VLCM Image remediation fails on hosts during NSX-T upgrade

Products

• VMware Cloud Foundation
• VMware NSX

Issue/Introduction

When you log in to vCenter Server associated to workload domain, select cluster (where vLCM or personality or desire state is enabled) and click on the "Updates" tab, you see that:

• Compliance status of hosts is unknown.
• The NSX-T upgrade for VLCM domains fails at REMEDIATION.

Environment

VMware NSX-T Data Center
VMware Cloud Foundation 4.1

Cause

This issue occurs because as with vSphere 7.0 Update 1, enabling lockdown mode on hosts, which are part of vLCM enabled clusters, will make the host compliance status unknown.

Resolution

 

This issue is resolved in VMware vSphere 7.0 Update 1c, available at Broadcom Downloads.
If you are having difficulty finding and downloading software, please review the Download Broadcom products and software KB.

To workaround this issue, if you do not want to upgrade, avoid the upgrade failure by disabling the lockdown mode.