VCF Operations Upgrade Stuck at Stage 10 of 14 "preparing pre-script".

Products

• VCF Operations

Issue/Introduction

Upgrading VCF Operations from 9.0.2 to 9.1, the process may stall at Stage 10 of 14 ("preparing pre-script").

Environment

VCF Operations 9.x

Cause

The issue is caused by incorrect iptables rules on the nodes preventing communication between services. Additionally, firewall hardening configurations block required internal ports during the Stage 10 execution phase.

Resolution

Depending on whether a virtual machine snapshot is available, follow the appropriate method below to update the iptables mode and restore firewall configurations across all nodes in the cluster.

Method 1: If a Snapshot is Available

• Revert all cluster nodes to their pre-upgrade snapshot.
• Log in to each cluster node via SSH using root credentials.
• Run the following commands on all nodes to set the correct iptablesmode and restart the firewall service:

update-alternatives --set iptables /usr/sbin/iptables-nft
update-alternatives --set ip6tables /usr/sbin/ip6tables-nft
service vmware-vcops-firewall restart

• Re-run the upgrade process from the Admin UI.

Method 2: Manual Recovery (No Snapshot Available)
If no snapshot exists, manually re-run the firewall hardening configuration and restart the vmware-vcops service across the nodes:

• Log in to all nodes in the cluster via SSH using root credentials.
• Execute the following commands on every node to correct the iptables mode:

update-alternatives --set iptables /usr/sbin/iptables-nft
update-alternatives --set ip6tables /usr/sbin/ip6tables-nft
service vmware-vcops-firewall restart

• Stop the VCF Operations service across all nodes:

service vmware-vcops stop

• Start the VCF Operations service across all nodes:

service vmware-vcops start

• Monitor the Admin UI. The upgrade process should resume automatically once the iptables rules are updated and services initialize.