OSAM Guest OS is not visible in the HCX Sentinel Management

Products

• VMware HCX

Issue/Introduction

• You are unable to perform a OSAM migration with the message: "Virtual Machine not found in the container"
  
• After installing the HCX Sentinel agent on the guest OS (Linux/Windows), the guest OS is not visible under HCX UI → Interconnect → Service Mesh → 'Select View Appliances for the correct Service Mesh' → Sentinel Management.


• The OS Sentinel logs show the following errors :
  
  

  <timestamps> ERROR [Thread-3] c.v.h.F.ManagerReSTServer - Unable to connect to SGW, not starting ReST server.
  <timestamps> INFO  [Thread-3] c.v.h.F.HCXConnectionFactory - Creating a new SSL Context
  <timestamps> ERROR [Thread-3] c.v.h.F.HCXConnectionFactory - Error creating SSL Connection
  java.net.ConnectException: Connection timed out (Connection timed out)

  
  For Linux installations, logs can be found under:
  /var/log/vmware/hcx/osam/sentinel.log
   
  For Windows installations, logs can be found under:
  C:\ProgramData\VMware\HCX\OSAM\sentinelService.log

Environment

HCX

Cause

The HCX Sentinel Agent on the source Guest OS was unable to establish communication with the SGW (Sentinel Gateway) on port 443.

Resolution

Please ensure that port 443 is open between the Source Guest OS and HCX-SGW for OSAM migrations.
For a complete list of all required ports, refer to the "HCX Port Requirements" documentation.

• Linux commands to check connectivity from Guest OS :
  

  curl -k -v https://<HCX-SGW-IP>:443
  netstat -nat | grep <HCX-SGW-IP>:443

• Windows command to check connectivity from Guest OS :
  

  netstat -nao | find "<HCX-SGW-IP>:443"
  telnet <HCX-SGW-IP> 443

The <HCX-SGW-IP> can be found in the HCX UI under Interconnect → Service Mesh → 'Select View Appliances for the correct Service Mesh', where the IP is flagged with the 'Guest Network'. Example:

An HCX Proxy configured can also cause the VMs to not appear in HCX Sentinel Management. 

If the Guest OS is on a different network or subnet, you can optimize the datapath by creating a new service mesh in the same network/subnet.

Additional Information

For site pairs where the non-vSphere guest environment is paired directly with either a vSphere-based HCX Connector or HCX Cloud Manager site (single-site mode), HCX deploys the Sentinel Resource Gateway (SRG) appliance at the vSphere-based site. This appliance alone handles the migration of the guest workloads from the non-vSphere site to the vSphere-based HCX site.

For more information, please access:
Understanding VMware HCX OS Assisted Migration