"The VMware certificate was not installed on the following nodes" when upgrading to vRA 7.1

Products

• VMware Aria Suite

Issue/Introduction

This article provide information on how to remove the problematic nodes from the vRealize Automation postgres database.

Symptoms:

• Upgrading vRealize Automation to vRealize Automation 7.1 fails.
• You see the error:
  
  The VMware certificate was not installed on the following nodes.
  <Server Names>
   
• The Management agent logs on the affected servers show the error:
  
  VMware.IaaS.Installation.Common.CommandLineInstallerException: Certificate failed to install: Access is denied.

Environment

VMware vRealize Automation 7.0.x
VMware vRealize Automation 6.2.x
VMware vRealize Automation 7.1.x

Cause

This issue occurs due to any one of the reasons:

• One or more nodes are not accessible from the vRealize Automation instance or
• There is some miscommunication between the Management Agent and its data within the vRealize Automation database.

Resolution

To resolve this issue, follow these steps:

 

1. Log on to all machines where the certificate failed to install and manually upgrade the Management Agent and try again.
2. If the failing node is not reachable because it has been removed previously:
    
   1. Snapshot/ backup your vRealize Automation IaaS servers.
   2. Try manually installing the vRealize Automation 7.1 Management Agent on the failing server and try again.
   3. If the unreachable nodes are Windows servers, then vRealize Automation Management Agent service should be running on them.
   4. Check the network connectivity (Ping) between the node(s) and the appliance you are upgrading from.
   5. DNS should be configured correctly (nslookup) between the node(s) and the appliance you are upgrading from.
   6. Review the Management Agent logs for any errors that may provide more detail on why the failure is occurring.
       
3. If the node is invalid or is removed previously from the environment, remove the node entry from the primary vRealize Automation appliance:
   
   Note: If you are running on vRealize Automation 7.0.1 or later, navigate to vRA Settings > Cluster tab in VAMI page and click Delete in the Nodes table to remove the invalid nodes.
   
    
   1. Back up your vRealize Automation appliances and Postgres Databases.
   2. SSH into the primary vRealize Automation appliance and run these commands in the order specified:
       
      1. cd /opt/vmware/vpostgres/current/bin
      2. su postgres
      3. ./psql vcac
          
   3. After logging in to the postgres database, run these commands in the order specified:
       
      1. \c vcac
      2. \x
      3. select * from cluster_nodes;
          
   4. Locate the node_id(s) for the nodes you want to remove and run this command:
       
      1. delete from cluster_nodes where node_id = '<ID from previous step>';
          
4. Re-run the upgrade.

Additional Information

To be alerted when this document is updated, click the Subscribe to Article link in the Actions box..升级到 vRA 7.1 时出现“以下节点上未安装 VMware 证书 (The VMware certificate was not installed on the following nodes)”错误