Trend Micro Deep Security Manager fails to prepare ESXi 5.5 host with the error: The installation transaction failed
Article ID: 305214
Updated On:
Products
VMware vSphere ESXi
Issue/Introduction
Symptoms:
- Trend Micro Deep Security Manager fails to prepare ESXi 5.5 host
- You see the error:
The installation transaction failed
- In the /var/log/esxupdate.log file on the ESXi host, you see entries similar to:
YYYY-MM-DD Time Z esxupdate: BootBankInstaller.pyc: INFO: /altbootbank/boot.cfg: bootstate changed from 3 to 3
YYYY-MM-DD Time Z esxupdate: esxupdate: ERROR: An esxupdate error exception was caught:
YYYY-MM-DD Time Z esxupdate: esxupdate: ERROR: Traceback (most recent call last):
YYYY-MM-DD Time Z esxupdate: esxupdate: ERROR: File "/usr/sbin/esxupdate", line 216, in main
YYYY-MM-DD Time Z esxupdate: esxupdate: ERROR: cmd.Run()
YYYY-MM-DD Time Z esxupdate: esxupdate: ERROR: File "/build/mts/release/bora-1331820/bora/build/esx/release/vmvisor/sys-boot/lib/python2.6/site-packages/vmware/esx5update/Cmdline.py", line 144, in Run
YYYY-MM-DD Time Z esxupdate: esxupdate: ERROR: File "/build/mts/release/bora-1331820/bora/build/esx/release/vmvisor/sys-boot/lib/python2.6/site-packages/vmware/esximage/Transaction.py", line 245, in InstallVibsFromSources
YYYY-MM-DD Time Z esxupdate: esxupdate: ERROR: File "/build/mts/release/bora-1331820/bora/build/esx/release/vmvisor/sys-boot/lib/python2.6/site-packages/vmware/esximage/Transaction.py", line 347, in _installVibs
YYYY-MM-DD Time Z esxupdate: esxupdate: ERROR: File "/build/mts/release/bora-1331820/bora/build/esx/release/vmvisor/sys-boot/lib/python2.6/site-packages/vmware/esximage/Transaction.py", line 390, in _validateAndInstallProfile
YYYY-MM-DD Time Z esxupdate: esxupdate: ERROR: File "/build/mts/release/bora-1331820/bora/build/esx/release/vmvisor/sys-boot/lib/python2.6/site-packages/vmware/esximage/HostImage.py", line 692, in Stage
YYYY-MM-DD Time Z esxupdate: esxupdate: ERROR: File "/build/mts/release/bora-1331820/bora/build/esx/release/vmvisor/sys-boot/lib/python2.6/site-packages/vmware/esximage/HostImage.py", line 478, in _download_and_stage
YYYY-MM-DD Time Z esxupdate: esxupdate: ERROR: InstallationError: ('Trend_bootbank_dvfilter-dsa_9.0.0-2636', '[Errno 4] Socket Error: [Errno 1] _ssl.c:1332: error:0906D06C:PEM routines:PEM_read_bio:no start line')
Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.
Environment
VMware vSphere ESXi 5.5
Cause
This issue occurs when an ESXi 5.5 host is configured with Trend Micro Deep Security 9.0 Service Pack 1 Patch 2. This also affects TMDS 9.5. For more information, see Unable to install Deep Security 9.0 SP1 Patch 2 or Deep Security 9.5 Filter Driver on ESXi 5.5.
Note: The preceding link was correct as of September 30, 2015. If you find the link is broken, provide a feedback and a VMware employee will update the link.
Resolution
This issue is resolved in ESXi 5.5 Update 2, available at VMware Downloads.
For more information, see the Resolved Issues section in the VMware ESXi 5.5 Update 2 Release Notes.
For more information, see the Resolved Issues section in the VMware ESXi 5.5 Update 2 Release Notes.
To work around this issue, manually install the filter driver for ESXi:
Note: Ensure you perform these steps after installing vShield Endpoint from the vShield Manager on the affected ESXi host.
- Download a new copy of the Trend Micro Deep Security Virtual Appliance 9.0 Service Pack 1 Patch 2, FilterDriver-ESX_5.0-9.0.0-2636.x86_64.zip.
- Copy the downloaded file to the ESXi host datastore using the datastore browser in vSphere Client.
- Place the affected host into maintenance mode.
- To install the driver manually, run this command:
# esxcli software vib install -d /path/to/FilterDriver-ESX_5.0-9.0.0-2636.x86_64.zip
- In vCenter Server, select the ESXi host.
- Click the Configuration tab.
- In Hardware, click Networking.
- In the vSphere Standard Switch view, click Properties > Add.
- Click Virtual Machine and then click Next.
- In the Network Label field, type vmservice-trend-pg.
- Click Next > Finish.
Note: The vmservice-trend-pg port group is created.
- Reboot the ESXi host.
- When the reboot completes, perform a refresh within your Trend Micro Deep Security Manager interface.
- Click the Computer tab, the status of the host displays as:
Prepared
Additional Information
Feedback
Yes
No
Powered by
