Installing Guest Introspection Service fails on NSX

Products

• VMware vDefend Firewall

Issue/Introduction

The purpose of the article is to resolve the error No service deployment spec found for service id: Guest Introspection when installing Guest Introspection.

Symptoms:

• Deploying new Guest Introspection services fails.
• Attempts to 'Resolve' in place Guest Introspection deployment fails.

For additional symptoms and log entries, see the Additional Information section.

Environment

VMware NSX for vSphere 6.2.x

Cause

This issue occurs when the service definition for Guest Introspection may have been deleted and not re-created properly which can lead to missing service deployment specification and attributes.

Resolution

To resolve this issue, the service definition for Guest Introspection Deployment Specification may need to be updated or the Deployment Mechanism may need to be re-created along with the Deployment Specification.

Note: If the Deployment Mechanism is correct, update the Deployment Specification with the OVF urls.

1. Navigate to Networking and Security > Service Definitions > Guest Introspection > Deployment.
2. Under Deployment Specification, select + to add and use the below values to complete the wizard.
   
   ESX Version: 6.*
   OVF URL: https://nsxmgr_ip/bin/usvm/6.2.2/ovf/vShield-USVM-VA-6.0.0.0-3213431_OVF10.ovf
   VMCI: Enabled
   
   
3. Repeat for ESX Versions 5.5.*, 5.1.*, 5.0.*
   Note: OVF URL is the same for all and VMCI is 'Enabled' for all.

To re-create the Guest Introspection Service definition:

1. Navigate to Networking and Security > Service Definitions > Guest Introspection.
2. Delete the current Guest Introspection Service.
3. Re-create the Guest Introspection Service:
   
   Name: Guest Introspection
   Version:6.2.1
   Service Manager: InternalServiceManager
   Deployment Mechanism: Host based Guest Introspection
   
   
4. Add Service Attributes and complete the wizard.
   
   Key Name
   gateway gateway
   extraInfo extraInfo
   vmname vmname
   netmask0 netmask0
   ip1 ip1
   ip0 ip0
   DNS DNS
   netmask1 netmask1
   Service Category 'Data Collection'
   
   
   

Additional Information

You experience these additional symptoms:

• The User Interface (UI) displays an error similar to:
  
  faultCode:Server.Processing
  faultString:'com.vmware.vshield.vsm.remoting.server.exceptions.RemoteBaseException : No service deployment spec found for service id: Guest Introspection. 'faultDetail:'null'
  
  
• In the /home/secureall/secureall/logs/vsm.log file on the NSX Manager, you see entries similar to:
  
  2016-10-31 18:27:28.766 GMT WARN http-nio-127.0.0.1-7441-exec-7 RemoteInvocationTraceInterceptor:87 - Processing of VsmHttpInvokerServiceExporter remote
  call resulted in fatal exception: com.vmware.vshield.vsm.fabric.deploy.facade.DeploymentConfigFacade.deployServices
  com.vmware.vshield.vsm.exceptions.InvalidArgumentException: core-services:90009:No service deployment spec found for service id: service-13.
  
  Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.