VLCM Image remediation fails on hosts during NSX-T upgrade

Products

• VMware Cloud Foundation
• VMware NSX

Issue/Introduction

Symptoms:
When you log in to vCenter Server associated to workload domain, select cluster (where vLCM or personality or desire state is enabled) and click on the "Updates" tab, you see that:

• Compliance status of hosts is unknown.
• The NSX-T upgrade for VLCM domains fails at REMEDIATION.

Environment

VMware NSX-T Data Center
VMware Cloud Foundation 4.1

Cause

This issue occurs because as with vSphere 7.0 Update 1, enabling lockdown mode on hosts, which are part of vLCM enabled clusters, will make the host compliance status unknown.

Resolution

This issue is resolved in VMware vSphere 7.0 Update 1c, available at VMware Downloads.

Workaround:
To work around this issue if you do not want to upgrade, avoid the upgrade failure by disabling the lockdown mode.