Alarm for Registration/unregistration of third-party IO filter storage providers fails

Products

• VMware Cloud Foundation

Issue/Introduction

Symptoms:

• vCenter reports the warning "Registration/unregistration of third-party IO filter storage provider fails on a host."
• IO Filter are not shown within vCenter Storage Providers.
• In /var/log/iofiltervpd.log, you see error similar to:

2017-11-29T15:54:06Z iofiltervpd[67088]: IOFilterVPControlHandleMessage:239:received command: addconf /usr/lib/vmware/vmiof/disk/vmwarevmcrypt-config.xml VMW_vmwarevmcrypt_1.0.0
2017-11-29T15:54:06Z iofiltervpd[67088]: ReadConfigFromFile:247:/usr/lib/vmware/vmiof/disk/vmwarevmcrypt-config.xml: successfully loaded filter configuration.
2017-11-29T15:54:06Z iofiltervpd[67088]: ReadConfigFromFile:248:FilterName: vmwarevmcrypt
2017-11-29T15:54:06Z iofiltervpd[67088]: ReadConfigFromFile:249:FilterClass: encryption
2017-11-29T15:54:06Z iofiltervpd[67088]: ReadConfigFromFile:250:FilterVersion: 1.0.0
2017-11-29T15:54:06Z iofiltervpd[67088]: ReadConfigFromFile:251:FilterType: disk
2017-11-29T15:54:06Z iofiltervpd[67088]: LoadFilterCatalogs:191:Added 1 catalog(s) for filter vmwarevmcrypt
2017-11-29T15:54:06Z iofiltervpd[67088]: LoadConfiguration:158:Added configuration file: /usr/lib/vmware/vmiof/disk/vmwarevmcrypt-config.xml successfully.
2017-11-29T15:54:06Z iofiltervpd[67088]: AddConfiguration:258:Number of filters loaded: 1
2017-11-29T15:54:16Z iofiltervpd[67088]: IOFilterVPControlHandleMessage:239:received command: addconf /usr/lib/vmware/vmiof/disk/spm-config.xml VMW_spm_1.0.0
2017-11-29T15:54:16Z iofiltervpd[67088]: ReadConfigFromFile:247:/usr/lib/vmware/vmiof/disk/spm-config.xml: successfully loaded filter configuration.
2017-11-29T15:54:16Z iofiltervpd[67088]: ReadConfigFromFile:248:FilterName: spm
2017-11-29T15:54:16Z iofiltervpd[67088]: ReadConfigFromFile:249:FilterClass: datastoreIoControl
2017-11-29T15:54:16Z iofiltervpd[67088]: ReadConfigFromFile:250:FilterVersion: 1.0.230
2017-11-29T15:54:16Z iofiltervpd[67088]: ReadConfigFromFile:251:FilterType: disk
2017-11-29T15:54:16Z iofiltervpd[67088]: LoadFilterCatalogs:191:Added 8 catalog(s) for filter spm
2017-11-29T15:54:16Z iofiltervpd[67088]: LoadConfiguration:158:Added configuration file: /usr/lib/vmware/vmiof/disk/spm-config.xml successfully.
2017-11-29T15:54:16Z iofiltervpd[67088]: AddConfiguration:258:Number of filters loaded: 2
2017-11-29T15:55:23Z iofiltervpd[67088]: run:159:SSL Connection error 30 : SSL_ERROR_SSL error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown

Note :This can also be found in /var/run/log/ in the log bundle, as iofiltervpd.log is not present in /var/log

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

 

Cause

The IO Filter on the ESXi host is not correctly registered with the Host Certificate.

Resolution

To resolve this issue - Refresh the IO Filter Registration on the ESXi Host

1. SSH to ESXI host
2. Before refreshing the IO filter registration - Verify the Host Certificate and Certificate chain is ok on the ESXi - these are located at the following locations:
   1. /etc/vmware/ssl/rui.crt
   2. /etc/vmware/ssl/castore.pem
3. Manually refresh the certificates in the iofiltervp by running the following command:
   1. /usr/lib/vmware/iofilter/bin/iofvp-ctrl-app -r
4. Rescan the Storage Providers in vCenter.

 

Additional Information

This issue is being checked by Diagnostics for VMware Cloud Foundation.

The check is as follows:

• Product: ESXi
• Log File: iofiltervpd.log
• Log Expression Check "SSL_ERROR_SSL" AND "alert certificate unknown"