Generating ESX/ESXi logbundle from vSphere Client failed.

Products

• VMware vSphere ESXi

Issue/Introduction

Generating ESX/ESXi logbundle from vSphere Client failed, whereas it can be completed from Host Client.

You might see logs that indicates SSL error.

 

[YYYY-MM-DDThh:mm:ss.###+TZ] [INFO ] http-nio-5090-exec-60        70015028 111498 215201 com.vmware.vise.util.session.SessionUtil                          Associated sessionId 111498 with clientId 215201. Context path: /ui/admin-ui 
[YYYY-MM-DDThh:mm:ss.###+TZ] [ERROR] http-nio-5090-exec-55         c.v.vsphere.client.h5.admin.controllers.ExportLogsController      FileId parameter is empty. 
[YYYY-MM-DDThh:mm:ss.###+TZ] [ERROR] http-nio-5090-exec-55         c.v.vsphere.client.h5.admin.controllers.ExportLogsController      Error while downloading logs. javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at sun.security.ssl.Alert.createSSLException(Alert.java:131)
        at sun.security.ssl.TransportContext.fatal(TransportContext.java:331)
        at sun.security.ssl.TransportContext.fatal(TransportContext.java:274)
        at sun.security.ssl.TransportContext.fatal(TransportContext.java:269)
        at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)
        at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)
        at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)
        at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:377)
        at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444)
        at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422)
        at sun.security.ssl.TransportContext.dispatch(TransportContext.java:182)
        at sun.security.ssl.SSLTransport.decode(SSLTransport.java:152)
        at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1401)
        at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1309)
        at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:440)
        at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
        at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:197)
        at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1342)
        at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1317)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:264)
        at com.vmware.vise.util.http.ConnectionManager.connect(ConnectionManager.java:272)
        at com.vmware.vise.util.http.SimpleHttpClient.connect(SimpleHttpClient.java:354)
        at com.vmware.vise.util.http.SimpleHttpClient.connect(SimpleHttpClient.java:324)
        at com.vmware.vise.util.http.SimpleHttpClient.executeMethodResponseAsStream(SimpleHttpClient.java:222)
        at com.vmware.vise.util.http.SimpleHttpClient.executeMethodResponseAsStream(SimpleHttpClient.java:244)
        at com.vmware.vsphere.client.logbundle.HttpZipEntry.connect(HttpZipEntry.java:207)
        at com.vmware.vsphere.client.logbundle.UrlZipEntry.write(UrlZipEntry.java:162)
        at com.vmware.vsphere.client.h5.admin.controllers.ExportLogsController.writeHostLogsToStream(ExportLogsController.java:598)
        at com.vmware.vsphere.client.h5.admin.controllers.ExportLogsController.access$500(ExportLogsController.java:81)
        at com.vmware.vsphere.client.h5.admin.controllers.ExportLogsController$1.run(ExportLogsController.java:367)
        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)

Environment

VMware vSphere ESX
VMware vSphere ESXi

Cause

This could happen when a SSL certificate of ESXi cannot be trusted by vCenter Server's root certificate.

Resolution

If ESXi is using a VMCA signed certificate, try refreshing it [Configure] -> [System] -> [Certificate] -> [Renew].

If ESXi is using a custom certificate, follow the appropriate step to refresh it.