Failed to install I/O filters due to CertificateNotTrusted Exception

Products

• VMware vCenter Server

Issue/Introduction

• To bypass the certificate check for the IO Filter installation.
• While performing the IO Filter installation task on the Veeam console, we see the below errors

  Installing CDP components on cluster: 52S-Cluster01 ... Error: The operation is not allowed in the current state
  
  Failed to install I/O filters: Failed to install I/O filter on cluster: 52S-Cluster01
  
  Failed to perform CDP components deployment Error: The operation is not allowed in the current state.

• On checking the vCenter logs (vpxd.log), we see the following entries :

  [YYYY-MM-DDTHH:MM:SS] error vpxd[2207978] [Originator@6876 sub=Iofilter opID=431c2920] Received EAM runtime fault: N3Eam5Fault26CertificateNotTrustedFault9ExceptionE(Fault cause: eam.fault.CertificateNotTrustedFault
    --> )
    --> [context]zKq7AVECxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxpYmMuc28uNgA=[/context]
  .
  .
  .
  [YYYY-MM-DDTHH:MM:SS] error vpxd[2207978] [Originator@6876 sub=Default opID=431c2920] [VpxLRO] -- ERROR task-815xx91 -- 52xxxa3f-xxd-5xx1-27ca-58xx35xxb7e(52xx76-31dxx90d2-3c97xx96be7) -- IoFilterManager -- vim.IoFilterManager.installIoFilter: :vim.fault.InvalidState
    --> Result:
    --> (vim.fault.InvalidState) {
    -->  faultCause = (vmodl.MethodFault) null,
    -->  faultMessage = <unset>
    -->  msg = ""
    --> }
    --> Args:
    -->
    --> Arg vibUrl:
    --> "https://server.domain.lan:33034/dapi/bundle/8.0.0/12.0.1008"
    --> Arg compRes:
    --> 'vim.ClusterComputeResource:domain-c1234'

 

Environment

VMware vCenter Server 8.0

Cause

The eam extension does not trust the certificate received from the Veeam URL and hence does not allow the IO Filter installation to proceed.

Resolution

• Login to vCenter SSH as root and run the below command : 

  /usr/lib/vmware-eam/bin/eam-utility.py disable-trust <URL to trust>

   

• Here, the "URL to trust" is the one seen in the error

  --> Arg vibUrl:
  --> "https://server.domain.lan:33034/dapi/bundle/8.0.0/12.0.1008"

   

• The command syntax in this case would be :

  /usr/lib/vmware-eam/bin/eam-utility.py disable-trust https://server.domain.lan:33034/dapi/bundle/8.0.0/12.0.1008