Loading

×Sorry to interrupt
Uncaught ReferenceError: addCTracking is not defined
throws at https://kb.vmware.com/resource/KM_TealiumTrackingJS?v=0.5:100:1

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

My Subscriptions

Loading

Knowledge Base

VASA Provider Registration Troubleshooting (49798)

Last Updated: 3/11/2022Categories: TroubleshootingTotal Views: 71643Language:
Chinese (Simplified)JapaneseEnglish

9 like this article

Subscribe to get an email
newsletter with new updates

9 people found this helpful Please provide article feedback:

Symptoms

After a rescan the VASA providers may not populate or they are not added for a new host. There are several possibilities for where the problem may be, and all should be checked.

This KB covers vSAN 7.0, 6.7 and vSAN 6.2-6.6.x.

Resolution

vSAN 6.7 and higher

Is the VASA Provider running?

One possibility is the VASA provider is not running. In 6.7, there is no longer a vsanvpd service on the hosts. All troubleshooting must be done with vCenter.

Try to access https://<VC-IP>/vsanHealth/vsanvp/version.xml
If this page can be accessed and shows version information, see below, it means vsanvp is working correctly.
<vasa-provider>
<supported-versions>
<version id="4" serviceLocation="/vsanHealth/" vmomiServerVersion="newest"/>
</supported-versions>
</vasa-provider>

If the version page can't be accessed, please check vmware-vsan-health service's status by running the following command service-control --status vmware-vsan-health, example output:
Running:
vmware-vsan-health

If vmware-vsan-health is running, please check vsanvp logs in /var/log/vmware/vsan-health/vsanvp.log for the following message, "VSAN VP registration done". This means vsanvp has registered to sps.

vSAN 6.6 and below

Is the VASA Provider running?

One possibility is that the VASA provider (vsanvpd) is not running on the host. This can be examined easily by checking the status of vsanvpd with the init script:

[root@hostname:~] /etc/init.d/vsanvpd status
vsanvpd is running.

If the vsanvpd is not running, start it manually:

[root@hostname:~] /etc/init.d/vsanvpd start
vsanvpd started

Recheck the service. If it fails again, examine the log file to determine what the error is, and examine the Knowledge Base, Bugzilla, etc. for a resolution.

[root@hostname:~] cat /var/run/log/vsanvpd.log

Is the VASA Provider reachable?

If the VASA provider is running on the hosts, the issue may be related to network connectivity. The vCenter Server and the on-host VASA providers communicate over port 8080. This port must be open to register VASA providers. This is easy to check on either Windows or Linux vCenter.

Check for VASA accessibility

To examine for port liveness, connect to the VASA provider via port 8080 and determine if the VASA XML information is returned. This process varies between the vCenter Server Appliance (VCSA) and Windows vCenter.

Appliance:

Use the cURL utility to check the VASA Provider:
curl --insecure https://<host>:8080/version.xml

vsan-rvc:~ # curl --insecure https://brm-dell-vsan04.brmstorage.com:8080/version.xml
<vasa-provider><supported-versions><version id="2" serviceLocation="/vasa/services/vasaService"/></supported-versions></vasa-provider>
vsan-rvc:~ #

Windows:

Use a web browser to check the VASA Provider by navigating to https://<host>:8080/version.xml

If this type of XML response is not received even though the VASA provider is running, it indicates that something may be interfering with communication between the vCenter Server and the ESXi hosts over port 8080. Check the following:

Check ESXi host firewalls

Examine the host Security Profile and ensure that the vsanvp rule is enabled to permit host communication over port 8080:

Check vCenter Server firewall

On Windows vCenter Server, check that the Windows Firewall is either disabled or that all VMware-installed rules are active. In addition, check for custom rules that may be interfering with port 8080 outbound or inbound.

On the VCSA, the firewall should be correctly configured by default.

If all host-side and vCenter firewalls are configured as expected but the VASA provider on the hosts is still inaccessible, it is very likely that a physical or virtual firewall may be interfering upstream - between vCenter Server and the ESXi hosts. Engage with the customer's network/firewall teams to make that determination.

Examine VASA certificates

If the VASA provider is running and it is not reachable by vCenter Server, the problem may be related to certificates. VASA and SPBM use certificate exchange, and the vCenter Server must accept the VASA provider certificates.

Certificate-related problems will be called in the SPBM Java process's wrapper log. The location varies by vCenter Server type.

Windows vCenter Server: %ProgramData%\VMware\vCenterServer\logs\vmware-sps\wrapper.log
VCSA: /var/log/vmware/vmware-sps/wrapper.log

If certificate-related problems are reported, examine the KB, Bugzilla, etc. for guidance based on the error message.

For more information, see

After an upgrade from vCenter Server 5.x to vCenter Server 6.0, you see a critical alarm for certificate expiry (2120105)

In some cases, the VASA provider certificate may have a 0 Byte size. To resolve this, the host-side (provider) VASA certificates are required, These are stored on each ESXi host in /etc/vmware/ssl/

ls -lah /etc/vmware/ssl/
total 68
drwxr-xr-x    1 root     root         512 Mar 22 19:57 .
-r--r--r-T    1 root     root           0 Mar  4  2016 .#castore.pem
-r--r--r-T    1 root     root          41 Aug 13  2016 .#rui-for-netcpa.crt
-r--r--r-T    1 root     root          42 Aug 13  2016 .#rui-for-netcpa.key
-r-------T    1 root     root           0 Mar  4  2016 .#rui.bak
-r--r--r-T    1 root     root           0 Mar  4  2016 .#rui.crt
-r-------T    1 root     root           0 Mar  4  2016 .#rui.key
-r--r--r-T    1 root     root           0 Feb 17  2016 .#vsanvp_castore.pem
drwxr-xr-x    1 root     root         512 Mar 23 21:08 ..
-rw-r--r--    1 root     root       12.5K Mar 21 18:43 castore.pem
-rw-r--r--    1 root     root        1.1K Mar 21 18:43 rui-for-netcpa.crt
-rw-r--r--    1 root     root        1.6K Mar 21 18:43 rui-for-netcpa.key
-r--------    1 root     root        6.2K Mar 21 18:43 rui.bak
-rw-r--r--    1 root     root        1.4K Mar 21 18:43 rui.crt
-r--------    1 root     root        1.7K Mar 21 18:43 rui.key
-rw-r--r--    1 root     root        3.0K Mar 21 18:45 vsanvp.pem
-rw-r--r--    1 root     root           0 Mar 21 18:43 vsanvp_castore.pem
-rw-r--r--    1 root     root          64 Mar 22 19:57 vsanvp_secret

It is usually the vsanvp_castore.pem that is 0 Bytes. In this case you can SCP a good copy from another host and restart /etc/init.d/vsanmgmtd and the issue will be cleared.

In certain rare circumstances, usually in vSphere 5.5, the VASA provider may need to be manually registered. To accomplish this, the host-side (provider) VASA certificate is required, This is stored on each ESXi host in /etc/vmware/ssl/vsanvp.pem

Manual VASA Provider registration

Ensure that the VASA Provider is running and accessible per steps 1 and 2.

Navigate to the Storage Providers section of vCenter Server, and click the green "+" icon to manually register a provider.

Name the provider for the ESXi host

The URL is the VASA provider URL, as described in step 2.

The username that must be used is "VsanUser"

The password must be fetched from the MOB and then pasted into the correct field. (https://<hostIP>/mob/?moid=vsanSystem&method=fetchVsanSharedSecret&vmodl=1)

Fetch the VASA certificate from the host (/etc/vmware/ssl/vsanvp.pem) and attach it by checking the "Use storage provider certificate" check box.

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
Chinese (Simplified)JapaneseEnglish

Attachments

Additional Resources

KB
•
End Of General Availability of the Free vSphere Hypervisor (ESXi 7.x and 8.x) (2107518)

KB
•
Cloud Services Platform (CSP) でのパスワード更新方法 (2151066)

KB
•
Download and Install VMware Fusion (2014097)

Results 1-3 of 3

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware vSAN

VMware vCenter Server

Related Versions:

VMware vSAN 7.0.x

VMware vSAN 6.6.x

VMware vSAN 6.5.x

VMware vSAN 6.2.x

VMware vSAN 6.1.x

VMware vCenter Server 7.0.x

VMware vCenter Server 6.x

VMware vCenter Server 6.7.x

VMware vCenter Server 6.5.x

view all

Take Our Survey

Support Assistant