Unable to migrate encrypted VM with vCloud Director Availability

Products

• VMware Cloud Director

Issue/Introduction

• When you try to create a replication for an encrypted virtual machine the configuration works but the sync stays stuck at 0% indefinitely.
• In vCenter you can see the error "A general system error ocurred: Key locator error" in a "Create virtual disk" task.

Environment

VMware Cloud Director Availability 4.x

Cause

This issue occurs because the HBR agent VIB is not installed on the source and or destination ESXi hosts 

Resolution

To resolve this issue install the HBR agent VIB in all the ESXi hosts. To download the HBR agent VIB file directly from the appliance:

• Depending on the appliance type and deployment, from the following URL on the appliance download the:
  
  • https://vCenter_Replication_Management_Appliance_Address:8043/hbr-agent.vib file.
  • https://Replicator_Appliance_Address/hbr-agent.vib file.
• Alternatively, from the appliance filesystem, download the /opt/vmware/hbr/vib/vmware-hbr-agent-build_number.i386.vib file.

After installing the HBR agent, it encrypts the traffic originating from the source ESXi host, providing end-to-end encryption. Installing the HBR agent in the destination ESXi host allows reversing the replications and the reverse replications traffic is also encrypted end-to-end.

For more information about VIBs and how to install them, see VIBs, Image Profiles, and Software Depots in the VMware ESXi Upgrade Guide.

Additional Information

To create replications for encrypted virtual machines there are prerequisites you need to configure, to learn more about this see Create a replication for encrypted virtual machines