VSAN ESA Deep rekey / Encryption Enabling / Disabling task "convert objects for encryption" is stuck

Products

• VMware vSAN
• VMware vSphere ESXi

Issue/Introduction

Symptoms:

While performing VSAN ESA Deep rekey / Encryption Enabling / Disabling, "convert objects for encryption" task is stuck and does not progress further, but CMMDS_HOST_ENCR_STATE entries show that all objects on hosts have already been converted.

Environment

VMware vSphere ESXi 8.0.2

Cause

The issue occurs when CMMDS subscription callbacks overflow, the calculation of objects quantity to be processed gets incorrect, which makes the task pending while real work is already done.

Resolution

Currently there is no resolution to the issue. This will be fixed in the future release.

Workaround:

To workaround the issue, cancel the deep rekey task and then perform remediation in Monitor->VSAN->Skyline health for the cluster.