SDDC manager Upgrade Prechecks fails with error "The file /home/vcf/.ssh/known_hosts does not have the required permissions."

Products

• VMware SDDC Manager

Issue/Introduction

Symptoms:

• Sddc Security Configuration precheck workflow fails on "Known_Hosts Health check" with error "The file /home/vcf/.ssh/known_hosts does not have the required permissions.".
  
  
  
  
  

Environment

VMware SDDC Manager 5.x
VMware SDDC Manager 4.x

Resolution

To resolve the issue reapply the correct permissions to the know_host files and refresh the list on the SDDC manager:

IMPORTANT: Ensure that fresh snapshots have been taken before making any modifications.

 

1. Connect to SDDC manager on SSH using vcf account
   
   
2. Type su - and enter root credentials to get into privilege mode 
   
   
3. Run the following command to reapply the correct permissions to the respective files:
   
   # chmod 644 /root/.ssh/known_hosts
# chown root:root /root/.ssh/known_hosts
# chmod 644 /etc/vmware/vcf/commonsvcs/known_hosts
# chown vcf_commonsvcs:vcf /etc/vmware/vcf/commonsvcs/known_hosts
# chmod 644 /home/vcf/.ssh/known_hosts
# chown vcf:vcf /home/vcf/.ssh/known_hosts
# chmod 644 /opt/vmware/vcf/commonsvcs/defaults/hosts/known_hosts
# chown vcf_commonsvcs:vcf /opt/vmware/vcf/commonsvcs/defaults/hosts/known_hosts


4. Refresh the SDDC manager Known Host list:
   
   # curl -k -X POST http://localhost/appliancemanager/ssh/knownHosts/refresh


5. Reattempt the prechecks