VMware Cloud Community
ditro2001
Contributor
Contributor

Cannot remove vShield Manager 5.1

Hello Community,

I can not remove the vshield manager plugin from vcenter.

I tried it via http://IP-VCENTER/mob and unregister extension also via powerCLI.

After I do the unregister the entry is gone but after vcenter reboot it is there again.

What am I doing wrong?

I am also confused that after install the firewall appliances the vmservice-vswitch is still in the inventory.

Is there a way to proofe that vshield was uninstalled successful?

Cheers

Dennis

Tags (1)
2 Replies
ditro2001
Contributor
Contributor

I managed to get the plugin removed.

The vShiel Manager App must be shut off before you unregister the plugin.

But I don't know how to handle the vswitch?!?

0 Kudos
Sreec
VMware Employee
VMware Employee

Hi,

     I believe you are using vShield App in your environment? If you want to remove vShield App please follow below steps.

1)Firstly try uninstalling the app feature from vShield Manager/VCNS. If you have no luck ..follow below steps.

1)Issue this command on host were in app is installed


esxcli software vib list | grep -i vshield

Run this command to remove the existing vShield package
# esxcli software vib remove -n <package name>


Delete the vShield-FW-<IP> virtual machine from vCenter Server Inventory.


Remove the vmservice-vswitch that was created during the install (assuming there is no other device that uses this vswitch). This is a service vSwitch with no physical adapters that was created during the install. This will have 2 port groups, one called vmservice-vmknic-pg and the other vmservice-vsheild-pg

Log into vShield Manager CLI as an admin and reset the web interface by typing the following commands enable > config t >no web-manager

Once the command no web-manager is executed, you will need to relogin.

  1. Now restart the web services by typing the commands enable > config t > web-manager

Note:If reboot is feasible for you,please do reboot VCNS instead of restarting web manager GUI.

  1. On the ESX host, navigate to Configuration > Software and click Advanced Settings.
  2. Verify that /Net/Net.DVFilterBindIpAddress is not set.
  3. Reboot the host

By following above steps,it will remove only vShield App config.If you have any other features like vShield Edge,endpoint ,data security and VXLAN network,it would be much better to remove all these features prior to deleting/shutting-down VCNS/VShield manager solution.

May i know the reason why you are not in need of VCNS solution ? If you have any technical challenge i can certainly help you.

Cheers,
Sree | VCIX-5X| VCAP-5X| VExpert 7x|Cisco Certified Specialist
Please KUDO helpful posts and mark the thread as solved if answered
0 Kudos