst certificate

  • A certificate in the host's chain is based on an untrusted root.

2009-11-10 14:30:56.215 'Libs' 3216 warning SSLVerifyIsEnabled: failed to read registry value. Assuming verification is disabled. LastError = 0

2009-11-10 14:30:56.230 'Libs' 3216 warning SSLVerifyCertAgainstSystemStore: Certificate verification is disabled, so connection will proceed despite the erro

r

DEBUG - User: VCenterAdmin; session: D16FC8A3-A3B8-4790826D-F462217358E5

DEBUG - Logged into VUM:

(integrity.UserSession) {

dynamicType = <unset>,

key = "9128BFF1-D0FE-4E2A-8CE2-98E2E154AF9A",

userName = "VCenterAdmin",

locale = "en",

}

INFO - Get configure file information successfully

INFO - Set configure file information successfully

INFO - Waiting for a task to complete...

INFO - Update state: running

INFO - Update Progress: 33%

INFO - Update state: running

INFO - Update Progress: 66%

INFO - Update state: running

INFO - Update state: running

INFO - Update state: running

INFO - Update state: running

INFO - Update state: error

INFO - Download/Import task failed.

For detailed information, please refer to Virtual Infrastruture Client.

C:\Program Files\VMware\Infrastructure\Update Manager>

Reply
0 Kudos
AndreTheGiant
Immortal
Immortal

I suppose that you mean --update-path e:\vmpatches and not --update-patch e:/vmpatches

Have you export the e:\vmpatches with this command?

vmware-umds -E --dest e:\vmpatches

Andre

Andrew | http://about.me/amauro | http://vinfrastructure.it/ | @Andrea_Mauro
Reply
0 Kudos
twd711
Contributor
Contributor

1) I suppose that you mean --update-path e:\vmpatches and not --update-patch e:/vmpatches

Please look at the output I posted.

C:\Program Files\VMware\Infrastructure\Update Manager>"C:\Program Files\VMware\Infrastructure\Update Manager\vmware-updateDownloadCli.exe" --update-path e:\host pdate --config-import esx --vc-user vcenteradmin -i verbose

2)Have you export the e:\vmpatches with this command? vmware-umds -E --dest e:\vmpatches

Yes

Reply
0 Kudos
twd711
Contributor
Contributor

Should I be able to copy everything (all the patches) from the Update Manager download folder from one VCenter Instance to the download folder for Update Manager in my disconnect environment and have update manager automatically recognize those patches?

Reply
0 Kudos
AndreTheGiant
Immortal
Immortal

You have to import the patches before.

Do you have enough free space on your vCenter Server disk?

Andre

Andrew | http://about.me/amauro | http://vinfrastructure.it/ | @Andrea_Mauro
Reply
0 Kudos
twd711
Contributor
Contributor

20GB of free space on the HD

Reply
0 Kudos
Texiwill
Leadership
Leadership

Hello,

Moved to Update Manager Forum.


Best regards,
Edward L. Haletky VMware Communities User Moderator, VMware vExpert 2009

Virtualization Practice Analyst[/url]
Now Available: 'VMware vSphere(TM) and Virtual Infrastructure Security'[/url]
Also available 'VMWare ESX Server in the Enterprise'[/url]
[url=http://www.astroarch.com/wiki/index.php/Blog_Roll]SearchVMware Pro[/url]|Blue Gears[/url]|Top Virtualization Security Links[/url]|
[url=http://www.astroarch.com/wiki/index.php/Virtualization_Security_Round_Table_Podcast]Virtualization Security Round Table Podcast[/url]

--
Edward L. Haletky
vExpert XIV: 2009-2023,
VMTN Community Moderator
vSphere Upgrade Saga: https://www.astroarch.com/blogs
GitHub Repo: https://github.com/Texiwill
Reply
0 Kudos