Error code 1021 vcenter

I’m really confused here and don’t know why I’m having these issues.

I’ve installed a fresh install of VCSA on a new server running ESXi 6.7u1

In the pre-production environment, this has worked fine. The appliance finished installing, I was able to connect over https and configure it.

However, on the production system, I just cannot figure out why it’s not working.

The appliance deploys apparently OK with all the settings I supply in the scripts, but I cannot get to configure it.

netstat shows that none of the services are up and running.

Here’s what I get when I try to start wami-lighttp:

root@vcsa [ /etc/sysconfig/network-scripts ]# service vami-lighttp status -l

* vami-lighttp.service — LSB: Lightning fast webserver with light system requirements

   Loaded: loaded (/usr/lib/systemd/system/vami-lighttp.service; enabled; vendor preset: enabled)

   Active: active (running) since Mon 2019-02-18 13:15:27 UTC; 4s ago

  Process: 8195 ExecStop=/etc/rc.d/init.d/vami-lighttp stop (code=exited, status=0/SUCCESS)

  Process: 8225 ExecStart=/etc/rc.d/init.d/vami-lighttp start (code=exited, status=0/SUCCESS)

Main PID: 8243 (vami-lighttpd)

    Tasks: 1

   Memory: 872.0K

      CPU: 93ms

   CGroup: /system.slice/vami-lighttp.service

           +-8243 /opt/vmware/sbin/vami-lighttpd -f /opt/vmware/etc/lighttpd/lighttpd.conf

Feb 18 13:15:27 vcsa systemd[1]: Starting LSB: Lightning fast webserver with light system requirements…

Feb 18 13:15:27 vcsa vami-lighttp[8225]: Starting vami-lighttpd:Extracting SSL certificate from VECS

Feb 18 13:15:27 vcsa vami-lighttp[8225]: Error: Failed to open the store.

Feb 18 13:15:27 vcsa vami-lighttp[8225]: vecs-cli failed. Error 1021: Cannot connect to vmafd service.

Feb 18 13:15:27 vcsa vami-lighttp[8225]: Failed to retrieve certificate from VECS

Feb 18 13:15:27 vcsa vami-lighttp[8225]: 2019-02-18 13:15:27: (/build/mts/release/bora-9049398/studio/src/vami/apps/lighttpd/1.4.45/src/network.c.273) warning: please use server.use-ipv6 only for hostnames, not without server.bind / empty address; your config will break if the kernel default for IPV6_V6ONLY changes

Feb 18 13:15:27 vcsa vami-lighttp[8225]: [  OK  ]

Feb 18 13:15:27 vcsa systemd[1]: Started LSB: Lightning fast webserver with light system requirements.

The network is operational, I can access VCSA via SSH once enabled via the console. Interestingly, I also see some corrupt / garbage info on the «View Support Information» page. Error Code : 1021 and SSL Thumbprint is corrupt.

I can’t figure out why this is different and not working when the deployment ran smoothly on the pre-prodution test platform. I have FQDNs in place, a domain in place, forward and reverse lookup DNS is OK, etc.

I’ve searched quite a bit already, I’ve tried different versions of VCSA, tried ensuring IPv6 is enabled, having correct dates etc, but no joy.

Any ideas where to start?

Good morning,

I tried to install vcenter server 6.7 on windows server 2019 (for many reasons it’s better for me this method over appliance) and failed because of this error:

[ vminst-con.log extract ]

[Running] C:Program FilesVMwarevCenter Serverfirstbootvisl-support-firstboot.py

Result:

—————————

Failure

2020-02-24T11:42:55.341Z  Running command: [‘C:\Windows\system32\icacls.exe’, ‘C:\ProgramData\VMware\vCenterServer\cfg/vmware-rhttpproxy/ssl’, ‘/grant:r’, ‘*S-1-5-18:(OI)(CI)(F)’, ‘/grant:r’, ‘*S-1-5-32-544:(OI)(CI)(F)’, ‘/inheritance:r’, ‘/L’, ‘/Q’]

2020-02-24T11:42:55.404Z  Done running command

2020-02-24T11:42:55.404Z  Running command: [‘C:\Windows\system32\icacls.exe’, ‘C:\ProgramData\VMware\vCenterServer\cfg/vmware-rhttpproxy/ssl\*’, ‘/reset’, ‘/T’, ‘/L’, ‘/Q’]

2020-02-24T11:42:55.435Z  Done running command

Error Code : 1021

It seems a strange permission problem but I cannot understand it as I’m running setup with an Administrative user.

I shortened here the log for convenience but if needed I can share more of it.

Has anyone any suggestion?

Thank you

Matteo

From my other comment thread, and thanks to nadir for code:

when I try to run win32api as suggested by nadir’s code, I receive following error:

line 19, in <module> win32api.SetSystemTime(tt[0],tt[1],0,tt[2],tt[3],tt[4],tt[5],0) pywintypes.error: (1314, 'SetSystemTime', 'A required privilege is not held by the client.')

I understand this has to do with permissions on my Windows machine.

When I run this code:

gt = client.get_server_time()
print(gt)
print(time.localtime())
aa = str(gt)
bb = aa.replace("{'serverTime': ","")
aa = bb.replace("}","")
gg=int(aa)
ff=gg-10799260
uu=ff/1000
yy=int(uu)
tt=time.localtime(yy)
print(tt)

I receive the following output:

{‘serverTime’: 1523688379266}
time.struct_time(tm_year=2018, tm_mon=4, tm_mday=14, tm_hour=0, tm_min=46, tm_sec=19, tm_wday=5, tm_yday=104, tm_isdst=1)
time.struct_time(tm_year=2018, tm_mon=4, tm_mday=13, tm_hour=21, tm_min=46, tm_sec=20, tm_wday=4, tm_yday=103, tm_isdst=1)

The first time struct is my local time, the second is the time formatted, which seems to be off by 3 hours and 1 second.