Spurious vStats and vTSDB Service Warnings During VCSA 8.0.3 File-Based Backups

Products

• VMware vCenter Server

Issue/Introduction

After upgrading vCenter Server Appliance (VCSA) to version 8.0.3, users may encounter warnings about vStats and vTSDB services failing to start when attempting to run VAMI file-based backups.

Logs show warnings about deprecated key derivation methods used for backup encryption.

These warnings may be spurious, as the services are often running correctly despite the alerts.

Environment

- vCenter Server Appliance (VCSA) version 8.0.3, Build 24022515
- Recently upgraded from an earlier version (e.g., 8.0.2)
- vCenter High Availability (VCHA) may be enabled

Cause

The root cause appears to be related to how the backup process interacts with these services after the upgrade. While warnings may suggest service failures, the services are often running correctly, and backups may complete successfully despite these warnings.

Resolution

1. Verify service status in VAMI:
   a. Log in to the VCSA management interface (VAMI).
   b. Navigate to the Services section.
   c. Check the status of vStats and vTSDB services. They should be listed as running.

2. Verify service status via command line:
   a. Access the VCSA via SSH or console.
   b. Run the following commands to check service status:
      ```
      service-control --status vmware-vpostgres
      service-control --status vmware-vmon
      ```
   c. Ensure both services are listed as "running".

3. Check service logs:
   a. Still in the SSH/console session, examine the service logs:
      ```
      tail -n 100 /var/log/vmware/vmon/vmon.log
      tail -n 100 /var/log/vmware/vmware-vpostgres/postgresql-db.log
      ```
   b. Look for any recent error messages or indications of service issues.

4. Attempt a manual file-based backup:
   a. In the VAMI, go to the Backup section.
   b. Initiate a manual file-based backup.
   c. Monitor the backup process for completion.

5. Review backup logs:
   a. Check /var/log/vmware/applmgmt/backup.log for warnings or errors.
   b. Look for messages about "deprecated key derivation" which may appear as warnings but don't necessarily indicate backup failure.

6. If services are verified as running and backups complete:
   a. Consider these warnings as informational.
   b. Continue to monitor backup success and verify backed up data integrity.

7. If issues persist:
   a. Collect a new set of VCSA log bundles.
   b. Contact VMware Support for further assistance.

Additional Information

Additional Information:
- Collecting diagnostic information for ESX/ESXi hosts and vCenter Server using the vSphere Web Client
- Uploading Diagnostic information for VMware through the Secure FTP & Broadcom portal

- vSphere Availability