VCP Validation Fails With Missing iSCSI CHAP Password Error for Unused Adapters
Article ID: 439256
Updated On:
Products
Issue/Introduction
When applying a vSphere Configuration Profile (VCP) desired state, validation fails with an error indicating missing CHAP authentication credentials. The error path resembles:
/host-specific/<HOST_BIOS_UUID>/esx/storage_iscsi/hardware_adapters/0/chap_authentication/mutual_chap_auth/credentials/password.
The hosts are not actively utilizing the iSCSI storage adapters, but the desired state configuration is blocked from completing.
Environment
VMware vCenter Server 9.0.1
VMware ESXi 9.0.1
Cause
The ESXi host has active but unused iSCSI hardware adapters (e.g., qfle3i module). VCP detects the adapters and requires host-specific overrides for the CHAP passwords, as ESXi security architecture prevents exporting secrets or passwords into the plaintext VCP JSON document.
Resolution
Open an SSH session or local ESXi shell to the affected ESXi host.
Identify the active but unused iSCSI module (e.g.,
qfle3i).Run the following command to disable the iSCSI module:
esxcfg-module -d qfle3iReboot the ESXi host.
Once the host is back online, re-run the VCP compliance check. The storage adapters will no longer be present in the configuration, and the desired state will apply successfully without requiring the CHAP passwords.
Additional Information
Feedback
