Cannot start vCenter: 503 Service unavailable

[huxleyhs]

Hello!

 

I got this message above from web browser, while I try to connect to vCenter:

503 Service Unavailable (Failed to connect to endpoint: [N7Vmacore4Http20NamedPipeServiceSpecE:0x000055816a6c0720] _serverNamespace = / action = Allow _pipeName =/var/run/vmware/vpxd-webserver-pipe)

 

And I have this image from shell that shows which services have started (attached)

 

 

There are like many solutions online, but I do not know where to start...I also found some articles that looks like with my problem, like certificate, but i dont know if is the same.

 

I appreciate your time trying to help me

 

Huxley

[Maksym Roshchyna]

Which vCenter Certificate are you using? highly possible that the certificate has expired. 

a few weeks ago I have had the same issue. After the Certificate renewal issue has been solved. 

Please remember to check the certificate template in CA - it should be slightly adjusted for vSphere7.

 

 

[huxleyhs]

Hello !

I've tried to renovate as much as user root and user: administrator, but it's showing wrong password.

I've reseted the password both.

How do I see which certificate vcenter uses?

 

Thank you!

[Maksym Roshchyna]

there are a lot of articles on the internet on how to check and configure it. 

you can also check Certs with WinSCP or via SSH 

 

on your screen you have the wrong username; not root - only should be [[e-mail]]

The system tells you to provide a username: so you should provide [e-mail]

to ssh you log in with [root] but all replacement actions and confirmation is going via administrator

 

One more thing - you can reset all certificates with action number 8 - but before do a snapshot; 

once it will be reset - you will be able to login to vCenter 

after that you will be able to check and decide what to do next

[huxleyhs]

Hello!

Thank you for supporting me!

But I've tryed even with the password from [e-mail], but it show me "incorrect password" before, I reseted this password trough vdcadmintool.

Do you know why happen this?

 

 

[Alex_Romeo]

HI,

 

you need to reset the password of [e-mail].

run the command:  /usr/lib/vmware-vmdir/bin/vdcadmintool

 

choose option 3 a

 

Write in UPN: [e-mail].

A new password is generated (automatically)

 

regards,

Alex_Romeo

 

[huxleyhs]

Hi  

 

Thank you!

But I've already done this four times recently.

I dont know why, but it is not accepting.

 

 

[Alex_Romeo]

Hi,

what is the mistake?

regards,

AR

 

[Alex_Romeo]

Hi,

reboot the vCenter and try to reset password again.

Make a stamp of the result and post it

regards,

AR

[huxleyhs]

Hell  

I made the reboot and I changed the password again, but it simply appears incorrect password.

I've tryed copy and paste and to type too, both show "incorrect password".

This is the error (above) that happens, so therefore I unable to regenerate the certificates.

[Maksym Roshchyna]

I have no idea why your password is not accepted. Please check the layout in notepad. If password is the same

[huxleyhs]

hi !

 

Yes, I've tested this too....paste the same password.

[Alex_Romeo]

Hi,

First you need to reset the administrator password. Otherwise you cannot renew the certificates

regards

AR

[huxleyhs]

It would be possible I open a ticket on VMware?

[Alex_Romeo]

Hy,

If you have active support, yes

link: https://my.vmware.com

or

https://customerconnect.vmware.com/

regards,

AR

[huxleyhs]

Hello  

Is there an option to test this password that generate to administrator?

[Maksym Roshchyna]

I assume so. Is it your vCenter in Canonical name? 

What is the current status? Have you progressed slightly? 

[huxleyhs]

Hi  

 

yes, It is!

It keep on down, I dont know what is the next task...I was wondering if I reinstall Vcenter is the best way.

 

Thank you!

[Maksym Roshchyna]

I am still wondering, why are you not able to login with your admin credentials to vCenter. 

When you will download vCenter ISO and will attach it to your mgmt windows VM - check Recover/Repair option. 
Maybe there will be option regarding certs. 

I will check it in my lab too. 

Without admin password you will not be able to proceed. 

[huxleyhs]

Hi  

 

I was checking here, canoot be certificate, right? On Browser I've clicked in certificate and:

 

 

 

The pic above is in portuguese, but expirate date show that will expire in August 2027.

 

Could be other thing impacting this, right?

[Ajay Achary]

All services down. That's quite odd.

Can you just  run " service-control --start --all " and see what it is failing for ? Share screenshot ?
Then you might have to check the log for that particular service.

 

Also the following one-liner can determine expired certificates other than STS for the vCSA:
for i in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list); do echo STORE $i; sudo /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $i --text | egrep "Alias|Not After"; done

For STS cert expiry check : https://kb.vmware.com/s/article/79248

[huxleyhs]

Hello  

Thank you for supporting me.

Follow the prints:

 

 

According to vxpd-svcs.log the error is about LDAP, follow below the print from log.

There are several erros about LDAP.

Thank you!

[Ajay Achary]

The complete command is below 
for i in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list); do echo STORE $i; sudo /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $i --text | egrep "Alias|Not After"; done

 

Also this might be little complicated and better to contact support.

Check cm.log first. What version of VC is this and is it external PSC ? 

[huxleyhs]

Hi  

The certifactes are valid.

Follow attached CM.LOG.

The versions is: 6.5.0.41000 Build Number 20510539.

This VCenter is a VM inside an Esxi (physical host).

We dont have support active at VMWare.

We are thinking in re install the Vcenter.

 

Thank you!

Attachment(s)

CM.log   5.44 MB 1 version

[Ajay Achary]

cm.log says it is down from 2nd July 2022. I suppose it might be better to re-install VC. 

[Maksym Roshchyna]

yeah, good point