vCenter upgrade to 7.0 Fails with : Encountered an internal error during firstboot
search cancel

vCenter upgrade to 7.0 Fails with : Encountered an internal error during firstboot


Article ID: 345445


Updated On:


VMware vCenter Server


  • vCenter Server upgrade to 7.0 fails during firstboot with error Encountered an internal error
  • You will see similar log entries as mentioned below 
/var/log/firstboot/fbInstall.json :

    "progress": 22,
    "progress_message": {
        "id": "install.ciscommon.component.starting",
        "translatable": "Starting %(0)s...",
        "args": [
            "VMware Security Token Service"
        "localized": "Starting VMware Security Token Service..."
    "status": "error",
    "info": [],
    "warning": [],
    "question": null,
    "error": {
        "detail": [
                "id": "install.ciscommon.internal.error",
                "translatable": "Encountered an internal error.\n\n%(0)s",
                "args": [
                    "Traceback (most recent call last):\n  File \"/usr/lib/vmware/site-packages/cis/\", line 249, in securityctx_modifier\n    yield\n  File \"/usr/lib/vmware/site-packages/cis/\", line 348, in add_securityctx_to_requests\n    return req_method(self, *args, **kargs)\n  File \"/usr/lib/vmware/site-packages/cis/\", line 358, in register_service\n    svc_create_spec)\n  File \"/usr/lib/vmware/site-packages/pyVmomi/\", line 556, in <lambda>\n    self.f(*(self.args + (obj,) + args), **kwargs)\n  File \"/usr/lib/vmware/site-packages/pyVmomi/\", line 368, in _InvokeMethod\n    return self._stub.InvokeMethod(self, info, args)\n  File \"/usr/lib/vmware/site-packages/pyVmomi/\", line 1481, in InvokeMethod\n    raise obj # pylint: disable-msg=E0702\npyVmomi.VmomiSupport.vmodl.fault.SecurityError: (vmodl.fault.SecurityError) {\n   dynamicType = <unset>,\n   dynamicProperty = (vmodl.DynamicProperty) [],\n   msg = '',\n   faultCause = <unset>,\n   faultMessage = (vmodl.LocalizableMessage) []\n}\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n  File \"/usr/lib/vmidentity/firstboot/\", line 1752, in main\n    vmidentityFB.boot()\n  File \"/usr/lib/vmidentity/firstboot/\", line 367, in boot\n    self.registerTokenServiceWithLookupService()\n  File \"/usr/lib/vmidentity/firstboot/\", line 654, in registerTokenServiceWithLookupService\n    raise e\n  File \"/usr/lib/vmidentity/firstboot/\", line 650, in registerTokenServiceWithLookupService\n    dynVars=dynVars)\n  File \"/usr/lib/vmware-cm/bin/\", line 710, in cloudvm_sso_cm_register\n    serviceId = do_lsauthz_operation(cisreg_opts_dict)\n  File \"/usr/lib/vmware/site-packages/cis/\", line 1116, in do_lsauthz_operation\n    ls_obj.register_service(svc_id, svc_create_spec)\n  File \"/usr/lib/vmware/site-packages/cis/\", line 348, in add_securityctx_to_requests\n    return req_method(self, *args, **kargs)\n  File \"/usr/lib/python3.7/\", line 161, in __exit__\n    raise RuntimeError(\"generator didn't stop after throw()\")\nRuntimeError: generator didn't stop after throw()\n"

2020-04-20T10:12:03.758Z  Security error: (vmodl.fault.SecurityError) {
   dynamicType = <unset>,
   dynamicProperty = (vmodl.DynamicProperty) [],
   msg = '',
   faultCause = <unset>,
   faultMessage = (vmodl.LocalizableMessage) []
2020-04-20T10:12:03.875Z  Failed to register VMware Token Service with Lookup Service.


VMware vCenter Server 7.0.x


This issue can happen if SSO Administrator account is not authorized to add service to the Lookup Service and this can be because SSO Administror is not available in Builtin Administrator group in VMDIRD.


To resolve this issue,

Connect to the PSC using jXplorer.

As you can see here, SSO Administrator user is missing under Builtin - Administrators.

To add the user,

Go to Builtin - Administrators
Go to Table Editor.
Right click on member space and click on Add another Value
On the value field, add : cn=Administrator,cn=Users,dc=vsphere,dc=local

If SSO domain name is not vsphere.local, change it accordingly.

Submit the changes and run the upgrade again.