Host Profile compliance check fails with an error for the Update Manager ruleset

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

• Checking the host for profile compliance reports the host as Noncompliant
• The Summary page of the host reports the host as Noncompliant
• The Check Compliance results in an error for the Update Manager ruleset
• In the PyVmomiServer.log file located in vCenter Server, you see entries similar to:
  
  [2012-01-06 15:48:40,006 root DEBUG] Expression failed compliance test on firewall.ruleset["key-vim-profile-host-RulesetProfile-updateManager"]-ruleSet
  [2012-01-06 15:48:40,006 root DEBUG] Expression failed compliance test on firewall
  

Note: By default the PyVmomiServer.log file is located at:

• Windows 2003 – %ALLUSERSPROFILE%\Application Data\VMware\VMware VirtualCenter\PyVmomiServer.log
• Windows 2008 – C:\ProgramData\VMware\VMware VirtualCenter\Logs\ PyVmomiServer.log

Environment

VMware vCenter Server 4.0.x
VMware vCenter Server 5.0.x
VMware vCenter Server 4.1.x

Resolution

To workaround this issue:

1. Edit the host profile.
2. Expand Firewall Configuration > Ruleset Configuration > updateManager.
3. Click Ruleset.
4. Click the Compliance Details tab.
5. Deselect the Validate that ruleset updateManager is not enabled option.
6. Click OK.
7. In the Host Profiles view, click the host profile.
8. Click the Hosts and Clusters tab.
9. Right-click the host and click Check Compliance Now.
10. Check the results.

Alternatively, you can delete the updateManager entry from the host profile. This permanently removes the entry from the host profile.

To remove the entry from the host profile permanently:

1. Edit the host profile.
2. Expand Firewall Configuration > Ruleset Configuration > updateManager.
3. Right-click updateManager and click the Remove Profile option.