FSVM upgrade fails with error "Cannot complete the operation. See the event log for details"

Products

• VMware vSAN

Issue/Introduction

• While trying to upgrade the FSVM to 8.x version from the vCenter UI > Cluster > Configure > vSAN > Services > File Service, the task is failing with below error.
  
  " Cannot complete the operation. See the event log for details"
  
  

Environment

VMware vSAN 8.x

Cause

This issue is due to the EAM service unable to trust the directory on the vCenter server where the FSVM OVFs are located.


/var/log/vmware/eam/eam.log from the vCenter server will report error as:

2025-11-04T04:51:15.950Z | ERROR | vlsi | LocalizationFilter.java | 96 | API ERROR: HostVMAgency(ID:0c251c9b-245d-451b-b205-############).update[opId=566754964, sessionId=62666190]. Fault:
eam.fault.CertificateNotTrustedFault {
   url = 'https://<vCenter_FQDN>:443/vsanHealth/fileService/ovf/8.0.3.1000-24022510/VMware-vSAN-File-Services-Appliance-8.0.3.1000-24022510_OVF10.ovf',
}
(eam.fault.CertificateNotTrustedFault) {
   faultCause = com.vmware.vim.binding.vmodl.MethodFault: "com.vmware.eam.security.trust.NotTrusted: Suitable trust, not found!" Please follow KB 93130,
   faultMessage = null,
   url = https://<vCenter_FQDN>:443/vsanHealth/fileService/ovf/8.0.3.1000-24022510/VMware-vSAN-File-Services-Appliance-8.0.3.1000-24022510_OVF10.ovf
}

Resolution

Broadcom engineering is aware about this issue and working on the fix.


Workaround:

To configure a leaf SSL certificate that is to be trusted for a specific VIB or OVF URL

1. Login to VCSA through SSH using root.
2. Run the below command:

 #/usr/lib/vmware-eam/bin/eam-utility.py install-cert <VIB/OVF URL>

 

Note:

• The operation above can be reverted by running: eam-utility.py uninstall-cert <VIB/OVF URL>
• The agency owner can also do the SSL trust configuration via the EAM API. In this case, it takes precedence over the configuration made via the script /usr/lib/vmware-eam/bin/eam-utility.py.

Additional Information

EAM API call fails with CertificateNotTrustedFault or EAM agent has CertificateNotTrusted issue

vSAN file service will not deploy nodes