Tag Archives: 6.5

Critical Patch for All-Flash vSAN with Deduplication (6.0 and 6.5)

VMware has released a critical patch for vSAN 6.0 and 6.5. This patch contains a fix for a highly critical vSAN issue that might cause IO read errors and in some cases severe symptoms such as inaccessible VMs, host failures, or stuck resyncs. The issue manifests itself only under highly specific operations and IO patterns.

The bug only affects All-Flash vSAN configurations with deduplication enabled.

Symptoms for this issues are the following messages in the Events tab:

  • "vSAN detected an unrecoverable medium or checksum error for component uuid on disk group uuid."
  • "vSAN detected and fixed a medium or checksum error for component uuid on disk group uuid."

The following versions are affected according to KB2151042 and KB2151081.

Name Patch Date Build
ESXi 6.5 Update 1 ESXi650-update1 2017-07-27 5969303
ESXi 6.5 Update 1 (Security only) ESXi650-update1 2017-07-27 5969300
ESXi 6.5d (vSAN 6.6 Patch) ESXi650-201704001 2017-04-18 5310538
ESXi 6.5 Express Patch 1a ESXi650-201703002 2017-03-28 5224529
ESXi 6.5 Patch 1 ESXi650-201703001 2017-03-09 5146846
ESXi 6.5 Patch 1 (Security Only) ESXi650-201703001 2017-03-09 5146843
ESXi 6.5a ESXi650-201701001 2017-02-02 4887370
ESXi 6.5 GA 2016-11-15 4564106
ESXi 6.0 Update 3a (Patch 5) ESXi600-201706001 2017-06-06 5572656
ESXi 6.0 Update 3a (Patch 5) (Security Only) ESXi600-201706001 2017-06-06 5485776
ESXi 6.0 Express Patch 7a ESXi600-201703001 2017-03-28 5224934
ESXi 6.0 Update 3 ESXi600-update3 2017-02-24 5050593
ESXi 6.0 Update 3 (Security Only) ESXi600-update3 2017-02-24 5047589
ESXi 6.0 Patch 4 ESXi600-201611001 2016-11-22 4600944
ESXi 6.0 Patch 4 (Security Only) ESXi600-201611001 2016-11-22 4558694

VMware states that all vSAN customers using All-Flash with deduplication enabled must upgrade to this patch immediately:

VCSA 6.5 Broken Filesystem - "Welcome to Emergency Mode"

Today I managed to crash the storage used in my home lab. After fixing the FreeNAS box, my vCenter Server Appliance (Version 6.5 Update 1) refused to boot and after opening the console, it welcomed me with the following error message:

Welcome to emergency mode! After logging in, type "journalctl -xb" to view system logs, "systemctl reboot" to reboot, "systemctl default" or ^D to try again to boot into default mode.
Give root password for maintenance
(or press Control-D to continue):

Typically, this problem is caused by filesystem issues. This article explains how to fix the filesystem and get the appliance back up.

Read more »

What's inside VMware vSphere 6.5 Update 1

VMware has just released vSphere 6.5 Update 1 including the following producs:

If you want to get notified about new products, subscribe to my vTracker RSS Feed.

Read more »

VMware vSAN 6.6 Upgrade Steps

The VMware vSAN 6.6 has been released today. In this post, I am going to run through the 3 steps to upgrade vSAN 6.5 to vSAN 6.6. Upgrading Virtual SAN is a multistage process, in which you must perform the upgrade procedures in the order described here:

  1. Upgrade vCenter Server to version 6.5.0d
  2. Upgrade ESXi Hosts to version 6.5.0d
  3. Upgrade the vSAN on-disk format to version 5.0

Read more »

VMware vSAN 6.6 GA - Download Links Available

Today VMware has made the bits for vSAN 6.6 available for everyone to download.

What's New

  • Unicast - In vSAN 6.6, cluster communication has been redesigned to use unicast traffic. Multicast is no longer required on the physical switches to support the vSAN cluster.
  • Encryption - vSAN supports data-at-rest encryption of the vSAN datastore. When encryption is enabled, vSAN performs a rolling reformat of every disk group in the cluster.
  • Enhanced Stretched Clusters with Local Failure Protection - Previously, vSAN's was able to provide a fully active-active, stretched cluster. vSAN 6.6 takes this a step further, allowing for storage redundancy within a site AND across sites at the same time.
  • Site Affinity for Stretched Clusters - A new feature for vSAN 6.6 Stretched Clusters is the ability to configure site affinity.
  • Configuration Assist and Updates - New Configuration Assist and Updates pages allows to check the configuration of your vSAN cluster, and resolve any issues.
  • Resynchronization throttling - IOPS used for cluster resynchronization can be throttled to prevent performance bottlenecks.
  • vSAN Health Command Line Tool - A new esxcli command allows to check vSAN health from the command line (esxcli vsan health).
  • Degraded Device Handling - vSAN 6.6 provides a more proactively stable environment with the detection of degraded and failing devices.

Additional Information

VMware ESXi 6.5 - IO Devices not certified for upgrade

vmware-hcl-65Beside Server Hardware, also double check if your IO Devices (eg. NIC, HBA,..) are supported when updating ESXi hosts from VMware vSphere 6.0 to 6.5. The following devices were supported in vSphere 6.0 but are according to VMwares HCL not (yet) supported in vSphere 6.5.

  • Not supported does not say that it does not work.
  • The list has been created with the help of my IO-Devices HCL in JSON Format.
  • Did I miss something? Please comment.

Read more »

vCenter Service Appliance 6.5 Tips and Tricks

The following tips and tricks might come handy when working with the vCenter Service Appliance 6.5:

  • Enable SSH
  • File Transfer with SCP/SFTP (WinSCP)
  • Login with Public Key Authentication
  • Disable or Increase Shell Session Timeout
  • Reset vCenter Server Appliance 6.5 root password
  • VIMTop
  • Certificate Warning

Read more »

Script to add vSphere 6.5 VMCA Root Certificate to Trusted Certs Store

When running vSphere 6.5 deployments in default (recommended) mode, VMware Certificate Authority is its own root certificate authority. Everything fine and secure with this configuration, but your browser displays a warning because the root certificate is not trusted.
there-is-a-problem-with-this-security-certificate

I made a little script (VBS) that pulls the CA certificate from a vCenter Server or Platform Services Controller and adds it to the local trusted root certificates store. When the root CA is trusted, browser warnings are gone.

Read more »

Homelab: Downsizing vCenter Server Appliance 6.5

In vSphere 6.5 the smallest supported memory configuration for the vCenter Server Appliance has been raised from 8GB to 10GB. The smallest "Tiny" deployment size allows up to 10 ESXi Hosts and 100 Virtual Machines. Resources in Homelabs are limited and you might want to lower the memory consumption of the vCenter Servcer Appliance. This article explains how to lower the resource consumption to be able to lower the memory to about 6GB without noticable impacts.

Read more »

ESXi 6.5 Feburary 2017 Patch with NSX Support (Build 4887370)

VMware has published a patch for ESXi 6.5 and the corresponding vCenter Server version. This patch [..l}] and is the first 6.5 release to support VMware NSX.

Product: VMware ESXi 6.5
Release date: February 2, 2017
Patch: ESXi650-201701001
Build: 4887370
Links: KB2147869 | Download Read more »