Symptoms

The update process from version 7.x to 8.x can fail at the vCenter Server upgrade with the message "Failed to pre-check virtual machine VMware vCenter Server Appliance meets upgrade requirements," as we can see in the below figure: lcm-web.log: 2023-11-23 16:39:23,772 ERROR [LCM] [lcm-vc-0] c.v.l.t.SimpleUpgradeTaskExecutor [SimpleUpgradeTaskExecutor.java:82] Failed to execute task VcsaStartUpgradeTask. java.util.concurrent.ExecutionException: com.vce.lcm.exception.LCMInternalException: Failed to pre-check virtual machine VMware vCenter Server Appliance (OmLeHBj) meets upgrade requirements. at java.base/java.util.concurrent.FutureTask.report(FutureTask.java:122) at java.base/java.util.concurrent.FutureTask.get(FutureTask.java:205) at com.vce.lcm.task.SimpleUpgradeTaskExecutor.execute(SimpleUpgradeTaskExecutor.java:72) at com.vce.lcm.task.SimpleUpgradeTaskExecutor.execute(SimpleUpgradeTaskExecutor.java:127) at com.vce.lcm.task.SimpleUpgradeTaskExecutor.execute(SimpleUpgradeTaskExecutor.java:133) at com.vce.lcm.task.SimpleUpgradeTaskExecutor.execute(SimpleUpgradeTaskExecutor.java:150) at com.vce.lcm.core.upgrade.vc.AbstractVCUpgrader.performUpgrade(AbstractVCUpgrader.java:107) at com.vce.lcm.core.upgrade.ComponentUpgradeService.performComponentUpgrade(ComponentUpgradeService.java:206) at com.vce.lcm.core.upgrade.VcUpgradeServiceImpl.performUpgrade(VcUpgradeServiceImpl.java:108) at com.emc.mystic.manager.upgrade.service.LcmVcUpgradeServiceImpl$1.run(LcmVcUpgradeServiceImpl.java:86) at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) at java.base/java.lang.Thread.run(Thread.java:829) Caused by: com.vce.lcm.exception.LCMInternalException: Failed to pre-check virtual machine VMware vCenter Server Appliance (OmLeHBj) meets upgrade requirements. vCenter Server requirements-upgrade-runner.log (this log is from the Source vCenter Server): 2023-11-23T16:38:13.331Z INFO upgrade.states.component_states eam:CollectRequirements: 2023-11-23T16:38:13.65Z ERROR eam Failed to execute trusted certificates check.. 2023-11-23T16:38:13.339Z INFO upgrade.states.component_states eam:CollectRequirements: Remote Command Returned: {'coreRequirement': {'requiredSrcDiskSpace': 0.0, 'requiredDstDiskSpace': {}, 'exportEstimationTime': 0, 'importEstimationTime': 0}, 'dstPortSpecs': [], 'srcPorts': [], 'userOptionSpecs': [], 'installArguments': {}, 'extraArguments': {}, 'requirementMismatchSpecs': [{'text': Source vSphere ESX Agent Manager (EAM) upgrade failed to obtain EAM URLs to check against trusted certificates by the System!, 'description': None, 'resolution': Verify that the ESX Agent Manager extension is running properly on the source vCenter Server instance and https://VC_IP/eam/mob presents correct data. If log in to the MOB is not successful, try resolving the issue with https://kb.vmware.com/s/article/94934., 'problemId': None, 'severity': 'ERROR'}] Running the vCenter Diagnostic Tool from Using the vSphere Diagnostic Tool (VDT) (83896) we can confirm that we have some vpxd extensions errors: VPXD-EXTENSION [PASS] Supported Signature Algorithm [PASS] Certificate trust check [PASS] Certificate expiration check [PASS] Check extended key usage [INFO] Certificate SAN check DETAILS: SAN contains hostname but not IP. Checking VC Extension Thumbprints [FAIL] com.vmware.vim.eam Thumbprint Check PROBLEM: Thumbprint mismatch detected with com.vmware.vim.eam. Please follow https://kb.vmware.com/s/article/57379 to update the thumbprint. [FAIL] com.vmware.rbd Thumbprint Check PROBLEM: Thumbprint mismatch detected with com.vmware.rbd. Please follow https://kb.vmware.com/s/article/57379 to update the thumbprint.

Cause

Mismatched thumbprints for EAM or RBD extensions

Resolution

To fix this issue, follow the Resolution section "Option 2" of the Broadcom article: Upgrading or Patching vCenter Server to 8.0 fails with precheck error "Source vSphere ESX Agent Manager (EAM) upgrade failed to obtain EAM URLs to check against trusted certificates by the System" Once completed restart the VxRail upgrade. 

Support Cases