VMware Cloud Community
StephenMoll
Expert
Expert

How to Patch Isolated VCSA 6.7.0.20000 build 10244857

I have an isolated VCSA which has no access to the Internet.

I have mounted a full patch ISO : VMware-vCenter-Server-Appliance-6.7.0.42100-15505668-patch-FP.iso

However when I run "software-packages stage --iso"

I get the following response:

[2020-02-05T14:53:28.036] : ISO mounted successfully

[2020-02-05T14:53:30.036] : ISO unmounted successfully

[2020-02-05T14:53:30.036] : Target patch version is not supported.

What am I missing here? Is there a trick to get this working?

Reply
0 Kudos
14 Replies
T180985
Expert
Expert

what build number are you upgrading from?

Please mark helpful or correct if my answer resolved your issue. How to post effectively on VMTN https://communities.vmware.com/people/daphnissov/blog/2018/12/05/how-to-ask-for-help-on-tech-forums
Reply
0 Kudos
StephenMoll
Expert
Expert

As stated in the title 10244857.

Reply
0 Kudos
T180985
Expert
Expert

you need to upgrade to 6.7 U1b before you can upgrade to U3+

Please mark helpful or correct if my answer resolved your issue. How to post effectively on VMTN https://communities.vmware.com/people/daphnissov/blog/2018/12/05/how-to-ask-for-help-on-tech-forums
Reply
0 Kudos
StephenMoll
Expert
Expert

OK I'll give that a whirl. Thanks.

Reply
0 Kudos
StephenMoll
Expert
Expert

I tried "VMware-vCenter-Server-Appliance-6.7.0.21000-11726888-patch-FP.iso" and that worked.

I then tried the "VMware-vCenter-Server-Appliance-6.7.0.42100-15505668-patch-FP.iso" and this still brings up "Target patch version is not supported"

So I tried "VMware-vCenter-Server-Appliance-6.7.0.32000-14070457-patch-FP.iso" and that also gave "Target patch version is not supported".

So I tried "VMware-vCenter-Server-Appliance-6.7.0.30000-13010631-patch-FP.iso", which then worked

Back to build 15505668? Nope still doesn't work.

So I do "VMware-vCenter-Server-Appliance-6.7.0.32000-14070457-patch-FP.iso", which works.

Back to build 15505668 again? which still doesn't work.

Now its late and I give up for now.

Grrrr!

Reply
0 Kudos
T180985
Expert
Expert

Annoyingly there are no release notes for U3c yet so its unclear whether there are any other pre-requisites.... Just out of interest, have you tried installing it via the VAMI?

Please mark helpful or correct if my answer resolved your issue. How to post effectively on VMTN https://communities.vmware.com/people/daphnissov/blog/2018/12/05/how-to-ask-for-help-on-tech-forums
Reply
0 Kudos
StephenMoll
Expert
Expert

No, the system is isolated (as are all our systems), so there is no access to the Internet, and no web-based services on the network at all on this one.

Reply
0 Kudos
T180985
Expert
Expert

You can still use VAMI when using the offline patch, you can specificy the CD drive when searching for updates rather than using the web. Unless youre saying even the VAMI is inaccessible from your network

Please mark helpful or correct if my answer resolved your issue. How to post effectively on VMTN https://communities.vmware.com/people/daphnissov/blog/2018/12/05/how-to-ask-for-help-on-tech-forums
Reply
0 Kudos
a_p_
Leadership
Leadership

IMO the documentation is really vague regarding updating/patching the vCSA.

On some places it states that all patches are cumulative, which apparently is not the case, and on others they write about difference between builds that are released on the download page vs. the patch portal, and then you have the release notes which sometimes contain information about unsupported updates, ...

For me it definitely requires clarification in a way everyone can understand!

Anyway, from what I read between the lines, it should be possible to update directly to the latest build that's available on the download page- currently is 6.7.0.42000-15132721 - which states "Use this package to update from any released VMware vCenter Server Appliance 6.7 to VMware vCenter Server 6.7U3b Appliance".

Assuming that the fp.iso has the same content as the updaterepo.zip, the fp.iso should work too. If it doesn't, then - as a last resort - the initial Update 3 release 6.7.0.40000-14367737 is what you may use as an intermediate step to Update 3c.

Note: From what I undaerstand, installation images on the patch portal, which are not available from the download page, are only meant for recovery/restore purposes.

André

Reply
0 Kudos
StephenMoll
Expert
Expert

It has just successfully done "VMware-vCenter-Server-Appliance-6.7.0.40000-14367737-patch-FP.iso".

So I'd guess the latest will now work, I'll try shortly to see if it at least stages, once it has finished rebooting.

I hadn't looked at using the VAMI, because in the past I had thought that it needed an Internet connection to be useful. Secondly, we try and use techniques that we can eventually script, as all this stuff may need to be automated at some point, which makes GUI based techniques unattractive.

Reply
0 Kudos
StephenMoll
Expert
Expert

So after doing "VMware-vCenter-Server-Appliance-6.7.0.40000-14367737-patch-FP.iso" I mounted "VMware-vCenter-Server-Appliance-6.7.0.42100-15505668-patch-FP.iso".

I did a stage of the iso on the CLI and this time no complaints, it staged correctly. I then unstaged it and had a look at the VAMI update. Yeah it looks pretty, but as I thought it would be tricky to automate, I would also argue that even to produce step-by-step written instructions would be easier using  the CLI method, but maybe that's just me.

In any event at least the VCSA is up-to-date now.

Reply
0 Kudos
ChristoBresler
Contributor
Contributor

Hi All,

We have a very similar issue here. 

I have two Vcenter Servers both on 6.7.0.44000 - Build - 16046470 
(These servers are in seperate physical locations)

I am trying to patch to  "VMware-vCenter-Server-Appliance-6.7.0.50000-18485166-patch-FP" on both. 

The first Vcenter Server (Lets call it Vcenter_1) Fails with the following :

Command> software-packages stage --iso
[2021-11-05T13:09:15.309] : ISO mounted successfully
[2021-11-05T13:09:16.309] : ISO unmounted successfully
[2021-11-05T13:09:16.309] : Target patch version is not supported.


The second Vcenter Server ( Lets call it Vcenter_2) doesnt have this issue and stages the iso without issues  - Output below  :

Command> software-packages stage --iso
[2021-11-05T13:09:06.309] : ISO mounted successfully

VMWARE END USER LICENSE AGREEMENT .......ect

Press ENTER key for more or Ctrl+c to quit

My Question is how is it possible that Vcenter_1 fails when Vcenter_2 sucseeds and stages the iso but both Vcenter servers are the same Version and Build?

I personally cant understand why one would work and one doesnt

Any assistance would be appriciated.

 

 

 

Reply
0 Kudos
Ajay1988
Expert
Expert

VCSA 6.7.0.20000 build 10244857 >> This is 6.7 U1
VMware-vCenter-Server-Appliance-6.7.0.42100-15505668-patch-FP.iso >> 6.7 U3c >>This includes Photos OS security patch .

This path is unsupported. You should always update the base version to 6.7 U3 and then the security patch. Its been same for ages now. https://docs.vmware.com/en/VMware-vSphere/6.7/rn/vcenter-server-appliance-photonos-security-patches....

In short anything which you see below for 6.7 is base versions. You can go to the specific base version of that update. Like U3/U3a/U3b then to a security patch like U3c/U3d.
https://customerconnect.vmware.com/en/downloads/details?downloadGroup=VC67U3O&productId=742&rPId=760... (All base versions)

vCSA/ESXi security patches will always be available here only.
https://customerconnect.vmware.com/patch/

If you think your queries have been answered
Mark this response as "Correct" or "Helpful".

Regards,
AJ
Reply
0 Kudos
ChristoBresler
Contributor
Contributor

I think you might have my comment confused with the origional posters issue. 
My issue is similar but retains to different versions. 

I have opened a new forurm question to resolve the confusion if you would like to reply with more correct or relatable information that might help my issue. 

Apologies for the confusion. 

 

Reply
0 Kudos