OPERATIONAL DEFECT DATABASE
...
...
When attempting to perform any password task you will get one of these errors"This operation is not allowed because Password Manager operation(s) are working on related resources" "The scheduled auto-rotate workflow could not run due to another operation blocking the resources" banner on VCF UI"THE OPERATION IS NOT ALLOWED BECAUSE THE SYSTEM LOCK IS HELD BY PASSWORD MANAGER OPERATION IN PROGRESS" You will see a similar error in the operationsmanager.log/var/log/vmware/vcf/ioperationsmanager.log023-04-06T05:47:44.415+0000 DEBUG [vcf_om,404f8e66713d47ef,f8fb] [c.v.e.s.e.h.LocalizableRuntimeExceptionHandler,http-nio-127.0.0.1-7300-exec-4] Handler Error Response: {"errorCode":"PASSWORD_MANAGER_UPDATE_IN_PROGRESS","arguments":["d68f530d-1cd7-4988-af5b-28f8dda87699"],"message":"Password update task d68f530d-1cd7-4988-af5b-28f8dda87699 is in progress/failed state, retry after sometime.","remediationMessage":"Wait for currently in-progress transaction to complete as succeeded/cancelled.","referenceToken":"GURKAF"}
To remove stale password failure task
There might be a password rotation task failed on individual components due to other reasons(Password expired, SSH disabled etc)Reported failed workflow of password manager holds a lock due to task being in FAILED or IN_PROGRESS state Note: The task should either be in USER_CANCELLED or SUCCESSFUL state
None: The resolution will remove the locks instilled due to failed task. A snapshot of SDDC manager without memory is still recommended
Take a snapshot(without memory) of SDDC Manager VM SSH into the SDDC Manager with vcf user and su to rootRun the following query to list the password operations in FAILED and PREVALIDATION_FAILED state psql -h localhost -U postgres -d operationsmanager -c "select workflow_id, operation_type, transaction_status from passwordmanager.password_operations where transaction_status='FAILED' OR transaction_status='PREVALIDATION_FAILED';"Sample output workflow_id | operation_type | transaction_status --------------------------------------+----------------+---------------------- d68f530d-1cd7-4988-af5b-28f8dda87699 | ROTATE | PREVALIDATION_FAILED Delete the password operation(s) task Connect to the SDDC UIClick on Developer Center > API Explorer > APIs for Managing CredentialsGo to DELETE/v1/credentials/tasks/{id}Paste the id d68f530d-1cd7-4988-af5b-28f8dda87699 ----> identified in Step # 3Click EXECUTE Re-run the postgres query in Step # 3 and ensure there are no more failed password operations. Refresh the SDDC Manager UI
Click on a version to see all relevant bugs
VMware Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
