Cannot access vCSA 5.5 with local root account

[AlphaAdmin]

We are upgrading from ESXi 5.0 to 5.5 U2. Per the corresponding checklist I first upgraded vCSA to 5.5.

The upgraded vCSA 5.5 is giving me login problems. I can login to the vSphere admin GUI (port 5480) and the web client (port 9443) using the local "root" account. However if I try to access vCSA from an application (ie VUM or Backup Exec) the root credentials get rejected (as if I am using wrong username/password). Any ideas why? FYI we are using Active Directory and embedded DB & SSO. I attach screenshot of the summary page.

Thanks! 🙂

[AlphaAdmin]

Actually a little amendment to the above, I CANNOT login the web-client as local root, I can only login to the vCSA admin GUI (vCSA:5480). Also FYI the root password is set as non-expiring. Thx.

[vuzzini]

Could you please login to vSphere client of vCSA (with SSO admin credentials "administrator@vsphere.local") and verify whether root account is added with administrator role under the permissions tab of vCenter.

[raog · Accepted solution]

If it was working earlier and you changed from a default domain to a proper AD/LDAP, you can try with the username "root@localos"

Regards

Girish

[AlphaAdmin]

Hello and thanks for the reply. root@localos did the trick for the vSphere web client! 🙂

I am still having problem access Linux VAs (including the vCSA itself) from Backup Exec. Before the vCSA upgrade I used to access them with "root". Now I am trying both with root and with root@localos and they both fail. Any ideas about this? Thx!

[raog]

When you did an upgrade, you would have created a new VM in essence and for the backup exec it would appear so.  The backup exec agent might no longer be available on the new VM.

Regards

Girish

[Lenora_BE]

Make sure the Remote Agent service is running and then repush the remote agent from the Backup Exec Console.

[AlphaAdmin]

Thanks for the replies. This is in regards to VAs (Virtual Appliances) not Windows VMs. I don't think there is a BackupExec agent for VAs. In general I read at some post that the whole credentials test is bogus for VAs, the real test is whether backups work and they seem to be okay in this case (I need a couple more days to confirm). 

[Lenora_BE]

gotcha and yes, my mistake, there are no BEAgents for VA's.  Thankyou for responding and clarifying.  Cheers!

[AlphaAdmin]

Just an FYI for other people, the credentials-testing function in BackupExec may report failure but the actual backups may work. In such case the former can be disregarded.

[raog]

Good to know. Thanks for posting back!

Regards

Girish