"Failed to get an ssl thumbprint of the target server certificate / Could not get certificate fingerprint from host", Deploying or Migrating vCenter Server to 6.5 fails

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

• Migrating vCenter 5.5 to VCSA 6.0U2 or 6.5 using migration utility fails
• Unable to deploy new Platform Service Controller (PSC) 6.5.
• Unable to upgrade the PSC from 6.0 to 6.5.
• You see error similar to :

Could not get certificate fingerprint from host, hostname: Error: connect ECONNREFUSED IP:9123
OR
Could not get certificate fingerprint from host, PSC_FQDN: Error: connect EACCES IP:443
OR
error: vimService creation failed: Error
OR
Failed to get an ssl thumbprint of the target server certificate

Environment

VMware vCenter Server Appliance 6.0.x
VMware vCenter Server Appliance 6.5.x
VMware vCenter Server 5.5.x

Cause

This issue occurs:

• When the port 9123 is not open and the migration utility is launched without launching migration assistance from the windows vCenter machine or port 443 is blocked.
• If firewall or antivirus is enabled on the client machine from where you are deploying/upgrading the PSC.

Resolution

To resolve this issue:

1. Open port 443 on firewall in the client machine.
2. Run Migration Assistant from the VCSA ISO media which will be used to start the migration process including prechecks and opening of port 9123. Once you see the message waiting for migration to start, run the VCSA setup from other windows vCenter machine.

Note: Disable the antivirus in the client machine while installing PSC.

Additional Information

VMware vSphere Blog