VMware Tools Interactive upgrade fails when "isolation.tools.autoInstall.disable"= "TRUE".

Products

• VMware vCenter Server
• VMware vSphere ESXi

Issue/Introduction

Symptoms:

• Updating VMware Tools using either the Automatic or Interactive option fails with the error "The required VMware Tools ISO image does not exist or is inaccessible. vix error code = 21001.
• The advanced configuration "isolation.tools.autoInstall.disable = "TRUE"  has been added to the virtual machine. 
• The vmware.log contains the following errors:

2018-04-25T13:22:28.018Z| vmx| I125: ToolInstall: Tools installation failed due to isolation setting.

Environment

VMware vSphere ESXi 6.5
VMware vCenter Server 6.5.x

Cause

The advanced setting "isolation.tools.autoInstall.disable = TRUE" will block communication to the virtual machine regarding the VMware Tools installation.

Resolution

This is expected behavior when this advanced configuration is set to "TRUE".  Both Automatic and Interactive tools upgrades will fail. 

Per the vSphere 6.5 Security Configuration Guide, this advanced configuration is no longer required in vSphere 6.5. Check the vSphere 6.5 Security Configuration Guide for more details.

To disable this setting:

Edit the vmx file of the VM:

1. Power down the affected VM
2. Connect to the host the VM is running on via SSH
3. Find the vmx file of the VM using the below command:

find /vmfs/volumes -iname *.vmx​​

 

4. open the vmx file in your preferred editor and remove the entry below:

isolation.tools.autoInstall.disable = "TRUE"
 

  Use the vSphere Client:

1. Power down the affected VM
2. Right click the affected VM and select Edit Settings...
3. Select VM Options
4. Expand Advanced > Configuration Parameters
5. Select EDIT CONFIGURATION...
6. Set the value of key isolation.tools.autoInstall.disable to FALSE
7. Select Ok

Additional Information

vSphere 6.5 Security Configuration Guide

https://blogs.vmware.com/vsphere/2017/06/secure-default-vm-disable-unexposed-features.html

https://blogs.vmware.com/vsphere/2017/04/vsphere-6-5-security-configuration-guide-now-available.html

Impact/Risks:
When this advanced configuration is set to "TRUE" VMware Tools must be installed manually.