Configuration of an Encrypted VM Fails with an Error "The replication of encrypted virtual machines requires Secure LWD support. Secure LWD is not available for this VM"

Products

• VMware vSphere ESXi

Issue/Introduction

When you try to configure a replication for an encrypted virtual machine, the process fails with an error.

 "The replication of encrypted virtual machines requires Secure LWD support. Secure LWD is not available for this VM."

To configure a replication for the encrypted VM, you must verify that the vmware-hbr-agent VIB file is installed and running on the ESXi host of the source virtual machine. If not, you must manually install it

Environment

VMware vSphere Replication 8.x

VMware vSphere Replication 9.x

Cause

By default, when you power on the vSphere Replication appliance, a vSphere Installation Bundle (VIB) is installed on all supported ESXi hosts in the vCenter Server inventory where you deployed the appliance.

The automatic installation of the VIB file might fail due to different reasons.

Resolution

• Run the shell command esxcli software vib list on the source ESXi host.
  In the results, look for the vmware-hbr-agent VIB file.
  
  
  
  •  Check if vib installed and running on host
      ssh to ESXi host and verify vmware-hbr-agent is installed 
     
           esxcli software vib list | grep -i hbr
    
      ssh to ESXi host and verify vmware-hbr-agent is running
     
            /etc/init.d/hbr-agent status
    
      Set with reboot: 
     
          chkconfig --list | grep -i hbr   
          chkconfig hbr on|off 
  
  
  

If the VIB file is not available on the source ESXi host, you must install it manually or allow appliance to auto-push it to host.~

Auto deploy install VIB file

   -  ssh to VR appliance
       /opt/vmware/hms/bin/hms-configtool -cmd reconfig -property hms-auto-install-hbragent-vib=true
     
       service hms restart

Manually install VIB file

• Establish an SSH connection to the ESXi Server.
• Temporarily deactivate the firewall on the ESXi host.
  
    esxcli network firewall set --enabled false
  
  
• Run the following command:
  
    esxcli software vib install -v https://VR_APPLIANCE_IP:8043/vib/vmware-hbr-agent.vib
  
  
• Enable the firewall on the ESXi host.
  
    esxcli network firewall set --enabled true