Using the cmsso command to unregister vCenter with External PSC or vCenter with Embedded PSC from Single Sign-On
search cancel

Using the cmsso command to unregister vCenter with External PSC or vCenter with Embedded PSC from Single Sign-On

book

Article ID: 316470

calendar_today

Updated On:

Products

VMware vCenter Server

Issue/Introduction

Should you no longer need an external PSC or embedded PSC/vCenter, or if an appliance stops responding, you can decommission and delete the appliance from the vSphere domain and inventory.

Important Notes:

  • Pre-vCenter 6.7 U1: the process of removing a PSC or vCenter Server from the vSphere domain is irreversible. After you remove an appliance from the vSphere domain, you cannot rejoin it to the same vSphere domain. You must reinstall or redeploy the PSC or vCenter Server to rejoin the vSphere domain.

  • The procedure in this KB should not be used to separate PSCs/vCenters in ELM from each other. The intended purpose of this KB is to describe the process to clean leftover & stale PSC/vCenter entries from the SSO domain.

  • Repoint a vCenter to another external PSC in another vSphere domain

  • Repoint an embedded PSC/vCenter to another embedded PSC/vCenter in a different existing vSphere domain

  • Migrate an embedded PSC/vCenter to a newly created domain (where the migrated PSC/vCenter is the first instance.

  • Executing the cmsso-util unregister command is supported only on an External Platform Services Controller (PSC) or a vCenter Server with Embedded Platform Services Controller (Embedded Node)

  • This article can be used in a rollback scenario of a failed vCenter Server upgrade on Windows vCenter Server with External Platform Services Controller. In this situation, the failed instance needs to be decommissioned before re-installing vCenter Server using the existing Database

  • In the cmsso-util unregister commands - omitting the --passwd option will prompt you for SSO Admin credentials upon execution



Environment

vCenter 7.x
vCenter 8.x

Resolution

Process to Decommission a Node from the vSphere Domain and Inventory:

  • Decommission an External Platform Services Controller (PSC)
  • Decommission an Embedded PSC/vCenter and/or vCenter (that points to an External PSC)


NOTE: BEFORE PROCEEDING, ENSURE OFFLINE SNAPSHOTS OF ALL PSCS and VCS IN THE SSO DOMAIN AND/OR BACKUPS ARE IN PLACE IMMEDIATELY PRIOR TO THIS OPERATION.
 

Prerequisite: Find and note the PSC that the vCenter Server is currently pointing to by running the commands below. If the vCenter has an Embedded PSC, the output will indicate that it is pointing to itself:

  1. VCSA:

    /usr/lib/vmware-vmafd/bin/vmafd-cli get-ls-location --server-name localhost

Process to Decommission an External Platform Services Controller

  1. Power off the Platform Services Controller that you no longer need.

  2. Manually re-point all vCenter Servers and all vCenter Server instances registered with the soon-to-be-decommissioned External PSC to another PSC within the same vSphere domain.

External PSC Appliance:

  1. SSH to one of the other working External PSC appliances or Embedded PSC/vCenter within the same SSO domain via root
  2. To enable the Bash shell, run:

    shell.set --enabled true
  1. Run the shell command to start the Bash shell and log in.

  2. Run the cmsso-util unregister Command to unregister the stopped/powered off External PSC:

    cmsso-util unregister --node-pnid External_Platform_Services_Controller_System_Name --username administrator@your_domain_name --passwd 'vCenter_Single_Sign_On_password'

  3. Where vCenter_Server_Appliance_System_Name is the FQDN or IP address of the vCenter Server Appliance that you want to decommission. 

  4. Enter vCenter_Single_Sign_On_password in quotes.

    Note: There is downtime involved in executing the cmsso-util unregister command. It will restart the services on the node where you are executing the command.

  5. Delete the PSC appliance that you no longer need from the vSphere inventory.

Process to Decommission an Embedded PSC/vCenter and/or vCenter (that points to an External PSC)

vCenter Server Appliance:

  1. Power off the vCenter Server Appliance you are decommissioning.

  2. SSH to one of the other working External PSC or Embedded PSC/vCenter appliance within the same SSO domain via root

  3. To enable the Bash shell, run:
    shell.set --enabled true

  4. Run the shell command to start the Bash shell and log in.

  5. Run the cmsso-util unregister Command to unregister the vCenter Server Appliance:
    cmsso-util unregister --node-pnid vCenterServer_System_Name --username administrator@your_domain_name --passwd 'vCenter_Single_Sign_On_password'

  6. Where vCenter_Server_Appliance_System_Name is the FQDN or IP address of the vCenter Server Appliance that you want to decommission. 

  7. Enter vCenter_Single_Sign_On_password in quotes.

    Note: There is downtime involved in executing the cmsso-util unregister command. It will restart the services on the node where you are executing the command.

  8. Delete the vCenter Server Appliance that you no longer need from the vSphere inventory.

 



Additional Information

Note: Retry executing the cmsso-util command without the --passwd portion if the command fails immediately with the error "Failed!!!". It will prompt for the SSO admin user password as indicated in the notes section at the top of the KB.

Note: (version 6.5 onwards) To get a list of vCenters and PSCs in the SSO domain, run the command below from a PSC or vCenter with Embedded PSC:
/usr/lib/vmware-vmafd/bin/dir-cli nodes list

This list will also indicate what type of node each machine in the SSO domain is. A Management node refers to a vCenter with an external PSC. A PSC node refers to either a PSC machine or a vCenter with Embedded PSC.

Powered by Wolken Software