- vCenter Server Appliance 6.5 Update 2a – Build 8667236 – 2018-05-31 (also tested on vCenter Server Appliance 6.5 Update 2c – Build 9451637 – 2018-08-14)
- VMware-vSphereTlsReconfigurator-6.5.0-7766806.x86_64.rpm
- Following Managing TLS protocol configuration for vSphere 6.5/6.7 (2147469) https://kb.vmware.com/s/article/2147469
Run the command – /usr/lib/vmware-vSphereTlsReconfigurator/VcTlsReconfigurator/./reconfigureVc update -p TLSv1.2
vCenter Transport Layer Security reconfigurator, version=6.5.0, build=7766806
For more information refer to the following article: https://kb.vmware.com/kb/2147469
Log file: “/var/log/vmware/vSphere-TlsReconfigurator/VcTlsReconfigurator.log”.
Please disable “vCenter HA” before executing the script.
- Login to the FLEX client and Disable VCHA.
- Re-run /usr/lib/vmware-vSphereTlsReconfigurator/VcTlsReconfigurator/./reconfigureVc update -p TLSv1.2
Same error. - Maintenance Mode VCHA – Same error.
cat /var/log/vmware/vSphere-TlsReconfigurator/VcTlsReconfigurator.log does not show any useful information.
2018-11-24T21:46:49.785Z INFO vCenter Transport Layer Security reconfigurator, version=6.5.0, build=7766806
2018-11-24T21:46:49.785Z INFO For more information refer to the following article: https://kb.vmware.com/kb/2147469
2018-11-24T21:46:49.785Z INFO Log file: “/var/log/vmware/vSphere-TlsReconfigurator/VcTlsReconfigurator.log”.
2018-11-24T21:46:49.786Z DEBUG GetRunningSCServices: [‘vmware-vcha’]
2018-11-24T21:46:49.786Z DEBUG Issuing service-control command passing: [‘–status’, ‘vmware-vcha’]
2018-11-24T21:46:49.786Z DEBUG Executing: [‘/bin/service-control’, ‘–status’, ‘vmware-vcha’]
2018-11-24T21:46:50.057Z DEBUG service-control -> Running:
2018-11-24T21:46:50.067Z DEBUG service-control -> vmware-vcha
2018-11-24T21:46:50.068Z ERROR Please disable “vCenter HA” before executing the script.
2018-11-24T21:51:43.136Z INFO vCenter Transport Layer Security reconfigurator, version=6.5.0, build=7766806
2018-11-24T21:51:43.136Z INFO For more information refer to the following article: https://kb.vmware.com/kb/2147469
2018-11-24T21:51:43.137Z INFO Log file: “/var/log/vmware/vSphere-TlsReconfigurator/VcTlsReconfigurator.log”.
2018-11-24T21:51:43.137Z DEBUG GetRunningSCServices: [‘vmware-vcha’]
2018-11-24T21:51:43.137Z DEBUG Issuing service-control command passing: [‘–status’, ‘vmware-vcha’]
2018-11-24T21:51:43.137Z DEBUG Executing: [‘/bin/service-control’, ‘–status’, ‘vmware-vcha’]
2018-11-24T21:51:43.225Z DEBUG service-control -> Running:
2018-11-24T21:51:43.235Z DEBUG service-control -> vmware-vcha
2018-11-24T21:51:43.235Z ERROR Please disable “vCenter HA” before executing the script.
- Remove VCHA aka Destroy the vCenter HA Cluster.
- Re-run /usr/lib/vmware-vSphereTlsReconfigurator/VcTlsReconfigurator/./reconfigureVc update -p TLSv1.2
SUCCESS! - Recreate VCHA
