Upgrading the VMware vCenter Server Appliance 5.x to vCenter Server 6.0 validating: Connect to source appliance

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:
During the upgrade of a vCenter Server Appliance 5.x to vCenter Server Appliance 6.0, you experience these symptoms:

• The upgrade progress indicator remains in validation on the Connect to source Appliance stage.
• In the /var/tmp/vmware-upgrade-requirements/checker.out file on the vCenter Server Appliance 5.x, you see entries similar to:
  
  YYYY-MM-DDT<time>Z ERROR __main__ Fatal error during upgrade collect requirements.
  Traceback (most recent call last):
  File "/var/tmp/vmware-upgrade-requirements/cis-upgrade-runner/bootstrap_scripts/run_preupgrade_checks.py", line 1311, in main
  inputArguments.upgradeType)
  File "/var/tmp/vmware-upgrade-requirements/cis-upgrade-runner/bootstrap_scripts/run_preupgrade_checks.py", line 1121, in _addAppliancePnid
  upgradeType)
  File "/var/tmp/vmware-upgrade-requirements/cis-upgrade-runner/bootstrap_scripts/run_preupgrade_checks.py", line 958, in _pickApplianceFqdn
  ssoCertIps = ssoArguments.get("sso.cert.ipaddresses", "").split(",")
  AttributeError: 'NoneType' object has no attribute 'split'
  
  </time>
• When navigating to https://OriginalvCenterServerApplianceFQDN:7444/lookupservice/sdk and examining the certificate, the Subject Alternative Name does not contain any IP address entries.

Environment

VMware vCenter Server Appliance 6.0.x

Cause

During the upgrade process, the vCenter Server Appliance 6.0 UpgradeRunner checks and validates the certificates of all services. If the vCenter Single Sign-On certificate does not contain any IP address entries within the Subject Alternative Name, the UpgradeRunner process will fail as the certificate does not meet the requirements for upgrade.

Resolution

To avoid this issue, you can:

• Implement CA-Signed certificates for your vCenter Server Appliance before attempting to upgrade. For more information, see:
   
  • vCenter Server Appliance 5.1:
    Configuring certificates signed by a Certificate Authority (CA) for vCenter Server Appliance 5.1 (2036744)
     
  • vCenter Server Appliance 5.5:
    Configuring Certificate Authority (CA) signed certificates for vCenter Server Appliance 5.5 (2057223)
    
    Note: If you are implementing your own certificates, make sure that the Subject Alternative Name of the vCenter Single Sign-On certificate contains an entry in the form of IP=vCenter_Server_IP for the IP address of the vCenter Server Appliance.
    
     
• Regenerate Default Certificates for the vCenter Server Appliance 5.x. For more information, see VMware vCenter Server Appliance fails to start while regenerating self-signed SSL certificates (2073717).

After replacing the certificates, you can proceed with upgrading the vCenter Server Appliance to vCenter Server 6.0.

Additional Information

VMware vCenter Server Appliance 5.x を vCenter Server 6.0 にアップグレード中に、ソース アプライアンスへの接続が検証中になる
Fazendo upgrade do VMware vCenter Server Appliance 5.x para validação do vCenter Server 6.0: conectar ao appliance de origem
La actualización de VMware vCenter Server Appliance 5.x a vCenter Server 6.0 permanece validando: Connect to source appliance