SDDC precheck fails with SHA-1 validation during vCenter 8.0 patch
search cancel

SDDC precheck fails with SHA-1 validation during vCenter 8.0 patch

book

Article ID: 432306

calendar_today

Updated On:

Products

VMware SDDC Manager VMware Cloud Foundation

Issue/Introduction

  • SDDC vCenter 8.0 patch fails precheck on vSphere SHA-1 validation. The SDDC Manager precheck reports the following error message: 
    "vSphere SHA-1 validation. Support for certificates with weak signature algorithms has been removed in vSphere 8.0. Weak signature algorithm certificates must be replaced before upgrade."

Environment

  • VMware Cloud Foundation
  • vCenter Server 8.0.x
  • SDDC Manager

Cause

An ESXi host that was previously removed from SDDC Manager was not properly removed from the vCenter Server inventory. This orphaned host retains a legacy certificate utilizing the deprecated SHA-1 signature algorithm. vSphere 8.0 strictly enforces security standards that prohibit weak signature algorithms. The presence of this non-compliant certificate in the vCenter inventory triggers the validation failure during the SDDC Manager precheck.

Resolution

 

  1. Log in to the SDDC Manager UI.

  2. Navigate to Inventory > Hosts.

  3. Review the list of active hosts managed by SDDC Manager for the target workload domain.

  4. Log in to the vSphere Client for the target vCenter Server.

  5. Compare the vCenter Server host inventory against the SDDC Manager host inventory.

  6. Identify any ESXi hosts present in the vCenter Server inventory that are missing from the SDDC Manager inventory. These represent the orphaned hosts causing the validation failure.

  7. Manually remove the affected orphaned ESXi host(s) from the vCenter Server inventory.

  8. Rerun the SDDC Manager precheck for the vCenter Server patch. The precheck passes once the non-compliant certificate is removed from the inventory scope.

 

Note: Check and verify the host is decommissioned and holds no active workloads before removal, e.g. A host must be disconnected or placed in Maintenance Mode before it can be removed from the inventory.

Additional Information

Powered by Wolken Software