Knowledge Base

1. Try the installation/uninstallation from the vShield plugin in vCenter Server. This provides detailed events when the installation fails.

2. Verify if required modules are loaded in the ESX host before installing vShield App using one of these options

   • Log in to the ESX host using an SSH client and run the command:
     
     esx01# esxcfg-module -l | grep -i dvf
     dvfilter 2 72
     vmkapiv1_0_0_0_dvfilter_shim0 8
     
     
   • Check the vShield Manager logs from the CLI using show tech-support. 
     
     Info Sep 16, 2010 03:42:15 PM *** *** 41: VMware ESX: esx 4.1.0 (HostAgent 4.1)
     Error Sep 16, 2010 03:42:17 PM *** *** 52: dvfilter module not loaded for host host-373
     Error Sep 16, 2010 03:42:17 PM InstallProcess doInstall 52:
     java.lang.Exception: Dvfilter module not up for host 10.112.97.33
     
     For more information, see Overview of vShield Manager 4.1 logs (1026255).
     
     
3. If modules are not loaded, load the modules with the commands:
   
   #esxcfg-module –e /usr/lib/vmware/vmkmod/dvfilter
   #esxcfg-module -v –e /usr/lib/vmware/vmkmod/vmkapiv1_0_0_0_dvfilter_shim
   
   
4. Log into vShield Manager CLI as an admin and reset the web interface by typing the following commands enable > config t > no web-manager.  Once the command no web-manager is executed, you will need to relogin.
5. Now restart the web services by typing the commands enable > config t > web-manager.\
6. On the ESX host, navigate to Configuration > Software and click Advanced Settings.
7. Verify that /Net/Net.DVFilterBindIpAddress is not set.
8. Reboot the host and then retry the vShield App installation.
9. If you still see error during installation:
   1. Manually clean the ESX host before re-installation. Remove vmservice-vswitch virtual switch under ESX host configuration and remove the vShield packages with the commands:

   ESX 4.x:

#esxupdate query | grep -i vShield
#esxupdate remove -b <Package name from previous output>

ESXi 5.x:

#esxcli software vib list | grep -i vshield
#esxcli software vib remove -n <package name>

              b.   Delete the vShield-FW-<IP> virtual machine from vCenter Server Inventory.