Patching (update) VMware vCenter Server Appliance VCSA and Platform Service Controller PSC through Appliance Management Interface VAMI
search cancel

Patching (update) VMware vCenter Server Appliance VCSA and Platform Service Controller PSC through Appliance Management Interface VAMI

book

Article ID: 316584

calendar_today

Updated On:

Products

VMware vCenter Server

Issue/Introduction

  • This article provides instructions for updating the vCenter Server with an embedded Platform Services Controller, a vCenter Server with an external Platform Services Controller, or a Platform Services Controller.
 
  • You can use the Appliance Management Interface to install patches either through :
  1.  Remote repository directly by using a repository URL "default pre-configured to VMware repository and this requires internet access for the appliance".
OR
  1. Local repository by attaching an ISO image to the appliance.


Environment

VMware vCenter Server Appliance 6.5.x
VMware vCenter Server Appliance 6.7.x
VMware vCenter Server 7.0.x

Resolution

First Method: Patching using the URL:

  1. Log in to the vCenter Server Appliance Management Interface (https://appliance-IP-address-or-FQDN:5480) as root.

Example: https://vcsa.domain.local:5480
Note:

  • For vSphere 6.7 and 7.0, vSphere SSO Administrator Credentials  "[email protected]" can be used for patching appliance and root password will not be required but it has to be valid (NOT Expired).
  1. Click on Update tab. 
  2. Make sure that the CHECK UPDATES button is selected for CD ROM + URL.
  3. Select the target patch of vCenter. For more information about vCenter build numbers, see Build numbers and versions of VMware vCenter Server (2143838).
  4. Click "Stage and Install" (you can also stage the patches for install at a later time by selecting Stage Only).
 
3 steps.png
 
  1. Read and accept the End user license Agreement.
 
agrrement.PNG
 
  1. A system pre-check verifies that the patches can be successfully installed with the provided information.
 
  1. Sign in using vSphere SSO Administrator password. (for the [email protected] by default).
sign-in.PNG
 
  1. Confirm that you have backed up the vCenter Server Appliance before clicking Finish
  2. Patching will start. 
  3. Patching is complete when the message  "Installation succeeded" is shown.
 

Second Method: Patching using CD:
  1. Download the patch ISO images from https://customerconnect.vmware.com/group/vmware/patch
    • Note: Ensure to download the correct VC patch ISO with the file ending in "-FP.iso."
  2. Open vCenter UI to upload the ISO Image to a datastore:
Example: https://vcsa.domain.local/
  1. Identify on which ESXi Host the Appliance is running
 
  1. Select a datastore mounted to the ESXi Host and has enough space for the ISO file.
 
  1. Browse the datastore files to upload the ISO file.
 
  1. Select the ISO file to upload.
 
 
Note: You may get the below Error:
The operation failed for an undetermined reason. Typically this problem occurs due to certificates that the browser does not trust. If you are using self-signed or custom certificates, open the URL below in a new browser tab and accept the certificate, then retry the operation.
https://target-ip
 

To fix this issue, see The operation failed for an undetermined reason" transferring files through vSphere Client (2147256)

  1. Mount the ISO file in the Appliance.
 
  1. Right Click on the Appliance VM and Click on Edit Settings.
 
  1. Expand the CD/DVD Drive and select Datastore ISO File then Browse to select the file.
 
  1. Select the file and click OK.
 
 
  1. Log in to the vCenter Server Appliance Management Interface (https://appliance-IP-address-or-FQDN:5480) as root.

Example: https://vcsa.domain.local:5480
Note:

  • For vSphere 6.7 and 7.0, vSphere SSO Administrator Credentials "[email protected]" can be used for patching appliance and root password will not be required but it has to be valid (NOT Expired)
  1. Click on Update tab.
 
  1. Click CHECK UPDATES and select  Check CD ROM.
check--CD.PNG
  1. Available updates will show up once found in the ISO Image mounted to the Appliance. (This step takes some time)
Fetched.PNG
  1. Same steps should apply from the previous section "First Method: Patching using the URL" from step 5.


Additional Information

Notes:
  • If the patching task didn't complete for any reason, please collect log bundle from the failure node using Command Line before restoring from backup or reverting back to the snapshot.
To collect VCSA or PSC logs using CLI, please follow the below steps:
  1. Open SSH session to the VCSA or PSC.
  2. Log in as an administrative user, such as root.
  3. Type shell.set --enabled true and press Enter.
  4. Type shell and press Enter.
  5. Run this command to export the logs to /storage/log/:
# vc-support -l
 


Impact/Risks:
Notes before patching: WARNING
  • Before attempting to update any vCenter Server Appliance or Platform Service Controller, please ensure you have taken proper backups of your appliance.
  • You can take offline snapshot of the appliance (While the VCSA or PSC virtual machine is powered off)  but VMware recommends Appliance File Based backup.