vCenter upgrade from 7.0U3 to 8.0U3 fails in VxRail environment

Products

• VMware vCenter Server

Issue/Introduction

Upgrading from vCenter Server version 7.0U3 to 8.0U3 encounters a requirement mismatch spec error, specifically related to SSL Trust certificates and MACHINE_SSL_CERT, as well as services in multiple sites.

Below logs are observed in upgrade-source-requirements.log and requirements-upgrade-runner.log:

upgrade/upgrade-source-requirements.log

           "requirementMismatchSpecs": [
                {
                    "text": {
                        "id": "upgrade.lookupsvc.precheck.certificate.mismatch.description",
                        "translatable": "SSL Trust certificate does not match the current MACHINE_SSL_CERT for one of the service registrations",
                        "localized": "SSL Trust certificate does not match the current MACHINE_SSL_CERT for one of the service registrations"
                    },
                    "description": null,
                    "resolution": {
                        "id": "upgrade.lookupsvc.precheck.certificate.mismatch.resolution",
                        "translatable": "Please read KB79741 for more information. https://kb.vmware.com/s/article/79741",
                        "localized": "Please read KB79741 for more information. https://kb.vmware.com/s/article/79741"
                    },
                    "problemId": null,
                    "severity": "WARNING"

upgrade/requirements-upgrade-runner.log

<YYYY-MM-DD> <Time> INFO upgrade.states.component_states sso:CollectRequirements: <YYYY-MM-DD> <Time> INFO ssoCollectValidate lookupsvc json data: {
<YYYY-MM-DD> <Time> INFO upgrade.states.component_states sso:CollectRequirements:   "sites": {
<YYYY-MM-DD> <Time> INFO upgrade.states.component_states sso:CollectRequirements:     "default-first-site":
......
<YYYY-MM-DD> <Time> INFO upgrade.states.component_states sso:CollectRequirements:     "site1": {

Resolution

• Take a snapshot of the vCenter in advance before making any changes.
• Run below command to diagnose any issues. If an error occurs, follow the suggestions provided in the output.
  python lsdoctor.py -l
• Run below command to solve the certificate mismatch issue:
  python lsdoctor.py -t
• Run below command to solve the services in multiple sites issue:
  python lsdoctor.py -r
• Upgrade the vCenter again.

Note: Please refer to Using the 'lsdoctor' Tool for details.