vSAN witness host patching using images

[Niyot1]

I am trying to patch the vSAN witness host but get an error -  Host not compatible with image.    All the other esxi hosts in the cluster remediate successfully.   Seeing as I can no longer go back to baselines how do I get to update the witness.  any ideas?   PS already opened a ticket with VMWare, that was 2 weeks ago. still waiting 😞 

[CallistoJag]

The vSAN witness is not usually a real host but a virtual appliance in a remote site. It is only reported as a host by vCenter (by design). This could be your issue?

[depping]

Which version are you running? As we don't support images for 7.0 U2 and lower, only U3 and up.

[Niyot1]

Hi 

Running version 7.0 U3j.    for to say that all the criteria has been met. 

• vCenter Server must be version 7.0 Update 3 and later.
• The witness host must be ESXi version 7.0 Update 2 and later.> this was verified already
• The witness host must be a virtual server and not a physical server. yes 
• The witness host must be a dedicated witness host and not a shared witness host. yes

[depping]

Can you create a screenshot of the error, and does it give any specifics below that?

[Niyot1]

Got this KB from support - https://kb.vmware.com/s/article/90527.

[depping]

The witness has some strange drivers listed, did you apply an add-on or something to the witness in the past?

I am deploying a virtual lab myself just to see if I can reproduce it...

[Niyot1]

Nope.   Always used baselines and only just switched to using images. 

[depping]

Just testing it here in my lab and it just works fine... No idea why you have that issue. Maybe roll out a new Witness and replace the current one?

[Niyot1 · Accepted solution]

Thanks for looking and your quick responses.  I got VMWare support to check it out.  Turns out those drivers were the culprit and had to be removed and VMW vib drivers installed instead.   Must have been installed during the baseline days.   Interestingly,   the baseline patch didn't complain. 

[Tibmeister]

Little confused, I thought that you can't use vLCM to patch a Witness Appliance for a 2-node cluster and the 2-node cluster?  Are you saying if we have a Witness Appliance with only a single 2-Node cluster attached then we could use vLVM to patch with an image for both the cluster and witness?

[Niyot1]

I have a 6 node stretched cluster.    So what you mentioned here does not really apply to this environment. 

[Tibmeister]

Sorry, was replying to @depping, but correct, it shouldn't apply unless you are using a shared witness.

[depping]

I am not sure I am following you? We are talking about a 6-node cluster here? I didn't mention 2-node or shared witness either?