Log export fails from vCenter Server 8.0.3 UI for ESXi hosts with "Another log export might be in progress" error
Article ID: 441562
Updated On:
Products
Issue/Introduction
When you attempt to export host logs from the vCenter Server UI, the export fails with the following error message: Host logs for esxi cannot be exported at this time. Another log export might be in progress.
Additionally, you will observe the following log entries in /var/log/vmware/vpxd/vpxd.log
yyyy-mm-ddThh:mm:45.253+08:00 warning vpxd[06142] [Originator@6876 sub=CryptoManager opID=q-109218:h5ui-getPropertiesForObjects: 1189910562 :HostPropertyProvider:545353-bdqp-h5:70066820-c6] The session 52751b91-0ab0-17e9-e398-21270555b0b of user <DOMAIN>\<USER> does not have privilege Cryptographer.Access on entity [vim. HostSystem:host-12, <ESXi_FQDN>].
Environment
vCenter Server 8.0.3
ESXi (TPM-enabled hosts)
Cause
When ESXi hosts are configured with a Trusted Platform Module (TPM), host operations involving configuration or diagnostic data require specific cryptographic access rights. The assigned user role lacks the required cryptographic privileges (Cryptographer.Access) to perform diagnostic exports on TPM-enabled ESXi hosts.
Resolution
To resolve this issue, apply the appropriate cryptographic access rights to the affected user role:
Log in to the vCenter Server UI.
Modify the assigned vCenter Server user role to include the Direct Access privilege. This is located under the Cryptographic Operations permission tree.
- Assign the privilege using mentioned click path in vCenter vSphere client UI, Administration >> Roles under 'Access Control' >> Select the Role and click edit >> Click Cryptographic Operations and check the box for Direct Access.
Apply the updated role.
Re-attempt the log bundle export
Additional Information
Below kb can be referred for non-TPM ESXis for similar issues,
Feedback
