Patching vCenter Server to 7.0 Update 3e (build 19717403) fails with 'Exception occured in postInstallHook' due to wcp service

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

• Issue is seen with vCenter Server in Enhanced Linked mode (ELM) only
• Patching fails at 90% with error 'Exception occured in postInstallHook'
• /var/log/vmware/applmgmt/PatchRunner.log

2022-06-01T23:32:20.34Z INFO service_manager Starting service 'wcp' ...
2022-06-01T23:32:20.34Z INFO service_manager Executing command '[['/bin/service-control', '--start', 'wcp']]'
2022-06-01T23:32:25.844Z INFO service_manager Command '[['/bin/service-control', '--start', 'wcp']]' has exit-code='1' and stdout: Operation not cancellable. Please wait for it to finish...
Performing start operation on service wcp..
stderr: Error executing start on service wcp. Details {
    "detail": [
        {
            "id": "install.ciscommon.service.failstart",
            "translatable": "An error occurred while starting service '%(0)s'",
            "args": [
                "wcp"
            ],
            "localized": "An error occurred while starting service 'wcp'"
        }
    ],
    "componentKey": null,
    "problemId": null,
    "resolution": null
}

• /var/log/vmware/wcp/wcpsvc.log

2022-06-01T23:55:20.688Z info wcp [eamagency/permissions.go:161] [opID=vCLS] Ensure vCLSAdmin role exists with desired privileges
2022-06-01T23:55:20.688Z info wcp [eamagency/permissions.go:38] [opID=vCLS] Get roleID for role: vCLSAdmin
2022-06-01T23:55:20.767Z info wcp [eamagency/permissions.go:58] [opID=vCLS] Successfully retrieved role ID 90052196 for role: vCLSAdmin
2022-06-01T23:55:20.767Z info wcp [eamagency/permissions.go:182] [opID=vCLS] vCLSAdmin role is already present with roleID 90052196. Updating role to ensure desired privileges are present
2022-06-01T23:55:20.818Z error wcp [eamagency/permissions.go:186] [opID=vCLS] Failed to update the role; err: ServerFaultCode: The specified key, name, or identifier '' already exists.
2022-06-01T23:55:20.818Z error wcp [clustersvc/controller.go:98] [opID=vCLS] Failed to set up vCLSAdmin role, err: ServerFaultCode: The specified key, name, or identifier '' already exists.

 

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware vCenter Server 7.0.x

Cause

This issue is caused due to duplicate vCLSAdmin role in the vCenter Roles

Resolution

VMware Engineering is aware of this issue and is working on providing a fix in an upcoming release

Workaround:
To resolve the issue, we need to delete the duplicate vCLSAdmin role from the vCenter
 

• Take offline snapshots of all the vCenters in the SSO domain before performing the next steps
• Delete the duplicate vCLSAdmin role via vSphere UI (Menu -> Administration -> Access Control -> Roles)

Note: Ensure the role that will be deleted does not have any users listed under usage

• Once the role is deleted, re-attempt with the patching of vCenter Server