CSP-102092 patch fails to install on VMware Identity Manager 3.3.7 due to incorrect version (3.3.6) reported by vamicli

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

When attempting to apply a CSP patch (such as the one described in Broadcom KB 412021) to a VMware Identity Manager 3.3.7 appliance, the installation may fail with the following error:

Pre-checks passed successfully.
Target version: 3.3.7.0 | Detected version: 3.3.6.0
ERROR: Wrong version detected.

The underlying symptom is that the vamicli version --appliance command incorrectly reports the version as 3.3.6, even though the appliance was previously upgraded to 3.3.7 and may have been functioning without issue. The command output will, however, show the correct build number for the 3.3.7 release.

This version mismatch is caused by an incomplete update of the appliance manifest and prevents new patches from installing.

Environment

VMware Identity Manager 3.3.7

Cause

The root cause is an incomplete update of the manifest-installed.xml file on the affected appliance node, which likely occurred during the previous upgrade from version 3.3.6 to 3.3.7.

Although the appliance may have appeared to function correctly, this manifest file retained some version references to 3.3.6. This metadata discrepancy was not exposed until the CSP patch was applied, as the patch installer checks this file for version compatibility.

Resolution

Warning: You must verify both of the following conditions before proceeding. If these conditions are not met, do not follow these steps.

• The vamicli version --appliance command reports version 3.3.6 but shows the 3.3.7 build number.
• A manual review of the manifest-installed.xml file shows numerous RPMs listed with 3.3.7 versions.

1. Log in to the affected VMware Identity Manager appliance as the root user via SSH.
2. Locate and create a backup of the /opt/vmware/var/lib/vami/update/data/info/manifest-installed.xml file.
3. Open the original /opt/vmware/var/lib/vami/update/data/info/manifest-installed.xml file using a text editor.
4. Find the incorrect version references pointing to "3.3.6" and modify them to "3.3.7".
5. Locate the allowedSourceVersions attribute and modify it to match the existing pattern, reflecting the update from 3.3.6.
   Example: [3.3.6.0,3.3.6.99,3.3.7.0,3.3.7.99]
6. Save your changes to the manifest-installed.xml file.
7. Run the vamicli version --appliance command again to confirm that the appliance now correctly reports version 3.3.7.
8. You may now proceed with the CSP patch installation.

 

Additional Information

This behavior was observed on a single node in a cluster and was not apparent until the CSP patch was applied.

This issue may be discovered while attempting to apply the patch documented in CSP-102092 Patch Instructions for VMware Identity Manager 3.3.7 and VMware Aria Suite Lifecycle 8.18.0 Patch 5.