When attempting a vCenter Server domain repoint the task fails during authz export

Products

• VMware vCenter Server

Issue/Introduction

Attempting to repoint a vCenter to a new domain after breaking ELM fails at authz export stage of the cmsso-util domain-repoint vCenter task.

In the vCenter's log /var/log/vmware/cloudvm/cmsso-util.log will show:

YYYY-MM-DDT##:##:##.####Z INFO cmsso_util Failed to execute script /usr/lib/repoint/authzservice_component_script.py
YYYY-MM-DDT##:##:##.####Z INFO cmsso_util Failed executing <cis.component_data.DcExportCommand object at 0x7f12922c2f10>
YYYY-MM-DDT##:##:##.####Z ERROR cmsso_util Re-pointing operation has failed during execution mode.
YYYY-MM-DDT##:##:##.####Z INFO cmsso_util ESC[91mRepoint failed. Restore from backup

Environment

• VMware vCenter Server 7.x
• VMware vCenter Server 8.x

Cause

The MachineGuid value stored within the local Likewise registry (vmdir service) is missing or desynchronized from the authoritative Machine ID managed by VMAFD and referenced in vpxd.cfg.

Resolution

Update the Likewise registry to match the authoritative VMAFD Machine ID.

1. Take an offline (powered off) snapshot of the vCenter Server. If the vCenter is part of an Enhanced Linked Mode (ELM) domain, offline snapshots of all replication partners are required.
   
   Refer: Snapshot Best practices for vCenter Server Virtual Machines
   
   
2. Run the following command and note the UUID returned:
   
   /usr/lib/vmware-vmafd/bin/vmafd-cli get-machine-id --server-name localhost
   
   
3. Use lwregshell to set the MachineGuid to the value obtained in Step 2.
   
   /opt/likewise/bin/lwregshell set_value '[HKEY_THIS_MACHINE\Services\vmdir]' 'MachineGuid' '<UUID_FROM_STEP_2>'
   
   
4. Apply the change by restarting all vCenter services:
   
   service-control --stop --all && service-control --start --all
   
   
5. Attempt cmsso-util domain-repoint task.

Additional Information

• VDT reports "Machine ID Check" FAIL due to Likewise registry mismatch

• To speak with a customer representative or a Support Engineer, see Contact Support.