Error "Failed to apply Component VEE-veecdp : an error occurred while enabling service iofilterd-veecdp" during vLCM remediation

Products

• VMware vCenter Server
• VMware vSphere ESXi 8.0

Issue/Introduction

• vCenter Lifecycle Image Remediation on ESXi Hosts with the VEE-veecdp component, fails with the below error:
  
  Failed to apply Component VEE-veecdp(####): an error occurred while enabling service iofilterd-veecdp.

• The I/O filter installation task fails in Veeam Server with the below error:
  
  Error Installing CDP components on cluster and Host issue: The agent's workflow is blocked. 

• At the time of task failure in Veeam server, we see the below alert in vCenter:

  Agent requires application of configured solutions through vSphere Lifecycle Manager on host

• The ESXi host's /var/run/log/lifecycle.log contains the following:

  Db(##) lifecycle[####]: HostImage:1484 installer LiveImageInstaller failed: VEE_bootbank_veecdp_####: VEE_bootbank_veecdp_####: Error in running [/etc/init.d/iofilterd-veecdp start install]:
  Db(##)[+] lifecycle[####]: Return code: 1
  Db(##)[+] lifecycle[####]: Output:
  Db(##)[+] lifecycle[####]: It is not safe to continue. Please reboot the host immediately to discard the unfinished update.. Clean up the installation.
  In(##) lifecycle[####]: runcommand:### runcommand called with: args = ['/usr/lib/vmware/vob/bin/addvob', 'vob.user.esximage.install.error', 'VEE_bootbank_veecdp_####: VEE_bootbank_veecdp_####: Error in running [/etc/init.d/iofilterd-veecdp start install]:\nReturn code: 1\nOutput: \n It is not safe to continue. Please reboot the host immediately to discard the unfinished update.

Environment

• VMware vCenter 8.0

• VMWare ESXi 8.0

Cause

A failed live update of the Veeam CDP I/O filter corrupts the host's update transaction state. When the LiveImageInstaller fails to enable the iofilterd-veecdp service, the host marks the system as unsafe to continue. This locks the agent workflow to prevent hypervisor corruption, blocking any further vLCM remediations until the dirty transaction is cleared.

Resolution

1. Place the affected ESXi host into Maintenance Mode.

2. Reboot the ESXi host immediately to discard the unfinished update and clear the transaction lock.

3. Exit Maintenance Mode once the Host is back online.

4. Re-run the I/O filter installation from the Veeam server.

5. Re-attempt the vSphere Lifecycle Manager image remediation.

Additional Information

If the issue persists, see Contact Broadcom Support.