"VMware Identity Service bootstrap failed - VMIdentity firstboot error" while upgrading Windows VC from 6.5 to 6.7 fails if RSA is configured

Products

• VMware

Issue/Introduction

Symptoms:
While upgrading from vCenter Server 6.5 to 6.7, fails with VMIdentity firstboot error "VMware Identity Service bootstrap failed." if RSA is configured.

Resolution

This issue is resolved in vSphere 6.7 U1, available at VMware Downloads.

Workaround:
To workaround this issue:

1. Disable RSA from sso-config on 6.5.x.
2. Connect to PSC using jXplorer and navigate to local->Services->Identitymanager->Tenants->vsphere.local. Delete "RSAAgentConfigurations".
3. Once the upgrade is complete, create the missing directory C:\ProgramData\VMware\vCenterServer\cfg\sso.
4. Reconfigure RSA as it was before using sso-config.