Blog Archives

VMware vSphere ESXi 5.5 Host not Compliant after updating VMware vCenter Server to 5.5 Update 2d (2442329).

Issue:

My VMware vSphere ESXi Host had Compliance Failures:
Config.GlobalSettings.guest.commands.sharedPolicyRefCount

Failures Against Host Profile:

The options Config.GlobalSettings.guest.commands.sharedPolicyRefCount have been changed from their expected default values.

On these VMware vSphere ESXi versions the default value was:

ESXi 5.5 Update 1 (1623387) was 0

ESXi 5.5 Update 2 (2068190) was 0

(Note):

But on VMware vCenter Server 5.5 Update 2d this value changed to 100 from 0.

Fix:

We need to add a profile for this setting, using the Add Profile menu option.

Config.GlobalSettings.guest.commands.sharedPolicyRefCount

Step # 1

Select your Host Profile, under Host Profiles.

Right-Click on Host Profile, then select Edit Profile… on Context Menu.

Under your Profile Structure, select Advanced configuration option.

Next, Right-Click Advanced configuration option.

Then, Click Add Profile.

Step # 2

We first need to expand Advanced configuration option, using the Plus sign.

Scroll to the bottom, You will see a new Profile Setting called OptionProfile.

Next, Expand the OptionProfile setting, using the Plus Sign, until you see Advanced option.

Now, select Advanced option.

Step # 3

Next, within the Configuration Details section.

Click the drop down, and select Configure a fixed option.

You should now have two blank boxes with the following labels:

1) *The name of the option using dot notation to reflect the option’s position in a hierarchy.

2) The value of the option.

Step # 4

For the first option we are going to use this name for our option.

Config.GlobalSettings.guest.commands.sharedPolicyRefCount

Next, we will use this value for our value option.

100

Next, Click the OK button.

Step # 4

Once your Recent Tasks, shows that Update host profile Completed.

Step # 5

Select one of your VMware vSphere ESXi Host, which is currently showing as Noncompliant.

Next Right-Click, then Check Profile Compliance

This time your VMware vSphere ESXi 5.5 Host should be Compliant.




VMware vSphere ESXi 5.5 Host not Compliant, with these 3 Storage Policy Mismatches.

Issue: My VMware vSphere ESXi Host had Compliance Failures, with these 3 things:

1) Storage policy vmnamespace mismatch.

2) Storage policy vdisk mismatch

3) Storage policy cluster mismatch

Fix: Use these instructions ONLY:

If you are NOT currently using Virtual SAN (vSAN) on your VMware vSphere ESXi 5.5 Host.

Step # 1

Select your profile under Host Profiles.

Right-Click and Select Enable/Disable Profile Configuration… on Context Menu.

Step # 2

Under Storage configuration Section.

Uncheck the 4th item from the top, Virtual SAN Configuration.

Next, Click the OK button.

Step # 3

Once your Recent Tasks, shows that Update host profile Completed.

Step # 4

Select one of your VMware vSphere ESXi Host, which is currently showing as Noncompliant.

Next Right-Click, then Check Profile Compliance

This time your VMware vSphere ESXi 5.5 Host should be Compliant.

Fix: Use these instructions ONLY:

If you are currently using Virtual SAN (vSAN) on your VMware vSphere ESXi 5.5 Host.

Step # 1

Select your profile under Host Profiles.

Right-Click and Select Edit Profile… on Context Menu.

Step # 2

Under Storage configuration Section.

Next, Virtual SAN Configuration.

Then, Storage option Policies.

Now we need to fill out these 3 items listed below.

1) Storage policy for cluster

Default Setting is ((“hostFailuresToTolerate” i1) (“forceProvisioning” i1))

2) Storage policy for vdisk

Default Setting is ((“hostFailuresToTolerate” i1) (“forceProvisioning” i1))

3) Storage policy for vmnamespace

Default Setting is ((“hostFailuresToTolerate” i1) (“forceProvisioning” i1))

Next, Click the OK button.

Step # 3

Once your Recent Tasks, shows that Update host profile Completed

Step # 4

Select one of your VMware vSphere ESXi Host, which is currently showing as Noncompliant.

Next Right-Click, then Check Profile Compliance

This time your VMware vSphere ESXi 5.5 Host should be Compliant.




VMware vSphere ESXi 5.5 Host not Compliant after updating to 5.5 Update 2 (2068190).

Issue: My host had Compliance Failures, with “SNMP Agent Configuration differs”.

 

Fix: Use these instructions ONLY:If you are not currently using SNMP Agent on your VMware vSphere ESXi 5.5 Host.Step # 1Stop snmp Service Daemon.

Select Host>Configuration>Security Profile.

Next, Under Services, select Properties

Then, Under Label, select snmpd

Next, Click Options…

Step # 2

Under Startup Policy, select Start and stop manually

If service is started, Stop it using the Stop button.

Next, Click the OK button, then Click OK button again.

Note: With Update 2, this is set to Start and stop with host

Step # 3

Select your Host Profile, under Host Profiles.

Right-Click on Host Profile, then select Enable/Disable Profile Configuration…

Under your Profile Structure, select Firewall configuration

Next, under Ruleset Configuration, scroll down to snmp

Under Check the Check Box, snmp

Step # 4

Under your Profile Structure, within the main section.

Next, scroll down to SNMP Agent Configuration.

Under Check the Check Box, SNMP Agent Configuration, next Click OK button.

Step # 5

Re-Check Host Compliance, this time your VMware vSphere ESXi 5.5 Host should be Compliant.