vCenter Server Appliance (VSA) 5.1 – Error: Invalid Active Directory Name/Enabling Active Directory Failed

Today, I decided to change my vCenter from being Windows based to the vCenter Server Appliance (VSA) 5.1.0a and when I tried to enter the LDAP details for Active Directory Authentication, I received various error messages:

  • Error: Invalid Active Directory domain
  • Error: Enabling Active Directory failed
  • Error: Invalid SRV Records

The first thing to always check is your DNS settings to make sure you have forward and reverse look up records set up correctly, check these are all OK.

Next, I did a basic ping test to VMF-VSA01 which is the name of my VSA, again all working.

Ah, I thought, perhaps I have entered in something wrong on the VSA network settings, so I double checked these, again all looked good.

Then I remembered, that I should be using FQDN’s (Fully Qualified Domain Names) for my VSA, so rather than using VMF-VSA01 I should use VMF-VSA01.vmfocus.local

Another try at authenticating, and it still failed with ‘Error: Invalid Active Directory domain’.

One more try, this time I changed the domain to vmfocus.local and boom, we have success!

So to summarise:

  • Make sure you use a FQDN for your vCenter Server Appliance
  • Make sure you have forward and reverse look up record for your vCenter Server Appliance
  • Make sure your domain is entered as a FQDN

vCenter 5.1 Upgrade

I have been meaning to perform a vCenter 5.1 upgrade for some time now.  The good news is, I have a few space minutes to get the vmFocus lab upgraded.

First of all, you need to decide on how you are going to upgrade, are you going to perform:

In Place Upgrade this is where you install straight over the existing vCenter, this is supported for 64 bit systems on vCenter 4.0 and 5.0

New Install   this is where you install a new vCenter 5.1 server and then add you hosts to it.

I’m going to go for a new install, as my existing vCenter 5.0 server has taken some battering, with SRM being added on and taken off numerous times.

vCenter 5.1 has much higher resource requirements, so it might be worth a quick flirt past the Upgrading to vCenter Server 5.1 Best Practices KB to make sure your environment is up to scratch.

One thing that is worth mentioned is your DNS entries, I suggest you make sure these are spot on.  In my environment I have a Windows Server 2008 Active Directory Integrated Forward Lookup and Reverse Lookup Zone for vmfocus.local

I have DNS records for the following entries, both forward and reverse:

  • ESXi01 192.168.37.1
  • ESXi02 192.168.37.2
  • ESXi03 192.168.37.3
  • VMF-APP01 192.168.37.205

You probably guessed that ESXi01, ESXi02 and ESXi03 are all vSphere Hosts and VMF-APP01 is a Windows 2008 R2 Standard Server.  Before this upgrade all of the vSphere Hosts are attached to another vCenter called VMF-ADMIN01.

What I really like about vCenter is you can install another instance and then just attach the hosts to the new vCenter.  You do loose historical performance data, but if you have a baseline already, that’s not such a big issue.

OK then let’s crack on.

TOP TIP: Don’t forget to install Adobe Flash Player

Installation

Fire up the installation media, if you haven’t downloaded it already, it can be obtained from here

Select VMware vCenter Simple Install and then Click Install

The installation will install vCenter Single Sign On first, so click Next to this

I’m not going to insult your intelligence, Hit Next again, and Accept the terms of the license

This is where things start to get interesting, we need to give a password to the account admin@System-Domain which is used to administer the Single Sign On service.

In this instance, I’m going to opt for a Microsoft SQL Server 2008 R2 Express installation

Cool, something new! The vCenter 5.1 installation is going to create two users RSA_DBA and RSA_USER in the SQL database, pop a password in that complies with your policies.

This part is proper important, make sure that you verify your FQDN of your vCenter Server and give it a ping for good measure.

For Security reasons, I always specify an account for vCenter services to run under, you don’t have to do this, but if you want to tick the ‘best practices’ box it’s best too.

We can now change the default install path, I recommend you don’t change this, unless you have a compelling reason to do so.

We can also change the port used for the Single Sign, I’m happy with the defaults on mine.

Not sure why, but it does seem like an age since we began the installation.  Finally, we can click Install.

Probably a good idea to make yourself a tea or coffee as this is going to take a while.

Once Single Sign On has installed, you will see the Inventory Service, install and then finally vCenter itself.

We need to perform a little bit of interaction with the vCenter install, the first question is a License Key, if you don’t have one, click Next and you can use the free trial version.

We now get the choice of using Microsoft SQL Server 2008 Express or another database.  I’m going to roll with SQL Server 2008 Express (partly because I’m cheap)

Again, we have another question on the System Account, I’m going to use my VMware.Service account for this

Ports, we can change the default ports used by all of vCenter’s services.  I’m going to leave mine at default.

Time to select your deployment size, unless you have a super lab, then I’m sure you and I will be OK with Small

Then finally, click on Install.  Don’t be alarmed if after you click Install, the installer package disappears for a few seconds, this is quite normal (yes it did freak me out).

Boom, job done!

Web Client

Probably be a good idea to install the web client as well, so from our vCenter Installer, select VMware vSphere Client and hit Install

Choose your language, (still no United Kingdom version for English)

Don’t be alarmed everything will disappear for a while.  Once the install is back click on Next

Hit Next, and then agree to the terms of the license and Hit Next again.

You can change the default install folder if you like, however as always I recommend leaving it as default unless you have a valid reason not too.

We can not change the vSphere Web Client Ports, I’m going to leave mine at the default HTTP 9090 and HTTPS 9443

This is where thing start to get interesting, we need to specify the vCenter Single Sign On administrator password which we entered during the Single Sign On installation.

Hopefully, you should now be at the Install screen, hit Install

Happy days, we are all done, well nearly!

Cool, we can now launch either the vSphere Web Client from Start > Program Files or we can browse to https:\vcentername:9443

At the login screen, we want to ‘Download the Client Integration Plug-in’

Run the file VMware-ClientIntegrationPlugin-5.1.0.exe

At this point, you will need to close your web browser otherwise you can’t install the plug in!

Cool, click on Next and let the magic happen

All installed click on Finish

Let’s give it a whirl, browse to https://localhost:9443 and place a tick in ‘Use Windows Session Authentication’

You should get an Client Integration Access Control which is confirming you are allowed access, click Allow

Voila we are in! Now time to familiarise myself with the new GUI

Part 5 – Configuring Site Recovery Manager (SRM) With HP StoreVirtual VSA

This is the final post on my blog series Configuring Site Recovery Manager (SRM) with HP StoreVirtual VSA.

If you have missed any of the previous posts, they are available here:

Part 1 – Configuring Site Recovery Manager (SRM) With HP StoreVirtual VSA

Part 2 – Configuring Site Recovery Manager (SRM) With HP StoreVirtual VSA

Part 3 – Configuring Site Recovery Manager (SRM) With HP StoreVirtual VSA

Part 4 – Configuring Site Recovery Manager (SRM) With HP StoreVirtual VSA

As promised we are going to failover, reprotect and failback. Is it slightly wrong, that I’m excited about this blog post?

Pre Failover

As we are good boy/girl scouts, we wouldn’t just jump straight in and try and failover would we? No, never instead we are going to check everything is ‘tickety boo’ with our environment.  This means going over the following checklist:

  • Check CMC to ensure no degraded volumes
  • Check CMC to ensure that remote copy is working correctly
  • Check vCenter to ensure that you have connectivity between sites
  • Check SRM Array Managers and refersh your Devices
  • Check Protection Groups
  • Check Recovery Plan

Once you have gone over the above list, the last thing to do is test and clean up.

Look’s like we are cooking on gas.

Failover

We have two types of failover, planned and unplanned.

Planned Failover is when you know of impending works which will make your Production site non operable for a period of time, this could be planned  maintenance work or site relocation.  Imagine you are building a new Head Office, you configure all of your network, storage and vSphere infrastructure and then just use SRM to failover over a weekend.

Unplanned Failover this is when, you earn your ‘bacon’ as a vSphere Administrator, as you have a man down situation and no Production site left.

In this instance we are going to do a planned failover, as you can see VMF-TEST01 is running in our Production site.

VMF-TEST01 is in a good place, as it’s being replicated to our DR site

Let’s get it on, into SRM, then click on Recovery Plans, then onto Recovery Steps (so that we can see what’s going on) and then click on Recovery!

The Red Stop Sign cracks me up, it’s SRM’s way of saying are you really sure you want to do this? We are sure, so we want to put a tick in the ‘I understand that this process will permanently alter the virtual machines and infrastructure of both the protected and recovery datacenters.’

We are going to perform a ‘Planned Migration’ and then click Next

We are now at the point of no return, click Start

OK, what’s going on? Well the let’s have a closer look.

Step 1 SRM takes a snapshot of the replicated volume PR_SATA_TEST01 before it tries to failover, this is for safety.

Step 2 SRM shuts down the VM’s at Protected Site, in this case VMF-TEST01 to avoid any data loss

Step 3 SRM restores any hosts from standby at the DR Site

Step 4 SRM takes another snapshot and syncronizes the storage

Step 5 Epic Fail!

OK what happened? Well we have the error message ‘Error: Failed to promote replica devices. Failed to promote replica device ‘1266d2456f’ This means that for some reason SRM wasn’t able to promote the DR volume DR_SATA_TEST01 to Read/Write from Read. To be perfectly honest, I have tried many times to get this to work and for some reason it always fails on this step.  Strange really as when we before a test it takes a snapshot of the volume DR_SATA_TEST01 and promotes this to Read/Write without any issues. So in this situation we are going to need to give SRM a hand.

Go into the CMC and expand your Management Groups and Clusters until you get this view.

We are going to Right Click DR_SATA_TEST01 and Select Failover/Failback Volume

Click Next and then Select ‘to fail over the primary volume, PR_SATA_TEST01, to this remote volume, DR_SATA_TEST01 and click Next

Good news that we haven’t got any iSCSI sessions in place, so we can click Next

Double check your provisioning is correct, and then click Finish

Awesome, we should now have the volume DR_SATA_TEST01 acting as a Primary Read/Write Volume, you can tell this as it should be in dark blue

I think we should try the Recovery again now, let’s hop back into SRM and click on Recovery.

Select the ‘I understand that this process will permanently alter the virtual machines and infrastructure of both the protected and recovery datacenters.’ tick box again and click Next and Start.

Hopefully you should see that SRM jumps straight to Step 8, Change Recovery Site Storage to Writeable and this time it has been a Success!

Time for a quick brew, whilst SRM finishes off bringing VMF-TEST01 up at our DR site.

Boom, the man from Delmonte he say yes!

So let’s see what’s going on shall we.  First of all at our Production site.  As you can see SRM now knows that the VMF-TEST01 is not live.

At DR, VMF-TEST01 is up and running and it’s IP Address has been successfully changed.

The question is can we ping it by DNS, as this should have been updated.

Boom, all working as expected.

Last of all, let’s check CMC to see what’s going on with our HP StoreVirtual VSA.

Now you may be thinking, it’s not really the best situation to be in as we have two Primary Volumes which are PR_SATA_TEST01 and DR_SATA_TEST01.  But don’t fear SRM has changed PR_SATA_TEST01 to ‘read’ only access for ESXi02

Also, if we check the Datastores on ESXi02, we see that PR_SATA_TEST01 has disappeared.

Cool, I think we are now in a position to Reprotect.

Reprotect

Reprotection reverses the process, so that the DR site becomes the protected site and Production becomes the DR site, simples.

So let’s jump back into SRM and click Reprotect

Select ‘I understand that this operation cannot be undone.’ and click Next

Let’s click Start and watch the process in action.

OK, what’s going on then Craig?

Step 1 SRM realises it can’t have two Primary Volumes and demotes PR_SATA_TEST01 to a Remote Volume and then deletes it

Step 2 SRM takes a snapshot of DR_SATA_TEST01 and before it starts the reverse protection as a safety measure

Step 3 SRM takes a further snapshot and invokes the replication schedule

Step 4 SRM cleans up the storage to make sure everything is ‘tickety boo’

If everything was a success you should see that your Recovery Plan has gone back to normal.

From HP StoreVirtual VSA perspective everything looks good, DR is the Primary Volume and Production is the Remote Volume

Right then, I think we should think about failing back then.  Before we do so, we need to run over that checklist again.

  • Check CMC to ensure no degraded volumes
  • Check CMC to ensure that remote copy is working correctly
  • Check vCenter to ensure that you have connectivity between sites
  • Check SRM Array Managers and refersh your Devices
  • Check Protection Groups
  • Check Recovery Plan

Once you have gone over the above list, the last thing to do is test and clean up.

Good times, everything was a success, I think we are ready to failback.

Failback

Failback is actually just a Recovery as far as SRM is concerned.  So I won’t bother waffling on about it again, so let’s hit Recovery

I wanted to show you that this time round, SRM was able to promote the Remote Volume to Primary Read/Write without any issues.

Nice one, we have another success and VMF-TEST01 is running back at Production.

Let’s do the obligatory ping test via DNS, again success.

Quick look at our DR site and you can see SRM now sees VMF-TEST01 as being protected

Lastly, a look at CMC to check on our HP StoreVirtual VSA, as you can see we still have two Primary copies, but again DR_SATA_TEST01 is now read only

A couple of final thoughts for you.

  1. It’s quite normal to see a ‘ghost’ datastores at either your Production or DR site after you have failed over or back. Just perform a ‘Rescan’ and it will disappear
  2. Check your path policies for the Datastore, as these don’t always go back to your preferred choice.

Thank’s for reading what probably feels like war and peace to you on SRM, I hope you agree it’s an amazing product that makes our life as the IT administrator that much easier!

SRM & P4000 – Error: Failed To Promote Replica Devices

‘Error: Failed to promote replica devices. Failed to promote replica device ‘1266d2456f’ This means that for some reason SRM wasn’t able to promote your replica volume from Read to Read/Write which in P4000 terms is Remote to Primary volume. To be perfectly honest, I have tried many times to get this to work and for some reason it always fails on this step.  Strange really as when you perform a test failover on the same volume, it takes a snapshot of the Read (Remote) volume and promotes this to a Read/Write (Primary) without any issues.

So in this situation we are going to need to give SRM a hand.

Go into the CMC and expand your Management Groups and Clusters until you get this view.

We are going to Right Click DR_SATA_TEST01 and Select Failover/Failback Volume

Click Next and then Select ‘to fail over the primary volume, PR_SATA_TEST01, to this remote volume, DR_SATA_TEST01 and click Next

Good news that we haven’t got any iSCSI sessions in place, so we can click Next

Double check your provisioning is correct, and then click Finish

Awesome, we should now have the volume DR_SATA_TEST01 acting as a Primary Read/Write Volume, you can tell this as it should be in dark blue

I think we should try the Recovery again now, let’s hop back into SRM and click on Recovery.

Select the ‘I understand that this process will permanently alter the virtual machines and infrastructure of both the protected and recovery datacenters.’ tick box again and click Next and Start.

Hopefully you should see that SRM jumps straight to Step 8, Change Recovery Site Storage to Writeable and this time it has been a Success!

Boom, the man from Delmonte he say yes!

UK VMUG Meeting – Thursday 15 November 2012

Registration for the next UK VMUG is still open folks, lot’s of industry heavy weights will be on hand to share there words of wisdom with us.

As you can see it’s a proper impressive line up.  Details below taken from www.vmug.com

So what are you waiting for? Get involved, by registering here

TIME                 TYPE  EVENT LOCATION
8:00 – 8:30 Registration | Breakfast | Mingle with Vendors Trafalgar Foyer
8:30 – 9:00 Keynote VMUG Welcome | Alaric Davies Britannia Suite
9:00 – 9:45 Keynote VMware Keynote | Joe Baguley | Software Defined Data Centre, Weapon or Necessary Evil? Britannia Suite
9:45 – 10:00 Break|Mingle with Vendors Imperial Suite
10:00 – 10:45 Breakout Block #1 | Education Sessions
Sponsor Nimble Storage | Stress-Free Data Protection for VMware and VDI Bracebridge Suite
Sponsor Veeam | 5 Ways Smart VM Backups May Surprise You Ballacraine Suite
Sponsor Teradici | How to Enhance Your VDI Experience Waterloo Suite
Sponsor Trend Micro | Security at Every Stage: Trend Micro, VMware and Your Journey to the Cloud Britannia Suite
Community Ricky El-Qasem | Creating VMware Apps for Novice Programmers Kirkmichael Suite
10:45- 11:15 Break | Mingle with Vendors Imperial Suite
11:15 – 12:00 Breakout Block #2 | Education Sessions
VMware Duncan Epping and Frank Denneman | Deep-Dive Discussion Group Bracebridge Suite
VMware Hugo Phan and Aidan Dalgleish | VCDX Boot Camp Ballacraine Suite
VMware Alan Renouf and William Lam | Practical Automation for Everyone Waterloo Suite
VMware Matthew Steiner | What’s New in vSphere 5.1 Britannia Suite
Community Chris Dearden | A Techie’s Guide to Getting the Most Out of IT Support Kirkmichael Suite
12:00 – 13:00 Lunch | Mingle with Vendors Imperial Suite
13:00 – 13:45 Breakout Block #3 | Education Sessions
Sponsor Fusion-io |  Flash as a Cache – Rethinking Virtualisation Bracebridge Suite
Sponsor Embotics | Lessons Learned in Deploying Private Clouds Ballacraine Suite
Sponsor Coraid | Server Virtualization Demands a New Storage Architecture Waterloo Suite
Sponsor Quantum | The 7 Questions You Must Ask Before Buying a VM Protection Product Britannia Suite
Community Mike Laverick | Building my vCloud Director Home Lab Kirkmichael Suite
13:45 – 14:15 Break | Mingle with Vendors Imperial Suite
14:15 – 15:00 Breakout Block #4 | Education Sessions
VMware Duncan Epping and Frank Denneman | Deep-Dive Discussion Group Bracebridge Suite
VMware Cormac Hogan | VMware Storage Update – 5.1: Storage Features and Storage Futures Ballacraine Suite
VMware Aidan Dalgleish | vCloud Director DR Waterloo Suite
VMware Tom O’Rourke and Kim Raynard | Dynamic Ops – Cloud Automation Britannia Suite
Community Tom Howarth | Deep Dive on Desktop Design for VDI Kirkmichael Suite
15:00 – 15:15 Break | Mingle with Vendors Imperial Suite
15:15 – 16:00 Breakout Block #5 | Education Sessions
Sponsor Whiptail | Flash 101 – The Physics and Stuff Bracebridge Suite
Sponsor Hitachi Data Systems | Storage Systems Basics for Virtualized Environments Ballacraine Suite
Sponsor VMTurbo | Can You Manage Your Virtual Infrastructure so That Optimized Performance and High Resource Utilization are Not Mutually Exclusive? Waterloo Suite
Sponsor iLand | vCloud Services: IT’s Secret Weapon Britannia Suite
Community Julian Wood | vSphere Networking and Converged IO with Blade Servers Kirkmichael Suite
16:00 – 16:15 Break | Mingle with Vendors Imperial Suite
16:15 – 16:45 Keynote Closing Keynote | Scott Lowe | Staying Sharp and Relevant in IT Britannia Suite
16:45 – 17:00 Prize Draws Britannia Suite