Pass-through authentication via PowerCLI is timing out after 10 minutes following the upgrade to vCenter 8.0 Update 2

Products

• VMware vCenter Server

Issue/Introduction

• After upgrading to vCenter 8.0.2, PowerCLI now times out after 10 minutes if pass through authentication is used
• Even if the PowerCLI session is active (running scripts, etc.) the session will still time out after 10 minutes regardless
• Error will be similar to the following:

CategoryInfo: InvalidArgument: (:) [Get-VM], ViServerConnectionException
FullyQualifiedErrorId : Client20_ConnectivityServiceImpl_TryVerifyIsConnected_NotConnected,VMware.VimAutomation

Environment

VMware vCenter Server 8.0.2

Cause

The Pass through authentication invokes the loginBySSPI method in vpxd. The workflow for loginBySSPI is different from the one for loginByToken. The problem here is that in the loginBySSPI we don't have a refresh callback, meaning that the session lives as long as does the token. In the case of loginBySSPI we have hardcoded this value to 10 minutes.

Resolution

Instead of using pass through authentication provide username and password directly with the PowerCLI Connect-VIServer command.

From VMware Cloud Foundation (VCF) 9.0, the loginBySSPI method has been disabled, as support for Integrated Windows Authentication (IWA) has officially ended and customers are advised to migrate to Federated Authentication.

For more information, please refer to below URLs:

https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-9-0-and-later/9-0/release-notes/vmware-cloud-foundation-90-release-notes/platform-product-support-notes.html

https://knowledge.broadcom.com/external/article?legacyId=78506