VCF Automation upgrade fails with SSH error VCFMS-PRECHECK-IMPORT-SSH-004 due to CIDR IP conflict
Article ID: 449349
Updated On:
Products
Issue/Introduction
When attempting to upgrade VCF Automation (VCFA) to version 9.1 within a VMware Cloud Foundation 9.x environment, the upgrade precheck fails with the following error:
SSH connection failed to server [VCFMS-PRECHECK-IMPORT-SSH-004]
Additionally, you may observe:
- Precheck logs indicating a failure to establish a connection to the source nodes.
- Validation failures related to the IP address pool or CIDR block provided for the upgrade.
Environment
VMware Cloud Foundation 9.1
Cause
The issue occurs because the CIDR block used for the VCF Automation cluster has an IP address conflict. Specifically, one of the IP addresses in the pool is already assigned to another virtual machine or resource in the network.
In versions prior to Fleet Lifecycle 9.1.0.0400, the upgrade workflow fails to correctly reflect the IP conflict message, instead defaulting to a generic SSH connectivity error. Furthermore, these versions only accept a single contiguous IP range or CIDR block, which can lead to allocation failures if that block contains existing active IPs.
Resolution
This issue is resolved in Fleet Lifecycle 9.1.0.0400 and later.
To resolve the issue:
Verify IP Availability: Ensure that the CIDR block or IP range intended for the VCF Automation components does not contain any IP addresses currently in use by other VMs or network devices.
Apply the Patch: Update your environment to Fleet Lifecycle 9.1.0.0400. This version introduces the ability to accept non-contiguous IP inputs and correctly validates available addresses during the upgrade flow.
- Refer to the for specific installation instructions.
Retry the Upgrade: Once the patch is applied, re-run the VCF Automation upgrade precheck from the VCF Operations UI.
Additional Information
- For issues specifically related to expired
vmware-system-userpasswords, see .
Feedback
