vCenter Server Appliance 6.7 Migration Fails During Firstboot - vAPI Endpoint Service Firstboot Failed - "Failed to configure vAPI Endpoint Service at the firstboot time" - "Native platform error [code: 5][Begin enum on store 'TRUSTED_ROOT

Products

• VMware vCenter Server

Issue/Introduction

• To learn more about firstboot issues see: Firstboot Failed during Install, Deployment, Upgrade, or Migration in vCenter Server and vCenter Server Appliance 6.7
• firstbootStatus.json contains the following

   "failedSteps": "vapi_firstboot"

• vapi_firstboot.py_####_stderr.log contains the following

  "Failed to configure vAPI Endpoint Service at the firstboot time"

• endpoint.log contains the following

  Native platform error [code: 5][Begin enum on store 'TRUSTED_ROOTS' failed

• cloudvm.log contains the following

  Stdout: DNS reverse lookup on [IP_Address] has failed.
  Unable to obtain hostname from DNS reverse lookup.
  Please examine DNS/network configuration.

  
  
  Note: 
  vCenter Server Appliance - Firstboot logs are located in the /var/log/firstboot directory.
  vCenter Server Appliance - Each service will have it's own folder in the /var/log/vmware/ directory.  The endpoint logs are located in the /var/log/vmware/vapi/endpoint folder.

  
  
  

Environment

VMware vCenter Server Appliance 6.7.x

Cause

This issue occurs when deploying a vCenter Server Appliance 6.7 with an IP address that has no DNS record configured.  IP based deployments without DNS are not supported.

Resolution

Before deploying a vCenter Server Appliance 6.7 with a static IP address, verify that the IP address has a valid (internal) domain name system (DNS) registration.  

For more information about DNS requirements see: DNS Requirements for the vCenter Server Appliance and Platform Services Controller Appliance.