can not install vcenter 5.5

[quangspk]

Hello,

I can not install my vCenter Server. I already install vCenter Single Sign On but when install Web Client, Inventory Services..it is required Single Sign On then i enter the password i got the error below

This machine is workgroup, not a member domain. I already install asp.net 3.5 on this machine

thanks alot!!!

[abhilashhb]

Is single sign on on the same server? Did it give any FQDN errors when installing SSO? have you resolved the computer name in Hosts file atleast if the machine is in workgroup?

If you installing all components on one server why not use simple install?

[a_p_]

Which Windows version doe you use?

Please check whether the VMware Services are up and running (services.msc).

Paste the URL in a web browser. What does it return?

Do you see a "cert" folder with certificates in your temp folder (it's located under a {UUID...} directory)?

Do you see an "SSORegTool" folder in your temp folder (it's located under a {UUID...} directory)?

Compress/zip the vminst.log and attach it to a reply post.

André

[quangspk]

Abhilash wrote:

Is single sign on on the same server? Did it give any FQDN errors when installing SSO? have you resolved the computer name in Hosts file atleast if the machine is in workgroup?

If you installing all components on one server why not use simple install?

hello i got 2 warning when installing SSO

1- machine is not join domain

2- warning about FQDN

but the installation of SSO is still completed at result.

[quangspk]

a.p. wrote:

Which Windows version doe you use?

Please check whether the VMware Services are up and running (services.msc).

Paste the URL in a web browser. What does it return?

Do you see a "cert" folder with certificates in your temp folder (it's located under a {UUID...} directory)?

Do you see an "SSORegTool" folder in your temp folder (it's located under a {UUID...} directory)?

Compress/zip the vminst.log and attach it to a reply post.

André

I use windows 2008 R2

all vmware services is running

Do you see a "cert" folder with certificates in your temp folder (it's located under a {UUID...} directory)? ==> where it is?

Do you see an "SSORegTool" folder in your temp folder (it's located under a {UUID...} directory)? ==> where it is?

Compress/zip the vminst.log and attach it to a reply post. ==> where it is?

i used to install vcenter 5.1 normally, but i can not with vcenter 5.5

[a_p_]

Run set temp from the command line to find out the path to the temp folder. There should be some sub-folders with UUID-Names in it.

Check the folders at the time you see the error message!

André

[jtp755]

I am having this exact same problem today. Been at it for hours trying to figure it out actually 😃

Same set up: Server is a physical box not on domain and OS is Windows Server 2008 R2 SP1.

I checked the directories and log file you mention and there are no errors that I found. When I try to go to the URL: https://192.168.1.98:7444/lookupservice/sdk I get XML that looks like this:

<?xml version="1.0" encoding="UTF-8"?>

-<soapenv:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">

     -<soapenv:Body>

          -<soapenv:Fault>

               <faultcode>ServerFaultCode</faultcode>

               <faultstring>Unexpected EOF in prolog at [row,col {unknown-source}]: [1,0]</faultstring>

               -<detail>

                    <RuntimeFaultFault xmlns:vim25="urn:vim25" xmlns="urn:vim25" xsi:type="vim25:InvalidRequest"/>

               </detail>

          </soapenv:Fault>

     </soapenv:Body>

</soapenv:Envelope>

I do not see any UUID directories nor did I find a certs folder in the Temp directory where the log file was at.

I have verified the MD5 on the download, tried Simple Install, tried Custom install, etc. No luck!

There are no errors mentioned during install. I do get a "Script stopped running" message from the Autorun window but the VMware KB said that it was fine and was because of the IE timeout for the autorun window since it is running an IE window. SSO completes fine, the services start, and then when installing the Web Client I get that it could not contact the Lookup Service.

Any help would rock!

[jtp755]

I also completely wiped all Temp folders, rebooted, and tried the Simple Install again.

The installer is open to the error message. I do see the UUID folders now and the certs folder in them. The UUID directories are here: C:\Users\Administrator\AppData\Local\Temp\2 (not sure why there is a directory named 2.

Oh...and yes I have the IP/Hostname in the local Hosts file.

[jtp755]

I think this is the culprit but I am not sure why yet (this is in vm_ssoreg.log):

[2013-10-21 16:05:12,177 main  DEBUG com.vmware.vim.install.cli.RegTool] $Id: //depot/vicore/vicore-2013-rel/regtool/viregtool/src/main/java/com/vmware/vim/install/cli/RegTool.java#4 $

[2013-10-21 16:05:12,179 main  DEBUG com.vmware.vim.install.cli.RegTool] Executing command: checkVersion -d https://4SBIVCN01:7444/lookupservice/sdk --version-number 1.5

[2013-10-21 16:05:12,211 main  INFO  com.vmware.vim.install.impl.RegistrationProviderImpl] Intializing registration provider...

[2013-10-21 16:05:12,613 main  DEBUG com.vmware.vim.install.impl.LookupServiceAccess] Creating VMODL client for LookupService

[2013-10-21 16:05:12,615 main  INFO  com.vmware.vim.install.impl.CertificateGetter] Getting SSL certificates for https://4SBIVCN01:7444/lookupservice/sdk

[2013-10-21 16:05:12,924 main  DEBUG com.vmware.vim.install.impl.CertificateGetter] Establishing socket connection to 4SBIVCN01/192.168.1.98:7444. Timeout is 60000

[2013-10-21 16:05:13,897 main  DEBUG com.vmware.vim.install.impl.AdminServiceAccess] Creating client for SSO Admin on address: https://192.168.1.98:7444/sso-adminserver/sdk/vsphere.local

[2013-10-21 16:05:14,254 main  ERROR com.vmware.vim.install.impl.AdminServiceAccess] com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate assertion not verified and thumbprint not matched

[2013-10-21 16:05:14,255 main  DEBUG com.vmware.vim.install.impl.AdminServiceAccess]

com.vmware.vim.sso.admin.exception.CertificateValidationException: com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate assertion not verified and thumbprint not matched

  at com.vmware.vim.sso.admin.client.vmomi.impl.VmomiClientCommand.execute(VmomiClientCommand.java:97)

  at com.vmware.vim.sso.admin.client.vmomi.impl.VmomiClientCommand.executeEnsuringNoDomainError(VmomiClientCommand.java:186)

  at com.vmware.vim.sso.admin.client.vmomi.impl.AdminClientImpl.createServiceContent(AdminClientImpl.java:294)

  at com.vmware.vim.sso.admin.client.vmomi.impl.AdminClientImpl.<init>(AdminClientImpl.java:101)

  at com.vmware.vim.sso.admin.client.vmomi.VmomiClientFactory.createAdminClient(VmomiClientFactory.java:60)

  at com.vmware.vim.sso.admin.client.vmomi.VmomiClientFactory.createAdminClient(VmomiClientFactory.java:50)

  at com.vmware.vim.install.impl.AdminServiceAccess.createSsoClient(AdminServiceAccess.java:352)

  at com.vmware.vim.install.impl.AdminServiceAccess.<init>(AdminServiceAccess.java:160)

  at com.vmware.vim.install.impl.AdminServiceAccess.createDiscover(AdminServiceAccess.java:238)

  at com.vmware.vim.install.impl.RegistrationProviderImpl.<init>(RegistrationProviderImpl.java:57)

  at com.vmware.vim.install.RegistrationProviderFactory.getRegistrationProvider(RegistrationProviderFactory.java:143)

  at com.vmware.vim.install.RegistrationProviderFactory.getRegistrationProvider(RegistrationProviderFactory.java:116)

  at com.vmware.vim.install.cli.commands.CommandArgumentsParser.createServiceProvider(CommandArgumentsParser.java:239)

  at com.vmware.vim.install.cli.commands.CommandArgumentsParser.parseCommand(CommandArgumentsParser.java:101)

  at com.vmware.vim.install.cli.commands.CommandFactory.createCheckVersionCommand(CommandFactory.java:375)

  at com.vmware.vim.install.cli.RegTool.process(RegTool.java:158)

  at com.vmware.vim.install.cli.RegTool.main(RegTool.java:38)

Caused by: com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate assertion not verified and thumbprint not matched

  at com.vmware.vim.vmomi.client.http.impl.ThumbprintTrustManager$HostnameVerifier.verify(ThumbprintTrustManager.java:267)

  at com.vmware.vim.vmomi.client.http.impl.ThumbprintTrustManager$HostnameVerifier.verify(ThumbprintTrustManager.java:230)

  at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:339)

  at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:123)

  at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:147)

  at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:108)

  at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:415)

  at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:641)

  at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:576)

  at com.vmware.vim.vmomi.client.http.impl.HttpExchange.run(HttpExchange.java:111)

  at com.vmware.vim.vmomi.client.http.impl.HttpProtocolBindingImpl.send(HttpProtocolBindingImpl.java:98)

  at com.vmware.vim.vmomi.client.common.impl.MethodInvocationHandlerImpl$CallExecutor.sendCall(MethodInvocationHandlerImpl.java:533)

  at com.vmware.vim.vmomi.client.common.impl.MethodInvocationHandlerImpl$CallExecutor.executeCall(MethodInvocationHandlerImpl.java:514)

  at com.vmware.vim.vmomi.client.common.impl.MethodInvocationHandlerImpl.completeCall(MethodInvocationHandlerImpl.java:302)

  at com.vmware.vim.vmomi.client.common.impl.MethodInvocationHandlerImpl.invokeOperation(MethodInvocationHandlerImpl.java:272)

  at com.vmware.vim.vmomi.client.common.impl.MethodInvocationHandlerImpl.invoke(MethodInvocationHandlerImpl.java:169)

  at com.sun.proxy.$Proxy25.retrieveServiceContent(Unknown Source)

  at com.vmware.vim.sso.admin.client.vmomi.impl.AdminClientImpl$1.actionCommand(AdminClientImpl.java:299)

  at com.vmware.vim.sso.admin.client.vmomi.impl.AdminClientImpl$1.actionCommand(AdminClientImpl.java:294)

  at com.vmware.vim.sso.admin.client.vmomi.impl.VmomiClientCommand.execute(VmomiClientCommand.java:88)

  ... 16 more

Caused by: javax.net.ssl.SSLException: hostname in certificate didn't match: <192.168.1.98> != <"ssoserver> OR <192.168.1.99>

  at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:220)

  at org.apache.http.conn.ssl.StrictHostnameVerifier.verify(StrictHostnameVerifier.java:61)

  at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:149)

  at com.vmware.vim.vmomi.client.http.impl.ThumbprintTrustManager$HostnameVerifier.verify(ThumbprintTrustManager.java:253)

  ... 35 more

The certs folder is now empty so i am going to rerun the installer and see if I cannot copy them out before they get removed.

EDIT: Even after restarting the install, the certs folder remains empty!

[jtp755]

I figured out the issue for me!

The server has two physical NICs each with their own IP address. When the Web Client installation was running and tried verifying the certs, it was looking at the second IP address for some reason.

I disabled the second NIC and the install ran with zero issues!

Hope this helps someone else out....

[quangspk]

jtp755 wrote:

I figured out the issue for me!

The server has two physical NICs each with their own IP address. When the Web Client installation was running and tried verifying the certs, it was looking at the second IP address for some reason.

I disabled the second NIC and the install ran with zero issues!

Hope this helps someone else out....

how about the warning " the machine is not join domain"

[jtp755]

It was still there. Its not a warning....just an information notice.

Everything is working great so far!

one thing to note though that I had a hard time figuring out. The real admin account to log in to is Administrator@vsphere.local and use the password you set during install.

[proden20]

I ran into a similar issue and found the installer was allowing me to pass the hostname without a domain extension as the fqdn.  Adding a dns suffix to the host allowed me to build SSO/vCenter components on top of a workgroup Windows Server.

"Cannot connect to vCenter Single Sign On" / Lookup Service while installing Web Client 5.5 in home ...

[Elmalhi]

Check the Reverse DNS and PTR  Record in your DNS server as well.

[jtp755]

Any luck with any of these so far?

Have you been able to get everything up and running?

[DTISOFT]

hi

I figured out the issue for me!

I added an entry on the windows host file like this:

« vCenter IP»   «hostname.local»

Exemple:

10.10.10.10     vcenter.local

and now I can install the web client part.

[senthilgmtech]

Me too experienced same error,after spending many hours and referring the blogs got an answer.

In DNS record found multiple entries with different IP's for Same host name and in local host file wrong IP was hard coded.

after clearing duplicates in DNS and removing host entry it got installed successfully.Thanks to all for triggering me to find the issue...it's simple but first time!

[vmjoe]

I can confirm, a second network card causes this error. (vCenter is on W2K8 as domain member)

Disabling the second network card (in Windows) and re-run the installer worked.