Test Recovery of a VM fails with error : "The operation is not supported on the object".
search cancel

Test Recovery of a VM fails with error : "The operation is not supported on the object".

book

Article ID: 430314

calendar_today

Updated On:

Products

VMware Live Recovery

Issue/Introduction

Symptoms:

  • In VLSR environment, one of protected VM is newly added/configured with vTPM. i.e. VM is already protected by SRM before vTPM is configured for the VM.

  • On running Test Recovery, VM fails at workflow step-4 "Create writable storage snapshot" with error :
    "The operation is not supported on the object".

  • VM encryption is configured with Native Key Provider at both vCenters and Provider IDs for both Native Key Providers is identical.

  • The VM reports following error in Recent Tasks of vSphere Client :

"The operation is not supported on the object. Cannot enable host encryption for host sr2esx404p.metrotrains.local. Cannot apply encryption policy.  You must set the default key provider. "

  • Error in vmware-dr logs of target SRM reports following error:

    (/opt/vmware/support/logs/srm/vmware-dr.log)

    2026-02-23T00: 43:44.800Z error vmware-dr [01341] [SRM@6876 sub=Recovery ctxID=bbf8dc0f opID=b2c5554f-fc98-4878-933b-992c64402863-test: 1a3c: fbee: fele] [761e061d-0a16-4b37-bcc9-17b36ba1be0e. failoverOrchJob] Replication reported failure for VM SR2VUL402V
    [null], the vm will not be recovered: (vmodl.fault.NotSupported) {

    -->  faultCause = (vmodl . MethodFault) null,
    --> faultMessage = (vmodl. LocalizableMessage) [
    -->     (vmodl.LocalizableMessage) {
    -->           key = "com.vmware.vim.vpxd.encryption.noDefaultKmipServer",
    -->           arg = <unset>,
    -->           message = "Cannot apply encryption policy. You must set the default key provider."
    -->     },
    -->     (vmod1.LocalizableMessage) {
    -->         key = "com.vmware.vim.vpxd.encryption.hostEncryptionNotEnabled",
    -->         arg = (vmodl. KeyAnyValue) [
    -->              (vmod1. KeyAnyValue) {
    -->                     key = "host",
    -->                     value = "sr2esx404p.metrotrains. local"
    -->                 }
    -->            ], 
    -->            message = "Cannot enable host encryption for host sr2esx404p.metrotrains. local"
    -->      }
    -->    ]
    -->    msg = "The operation is not supported on the object."

Environment

  • VMware Live Site Recovery 9.x

Cause

The issue occurs as Target vCenter has its Native Key Provider not set as 'Default' unlike the Source vCenter's Native Key Provider.

Resolution

  • Set Native Key Provider at Target vCenter (in vSphere Client) as default using 'Set As Default' option.

    vSphere Client > Configure >  Key Providers > Select configured 'Naive key Provider' > Click on 'Set As Default'


  • Re-run Test Recovery.