Knowledge Base

The VMware Knowledge Base provides support solutions, error messages and troubleshooting guides
 
Search the VMware Knowledge Base (KB)   View by Article ID
 

Update link in vShield Manager is not available if vShield App upgrade fails (2041446)

Symptoms

  • vShield App upgrade fails, but vShield Manager shows the new build number and does not provide an option to update.
  • During the vShield App Upgrade process:

    • The vCenter Server becomes unreachable and fails with a generic error message on the vShield Manager Host Summary Page
    • The Update Link is not available

  • The version mentioned on the Summary page of Service virtual machine through the vSphere Client is different from the one mentioned in the About Page of the vShield Manager.
  • You see the this error when you try to Update vShield App through the vShield Manager UI:

    vShield App installation encountered error while installing service VM:Internal server error: ; nested exception is: java.net.SocketException: Connection reset

Cause

The install/upgrade process of vShield App is a two-phase process:
  1. Installation of the dvfilter VIB on the ESXi/ESX host
  2. Deployment and configuration of the Service virtual machine on the ESXi/ESX host
These two processes are independent and are not transactional in nature (that is, if the step after the installation of the dvfilter VIB fails resulting in an install/upgrade failure, the first step of VIB installation is not reverted). This is because VIB removal requires a host restart.

vShield Manager checks the version of the dvfilter VIB to verify if an upgrade is necessary. Since vCenter Server is not reachable after the dvfilter VIB is upgraded to the latest version, the Service virtual machines cannot be upgraded and vShield Manager does not provide the update option. This results in the difference in versions between the vShield Manager UI and the Summary page of the Service virtual machines via the vSphere Client.

Resolution

To work around this issue, uninstall and re-install vShield App on the ESXi/ESX host.

Impact/Risks

There is no functional impact because the new dvfilter module and the vShield Manager are able to communicate to the older Service virtual machines and the security policies are still enforced.

Additional Information

To be alerted when this article is updated, click Subscribe to Document in the Actions box.

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 0 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.
What can we do to improve this information? (4000 or fewer characters)
  • 0 Ratings
Actions
KB: