Image-based cluster upgrades fail with the error: "View 'Image' from 'Lifecycle Manager' is not available for this object."
Article ID: 402169
Updated On:
Products
Issue/Introduction
1. While setting up a cluster to use image-based updates, the vSphere Client fails with the error message "View 'Image' from 'Lifecycle Manager' is not available for this object. Note that different views might have the same name."
2. /var/log/vmware/vsphere-ui/logs/vsphere_client_virgo.log shows below errors:
[YYYY-MM-DDTHH:MM:SS.MS] [ERROR] nio-127.0.0.1-5090-exec-3742 71345952 168535 201513 com.vmware.vise.mvc.controllers.PluginServiceController A general error occurred while evaluating plugin (com.vmware.vlcm.client:8.0.3.24322831:-578303308) dynamic extensions info from the vSphere Client platform. com.vmware.vapi.std.errors.Unauthorized: Unauthorized (com.vmware.vapi.std.errors.unauthorized) => {
messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => {
id = vapi.security.authorization.invalid,
defaultMessage = Unable to authorize user,
args = [],
params = <null>,
localized = <null>
}],
data = <null>,
errorType = UNAUTHORIZED
3. /var/log/vmware/applmgmt/applmgmt.log shows below errors:
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]DEBUG:vmware.appliance.extensions.authorization.authorization_sso:Required privileges = ['ModifyConfiguration']
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]DEBUG:vmware.appliance.extensions.authorization.authorization_sso:User=vsphere.local\vsphere-webclient-######-####-####-####-#######, groups={'vsphere.local\\ServiceProviderUsers', 'vsphere.local\\vSphereClientSolutionUsers', 'vsphere.local\\SolutionUsers', 'vsphere.local\\ActAsUsers', 'vsphere.local\\Everyone', 'vsphere.local\\LicenseService.Administrators', 'vsphere.local\\Administrators'}
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]DEBUG:root:Validated user privileges in localstore or SSO
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]DEBUG:vmware.appliance.extensions.authorization.authorization_sso:Required privileges = ['ModifyLocalConf']
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]DEBUG:vmware.appliance.extensions.authorization.authorization_sso:User=vsphere.local\vsphere-webclient-######-####-####-####-#######, groups={'vsphere.local\\ServiceProviderUsers', 'vsphere.local\\vSphereClientSolutionUsers', 'vsphere.local\\SolutionUsers', 'vsphere.local\\ActAsUsers', 'vsphere.local\\Everyone', 'vsphere.local\\LicenseService.Administrators', 'vsphere.local\\Administrators'}
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]DEBUG:root:Validated user privileges in localstore or SSO
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]INFO:vmware.vherd.transport.ssh_access_collector:[Unit Test] renewed 50 credits to post event
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]INFO:vmware.vherd.transport.ssh_access_collector:[Unit Test]Start collecting from sshinfo.log ...
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]DEBUG:vmware.vherd.transport.authentication:Authentication Server Secret Renewed.
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]INFO:vmware.appliance.vapi.auth:Authorization request for service_id: com.vmware.appliance.logging.forwarding, operation_id: get
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]DEBUG:vmware.appliance.extensions.authorization.authorization_sso:Required privileges =
['ViewConfiguration']
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]DEBUG:vmware.appliance.extensions.authorization.authorization_sso:User=vsphere.local\vpxd-extension-######-####-####-####-#######, groups={'vsphere.local\\AnalyticsService.Administrators', 'vsphere.local\\ServiceProviderUsers', 'vsphere.local\\SolutionUsers', 'vsphere.local\\Users', 'vsphere.local\\ActAsUsers', 'vsphere.local\\Everyone', 'vsphere.local\\SystemConfiguration.Administrators', 'vsphere.local\\ComponentManager.Administrators', 'vsphere.local\\LicenseService.Administrators'}
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]DEBUG:root:Validated user privileges in localstore or SSO
YYYY-MM-DDTHH:MM:SS PM -05 [3252874]DEBUG:vmware.appliance.extensions.authorization.authorization_sso:Required privileges = ['ModifyConfiguration']Environment
VMware vCenter Server 8.x
Cause
The vSphere Client solution user groups on the vCenter Server are missing access to the SystemConfiguration.Administrators group.
Resolution
Add Administrators as a member of the group SystemConfiguration.Administrators on affected vCenter Server.
Steps:
1. Open the vSphere UI and navigate to: Administration -> Single Sign On -> Users and Groups
2. Select Groups and search for the group SystemConfiguration.Administrators
3. Edit the group. Add Administrators as a member of the group.
4. Then click Save.
Additional Information
Check the STS Cert and renew if required vCert - expired certificate replacement script
Feedback
