Domain repoint failed with "Registering infra services" on vCenter server

Products

• VMware vCenter Server 7.0
• VMware vCenter Server 8.0
• VMware vCenter Server 6.0

Issue/Introduction

• Unable to unlink vCenter in linked mode
• Domain repoint fails

All Repoint configuration settings are correct; proceed? [Y|y|N|n]: Y

Starting License export                                ....Done
Starting Authz Data export                             ....Done
Starting Tagging Data export                           ....Done
Export Service Data                                    ....Done
Uninstalling Platform Controller Services              ....Done
Stopping all services                                  ....Done
Updating registry settings                             ....Done
Re-installing Platform Controller Services             ....Done
Registering Infra services                             ....Failed
Repoint failed. Restore from backup

• /var/log/vmware/cloudvm/domain_consolidator.log

 

 

 

YYYY-MM-DDTHH:MM:SS INFO domain_consolidator Installing firstboot /usr/lib/vmware-certificatemanagement/firstboot/certificatemanagement_firstboot.py
YYYY-MM-DDTHH:MM:SS INFO domain_consolidator RC = 1
Stderr = YYYY-MM-DDTHH:MM:SS  'NoneType' object is not subscriptable
Traceback (most recent call last):
  File "/usr/lib/vmware-certificatemanagement/firstboot/certificatemanagement_firstboot.py", line 134, in register_with_LS
    dynVars=dynVars)
  File "/usr/lib/vmware-cm/bin/cloudvmcisreg.py", line 714, in cloudvm_sso_cm_register
    serviceId = do_lsauthz_operation(cisreg_opts_dict)
  File "/usr/lib/vmware/site-packages/cis/cisreglib.py", line 1199, in do_lsauthz_operation
    log('Authz url %s' % authz_endpoints[0].url)
TypeError: 'NoneType' object is not subscriptable

 

During handling of the above exception, another exception occurred:

 

Traceback (most recent call last):
  File "/usr/lib/vmware-certificatemanagement/firstboot/certificatemanagement_firstboot.py", line 212, in <module>
    main()
  File "/usr/lib/vmware-certificatemanagement/firstboot/certificatemanagement_firstboot.py", line 177, in main
    certMgrFb.register_with_LS()
  File "/usr/lib/vmware-certificatemanagement/firstboot/certificatemanagement_firstboot.py", line 143, in register_with_LS
    traceback.format_exc())))
  File "/usr/lib/vmware/site-packages/cis/l10n.py", line 75, in localizedString
    l10nMsg = L10nMessage(msgMeta, args)
  File "/usr/lib/vmware/site-packages/cis/msgL10n.py", line 214, in __init__
    raise ValueError("Invalid L10nMessage metadata %s", msgMeta)
ValueError: ('Invalid L10nMessage metadata %s', (<cis.msgL10n.MessageMetadata object at 0x7fe3f13eaed0>,))

 

Environment

vCenter server 7.x

vCenter Server 8.x 

Cause

• Service Type cs.authorization is missing on the vCenter. 
• Run the below command to check service Type and endpoints:

/usr/lib/vmware-lookupsvc/tools/lstool.py list --url https://localhost/lookupservice/sdk --no-check-cert >/tmp/psc.txt
less psc.txt | grep "Service Type: "|sort | uniq -c

 

Resolution

1. Take an offline snapshot of both vCenters 
2. Rebuild cs.authorization using lsdoctor -r on the affected vCenter Using the 'lsdoctor' Tool
3. Restart the services on both vCenters

  service-control --restart --all
   
   
4. Perform domain repoint
   
      cmsso-util domain-repoint -m execute --src-emb-admin Administrator --dest-domain-name vsphere.local