Event ####: Guest operation authentication failed for operation Create Temporary File on Virtual machine

Products

• VMware vSphere ESXi
• VMware vRealize Log Insight 8.x

Issue/Introduction

We will see events as below in vRealize Log insight.

YYYY-MM-DDT15:00:54.577Z <ESX_FQDN> Hostd[2101721]: [Originator@6876 sub=Vimsvc. ha-eventmgr] Event 6011 : Guest operation authentication failed for operation Create Temporary File on Virtual machine <VM_NAME>.
.

YYYY-MM-DDT15:00:57.497Z <ESX_FQDN> Hostd[2101748]: [Originator@6876 sub=Vimsve. ha-eventmgr] Event 5274 : Guest operation authentication failed for operation Create Temporary File on Virtual machine <VM_NAME>.

/var/run/log/hostd.log:

YYYY-MM-DDT15:00:55.703Z In(166) Hostd[2101746] [Originator@6876 sub=Vimsvc.ha-eventmgr] Event 3798 : Guest operation authentication failed for operation Create Temporary File on Virtual machine VM_NAME.
YYYY-MM-DDT15:00:55.704Z In(166) Hostd[2101746] [Originator@6876 sub=Vmsvc.vm:/vmfs/volumes/vsan:xxxxxxx] State Transition (VM_STATE_GUEST_OPERATION -> VM_STATE_ON)
YYYY-MM-DDT15:00:55.707Z In(166) Hostd[2101746] [Originator@6876 sub=Vmsvc.vm:/vmfs/volumes/vsan:xxxxxxxx] [N8Guestsvc30CreateTemporaryFileRequestImplE:0x000000e6e0b9db20] opCode=7 auth=<hidden> prefix=powercli suffix= directoryPath= failed
YYYY-MM-DDT15:00:55.707Z In(166) Hostd[2101746] [Originator@6876 sub=Solo.Vmomi] Activation finished; <<52f499c5-df65-b7f7-fffd-0e75aa9b25e3, <TCP '127.0.0.1 : 8307'>, <TCP '127.0.0.1 : 36393'>>, ha-guest-operations-file-manager, vim.vm.guest.FileManager.createTemporaryFile, <vim.version.v8_0_2_0, internal, 8.0.2.0>, [N11HostdCommon18VmomiAdapterServer19ActivationResponderE:0x000000e6e149f938]>
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101746] [Originator@6876 sub=Solo.Vmomi] Arg vm:
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101709] --> 'vim.VirtualMachine:16'
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101746] [Originator@6876 sub=Solo.Vmomi] Arg auth:
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101709] --> (vim.vm.guest.NamePasswordAuthentication) {
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101709] -->    interactiveSession = false,
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101709] -->    username = "vcf",
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101709] -->    password = (not shown)
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101709] --> }
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101746] [Originator@6876 sub=Solo.Vmomi] Arg prefix:
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101709] --> "powercli"
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101746] [Originator@6876 sub=Solo.Vmomi] Arg suffix:
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101709] --> ""
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101746] [Originator@6876 sub=Solo.Vmomi] Arg directoryPath:
YYYY-MM-DDT15:00:55.707Z Db(167) Hostd[2101709] --> (null)
YYYY-MM-DDT15:00:55.707Z In(166) Hostd[2101746] [Originator@6876 sub=Solo.Vmomi] Throw vim.fault.InvalidGuestLogin
YYYY-MM-DDT15:00:55.707Z In(166) Hostd[2101746] [Originator@6876 sub=Solo.Vmomi] Result:
YYYY-MM-DDT15:00:55.707Z In(166) Hostd[2101709] --> (vim.fault.InvalidGuestLogin) {
YYYY-MM-DDT15:00:55.707Z In(166) Hostd[2101709] -->    msg = "",
YYYY-MM-DDT15:00:55.707Z In(166) Hostd[2101709] --> }
YYYY-MM-DDT15:00:55.708Z In(166) Hostd[2101736] [Originator@6876 sub=Hbrsvc] Replicator: powerstate change VM: 16 Old: 1 New: 1 

Environment

vSphere ESXi 7.x

vSphere ESXi 8.x

 

Cause

This event indicates that the credentials provided for guest operations on a virtual machine are incorrect or lack the necessary permissions.

Resolution

Check vSphere Replication workflow or Recovery Test Plan and update the credentials or remove this VM from the Plan.