vSAN admin tasks encounter service operation error on vCenter.

Products

• VMware vSAN

Issue/Introduction

When updating mismatched configuration, vCenter state is authoritative, enabling performance stats, and more. 

- You encounter on vCenter a service timeout error, that states a: "Service Operation error" from the initiator user  'com.vmware.vsan.health'

 

In vSAN health logs on vCenter 

• /var/log/vmware/vsan-health/vmware-vsan-health-service.log

 

The following error is observed:

• “PermissionError: [Errno 13] Permission denied: ‘/etc/vmware-vpx/ssl/vcsoluser.key”

Cause

vSAN health plugin is not running with root permissions. 

Resolution

The resolution will stop the vSAN health plugin, elevate vSAN health plugin to root permissions, then start the service. 

 

Load into vCenter command line by using vCenter IP or FQDN using an SSH terminal. 

•  Run the following commands from bash. 
  • If bash is not loaded at start, type: shell.set --enabled true ; then type bash. 

 

From vCenter CLI, using an SSH session. 

1. service-control --stop vmware-vsan-health
2. cd /usr/lib/vmware-vmon
3. vmon-cli -U vsan-health -R root
4. service-control --stop vmware-vsan-health