Error: “Failed to deploy OVF package” in the vCenter Server when deploying OVA/OVF template
search cancel

Error: “Failed to deploy OVF package” in the vCenter Server when deploying OVA/OVF template

book

Article ID: 339723

calendar_today

Updated On:

Products

VMware vCenter Server VMware vSphere ESXi

Issue/Introduction

This article provides the minimum privileges required for a user in vCenter Server to deploy an OVA/OVF template.
 
You may have to do this if:
  • You have to deploy a third-party virtual appliance.
  • You have to deploy a VMware vApp or virtual appliance.


Symptoms:
  • Unable to deploy an OVA/OVF template within vCenter Server
  • Deploying the template with a user that does not have full administrative rights within vCenter Server
  • You see the error:

    Failed to deploy OVF package: Permission to perform this operation was denied.


Environment

VMware vSphere ESXi 5.0
VMware vSphere ESXi 5.5
VMware vCenter Server 5.0.x
VMware vCenter Server 5.1.x
VMware vSphere ESXi 5.1
VMware vCenter Server Appliance 5.5.x
VMware vCenter Server 5.5.x
VMware vCenter Server Appliance 5.1.x
VMware vCenter Server Appliance 5.0.x

Cause

This issue can occur when the user deploying the OVA/OVF template does not have the minimum vCenter Server privileges required to deploy the template.

Resolution

To set the minimum vCenter Server privileges required to deploy a OVF/OVA template:
  1. Using the vSphere Client, log in to vCenter Server as an administrator.
  2. Click Home > Roles.
  3. Select an administrator role.
  4. Right-click the role from Step 3 and click Clone.
  5. Rename the role. For example, deploy OVF/OVF Template.
  6. Select the role you just cloned, right-click and then click Edit Role.
  7. Remove all unnecessary privileges by deselecting the boxes, and keep these minimum privileges:
    • All Privileges > Datastore > Allocate space
    • All Privileges > Network > Assign network
    • All Privileges > Virtual machine > Configuration > Add new disk
    • All Privileges > Virtual machine > Configuration > Advanced
    • All Privileges > vApp > Import
Note:
The a
bove permission are set for deploying OVA/OVF templates only and the user with the above privileges will not be able to perform any other activity unless other permissions are provided to the role assigned to the user. This information is useful for environments where deploying an OVF/OVA template is a task which can be performed by a user, without requiring Administrative privileges to the vCenter Server.
  1. Add permissions for the user assigning the newly created role at the vCenter Server level.
     
    1. Select the top level for vCenter Server, then click the Permissions tab.
    2. Right-click and click Add Permission.
    3. Click Add and select the user or group to add the permissions.
    4. Press OK.
    5. Select the role from the Assigned Role drop down.
    6. Select the Propagate to Child Objects box.
    7. Click OK.
Note: This permission can be set at the vCenter Server or datacenter level.


Additional Information

Powered by Wolken Software