Symptoms
Error seen in the Session log:
NOTICE: "Description": "Failed to initialize Backup Descriptor. Failed to download VM config file \"[Datastore_Name] VM_Folder/VM_Name.vmx\" into saveset file \"vm-####-config-file-0.cfg\". HTTP Get request failed to download config file '[Datastore_Name] VM_Folder/VM_Name.vmx' using URL 'https://vCenter_Server_name/folder/VM_Folder/VM_Name.vmx?dcPath=Cluster_Name\Host_nameName=Datastore_Name'. HTTP Status code: 500."
vProxy based backups were running successfully on other ESXi clusters in the same environment.
Cause
VMware encryption has been enabled. To confirm, from the VMware vSphere client, open then open the VM properties. Under the VM Options tab, Encrypt VM is set to an encryption policy.The VMware vCenter account that is used by NetWorker does not have the Cryptographic permissions that are required for backups up using encryption.
Resolution
From within VMware, Apply the following permissions to the vCenter user account used with NetWorker.
Cryptographic operations > Add diskCryptographic operations > Direct accessCryptographic permissions > Register VM
The additional configuration requirements for vProxy backups using VMware encryption or vSAN encryption are in the Dell EMC NetWorker VMware Integration Guide, available through: https://www.dell.com/support/home/product-support/product/networker/docs
