"Waiting for <VM_Name> to complete task: Drm.ExecuteVMotionLRO""The user does not have permission to view the entity associated with this event."/var/log/vmware/vpxd/vpxd.log
info vpxd [...] Ignore the WCP enterMaintenanceMode API result for host [...] because vSphere Namespaces is not enabled on its parent cluster.
info vpxd [...] Started retries to disable vCLS Pod Crx on host [...]
..
..
Host has powered-on system VMs; [vim.HostSystem:host-[...],[...]], eam: false, vclscrx: trueVMware vCenter Server 8.x
Host remained in an intermediate state while the system attempted to handle vCLS dependencies, which stalled the maintenance mode transition.
The root cause is configuration drift within vCenter's configuration file (/etc/vmware-vpx/vpxd.cfg). Stale XML blocks under the <vcls> tag—retained from previous software versions or failed state transitions—create a state-machine mismatch between vCenter (vpxd) and the ESXi host container runtime. Because of this structural conflict, vCenter cannot successfully issue or complete the teardown signal for the Embedded vCLS CRX pods during host maintenance entry.
Upgrading to vSphere 8.0 Update 3 frequently leaves residual legacy configuration tags in vpxd.cfg. When this happens, the workaround silently fails because the vCenter state machine gets trapped in a loop.
Workaround 1:
Refer to this doc if the Host is part of a VSAN Node, to place it in Maintenance mode - Place a Member of vSAN Cluster in Maintenance Mode
Workaround 2:
Take a snapshot of the vCenter Server Appliance prior to modifying core system files.
Sanitize vpxd.cfg Manually:
Stop the vCenter Server daemon:
service-control --stop vpxd
Backup the configuration file:
cp /etc/vmware-vpx/vpxd.cfg /etc/vmware-vpx/vpxd.cfg.bak
Open /etc/vmware-vpx/vpxd.cfg and safely remove the stale <vcls>...</vcls> XML block. (Note: Avoid greedy line-deletion commands such as multiline sed to prevent stripping unintended configuration tags).
Start the vCenter Server daemon:
service-control --start vpxd
Execute Retreat Mode Cycle:
Navigate to vSphere Client > [Cluster] > Configure > vSphere Cluster Services > General.
Click EDIT VCLS MODE, switch to Retreat Mode, and save. Verify that the Embedded vCLS CRX pods are completely removed from inventory.
Complete Host Maintenance: Place the target ESXi host into Maintenance Mode (which now completes smoothly past 19%), execute required updates, and exit Maintenance Mode.
Re-Enable System Managed Mode: Return to vSphere Cluster Services > General, click EDIT VCLS MODE, and set it back to System Managed to deploy fresh Embedded vCLS pods.
The vCLS VM cannot be manually migrated or powered off via standard methods. It is managed automatically by the vSphere control plane.
Post-reboot, maintenance mode operations completed successfully on the affected hosts.
Logs did not provide a definitive root cause, but symptoms point toward a vCLS-related blockage.