vCenter upgrade from 5.1 to 6.0 fails with error

[mgoetsch]

Hello together!

We wanted to do an upgrade from vCenterServer 5.1 to 6.0.

But we get an error after I have to enter the vCenter Server Credentials.

It is the following error:

Error: IP Address: xxx.xxx.xxx.xxx is present in certificate subject alt names but under DNS key.

This ip address cannot be used for installation.

Resolution: use an ip address or dns name that is present in the certificate subject alt names or regenerate ssl certificate for sso before continuing.

I have no idea what to do.

[rcporto]

You will need to regenerate the vCenter certificates before upgrade to version 6, see: VMware KB: Upgrading from vSphere 5.x to 6.0 reports that the SSL certificates are not compatible

[mgoetsch]

Thanks for the reply.

When I do the steps provided in the kb, I get an error creating the certificate:

problems making Certificate Request

8148:error:0D07A098:asn1 encoding routines:ASN1_mbstring_ncopy:string too short:

.\crypto\asn1\a_mbstr.c:147:minsize=1

I edit the certificate request as the folowing:

[ req ]
default_bits = 2048
default_keyfile = rui.key
distinguished_name = req_distinguished_name
encrypt_key = no
prompt = no
string_mask = nombstr
req_extensions = v3_req

[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = digitalSignature, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth, clientAuth
subjectAltName = DNS: name of the vCenter Server, IP:IP of the vCenter Server, DNS:name of the DNS server

[ req_distinguished_name ]
countryName = CH
stateOrProvinceName =
localityName =
0.organizationName =
organizationalUnitName =
commonName = FQDN of the vCenter server

Is that correct?

[CrashTheGooner]

Dear Mgotsch

• Re-installing the vCenter Server stack.

1. Completely uninstall in this order:
   
   vCenter Server
   vCenter Inventory Service
   vSphere Web Client
   vCenter Single Sign-On
   
   
2. Rename the following directories under C:\ProgramData\VMware to ensure new certificates are generated using the correct hostname.
   
   
   1. CIS to CIS.old
   2. Infrastructure to Infrastructure.old
   3. SSL to SSL.old
   4. VMware VirtualCenter to VMware VirtualCenter.old
   5. vSphere Web Client to vSphere Web Client.old
      
      
3. Re-install vCenter Single Sign-On, vSphere Web Client, vCenter Inventory Service, and vCenter Service, and  ensure to reconnect to existing database.
   
   
4. Reconnect all of the hosts to the vCenter Server.

[mgoetsch]

After the uninstall process you mean install 5.1 first and then do the upgrade?

[AnatolyVilchins · Accepted solution]

I think yeah, that is what he meant.

Quick question: have you checked with HCL before upgrading?

VMware Compatibility Guide: System Search 

[CrashTheGooner]

Ideally I think upgrade method is 5.1 > 5.5U2 >6.0
Kindly follow this video for basic simple upgrade :

VMware vCenter Server 5.1 to 6.0 Upgrade - YouTube

[mgoetsch]

The upgrade to 5.5 U3 was succesful

But You were right our host is not ind the HCL.

Thanks for the help.

[ompalsharma]

Most reliable option to upgrade (5.1 to 6.0) successfully:

Reinstall the vCenter Server stack:

Uninstall vCenter Server in this order:

            vCenter Server

            vCenter Inventory Service

            vSphere Web Client

            vCenter Single Sign-On

Rename the following directories under C:\ProgramData\VMware to ensure new certificates are           generated using the correct hostname.

            CIS to CIS.old

Infrastructure to Infrastructure. Old

            SSL to SSL.old

            VMware VirtualCenter to VMware VirtualCenter.old

            vSphere Web Client to vSphere Web Client.old

Re-install vCenter Single Sign-On, vSphere Web Client, vCenter Inventory Service, and VMware VirtualCenter Server service.

        Reconnect to the existing database.

        Reconnect all of the hosts to the vCenter Server.

Upgrading from vSphere 5.x to 6.0 fails (2110943) | VMware KB

!