Convergence failing during vmidentity firstboot with error "Failed to set up STS system tenant"
search cancel

Convergence failing during vmidentity firstboot with error "Failed to set up STS system tenant"

book

Article ID: 334588

calendar_today

Updated On:

Products

VMware vSphere ESXi

Issue/Introduction

Symptoms:
  • Convergence failed during vmidentity firstboot.
  • Convergence performed via HTML5 and uses vapp-updates will encounter this issue.
  • Convergence performed using ISO (Correct build) will not hit this issue.  
YYYY-MM-DDT15:19:46.350Z INFO converge Running Firstboots for : vmon-firstboot,rhttpproxy_firstboot,lookupsvc-firstboot
YYYY-MM-DDT15:20:00.880Z INFO converge Running Firstboots for : vmidentity-firstboot
YYYY-MM-DDT15:20:21.517Z ERROR converge Failed to run white listed firstboot scripts. Error: {
    "detail": [
        {
            "translatable": "An error occurred while invoking external command : '%(0)s'",
            "args": [
                "Command: ['run-firstboot-scripts', '--action', 'firstboot', '--subaction', 'firstboot', '--fbWhiteList', 'vmidentity-firstboot']\nStderr: "
            ],
            "id": "install.ciscommon.command.errinvoke",
            "localized": "An error occurred while invoking external command : 'Command: ['run-firstboot-scripts', '--action', 'firstboot', '--subaction', 'firstboot', '--fbWhiteList', 'vmidentity-firstboot']\nStderr: '"
        }
    ],
    "problemId": null,
    "componentKey": null,
    "resolution": null
}
YYYY-MM-DDT15:20:21.526Z INFO converge Unsetting the converge running flag


/var/log/firstboot/vmidentity-firstboot.py_<PID>_stdout.log

YYYY-MM-DDT15:20:21.146Z Running command: ['/usr/java/jre-vmware/bin/java', '-cp', '/opt/vmware/lib64/*:/usr/lib/vmware-sso/commonlib/*:/usr/lib/vmware/common-jars/log4j-core-2.11.2.jar:/usr/lib/vmware/common-jars/log4j-api-2.11.2.jar:/usr/lib/vmware/common-jars/log4j-slf4j-impl-2.11.2.jar:/usr/lib/vmware/common-jars/jcl-over-slf4j-1.7.26.jar:.:*', '-Dvmware.log.dir=/var/log/vmware/sso/', '-XX:ErrorFile=/var/log/vmware/sso/hs_err_stsinstaller_pid%p.log-XX:HeapDumpPath=/var/log/vmware/sso/', 'com.vmware.identity.installer.STSInstaller', '--register-system-tenant']
YYYY-MM-DDT15:20:21.459Z Done running command
YYYY-MM-DDT15:20:21.459Z >>>>stderr:
YYYY-MM-DDT15:20:21.459Z Picked up JAVA_TOOL_OPTIONS: -Xms32M -Xmx128M
log4j:WARN No appenders could be found for logger (com.vmware.identity.interop.NativeLibraryPreloader).
log4j:WARN Please initialize the log4j system properly.
Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/logging/log4j/LogManager
        at com.vmware.identity.diagnostics.VMIdentityLogger.(VMIdentityLogger.java:29)
        at com.vmware.identity.diagnostics.DiagnosticsLoggerFactory.getLogger(DiagnosticsLoggerFactory.java:20)
        at com.vmware.identity.idm.server.ServerUtils.(ServerUtils.java:92)
        at com.vmware.identity.idm.server.config.IdmServerConfig.getServiceProviderUsername(IdmServerConfig.java:613)
        at com.vmware.identity.idm.server.config.IdmServerConfig.(IdmServerConfig.java:412)
        at com.vmware.identity.idm.server.config.IdmServerConfig.(IdmServerConfig.java:146)
        at com.vmware.identity.idm.server.config.ConfigStoreFactory.(ConfigStoreFactory.java:34)
        at com.vmware.identity.installer.STSInstaller.registerSystemTenant(STSInstaller.java:182)
        at com.vmware.identity.installer.STSInstaller.register_system_tenant(STSInstaller.java:1293)
        at com.vmware.identity.installer.STSInstaller.main(STSInstaller.java:1142)
Caused by: java.lang.ClassNotFoundException: org.apache.logging.log4j.LogManager
        at java.net.URLClassLoader.findClass(URLClassLoader.java:382)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
        at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:349)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
        ... 10 more
YYYY-MM-DDT15:20:21.459Z <<<>>>stdout:
YYYY-MM-DDT15:20:21.460Z Starting system tenant registration...


Environment

VMware vSphere ESXi 6.7

Cause

Convergence should not be downloading or using latest RPM from the latest URLs, it should look for the current build URL to get the RPM current URL is for latest patches for that release.

Resolution

This issue is resolved in VMware ESXi 6.7 P01, available at VMware Downloads.

Workaround:
Mount ISO to VCSA and perform the convergence activity as per documentation available at Download and Mount the vCenter Server Appliance Installer for UI Convergence.