VMware vSphere Update Manager 5.0 to 5.1 Upgrade

VMware vSphere Update Manager 5.0 to 5.1 Upgrade

Its been awhile since my last post, but unfortunately the datacenter never sleeps while I, from time to time actually am forced to otherwise I’ll collapse. Its time to get back on the blog-horse and go through the update manager 5.0 to 5.1 upgrade. Luckily, its a fairly simple operation, so I’ll get right to it. Note – Update manager was installed on the same server as vCenter in this case.

On the vCenter installation screen select VMware vSphere Update Manager and click Install.

You should be alerted that you are performing an upgrade rather than a fresh install. Move along and click ok.

Click next to the screen below and the license agreement screen that follows (not shown).

Click next unless you have a different download source other than the default of Vmware.

Enter your vCenter’s fully qualified domain name, port and administrative credentials for vCenter.

At the database information screen enter the credentials you used to create the Update Manager Database.

If your database is set to full recovery, you’ll see the warning below. Just make sure you are regularly backing up this database and flushing the transaction log and there is nothing to worry about here.

Upgrade the existing database and take heart to their warning that you’ve backed it up. If you haven’t – do it now. You never know what might occur and if you have a lot of configuration in the Update Manager application you’ll definitely lose it if things go awry.

In the screen below, I selected 172.23.0.5 to disguise my Update Managers FQDN from becoming public knowledge. I highly recommend using the FQDN of your update manager here. This is a matter of preference. Some go with DNS name – others (namely those who can’t handle keeping things organized via DNS) go with IP’s… Keep the ports standard unless you are in a highly secure network with customized ports.

You may receive a warning that the Update Manager Service needs to be shutdown. Pick your poison here.

At this point update manager should install. Click finish to the final screen. (Not shown).

VMware vSphere Update Manager 5.0 to 5.1 Upgrade

VMware vSphere Update Manager 5.0 to 5.1 Upgrade

Its been awhile since my last post, but unfortunately the datacenter never sleeps while I, from time to time actually am forced to otherwise I’ll collapse. Its time to get back on the blog-horse and go through the update manager 5.0 to 5.1 upgrade. Luckily, its a fairly simple operation, so I’ll get right to it. Note – Update manager was installed on the same server as vCenter in this case.

On the vCenter installation screen select VMware vSphere Update Manager and click Install.

You should be alerted that you are performing an upgrade rather than a fresh install. Move along and click ok.

Click next to the screen below and the license agreement screen that follows (not shown).

Click next unless you have a different download source other than the default of Vmware.

Enter your vCenter’s fully qualified domain name, port and administrative credentials for vCenter.

At the database information screen enter the credentials you used to create the Update Manager Database.

If your database is set to full recovery, you’ll see the warning below. Just make sure you are regularly backing up this database and flushing the transaction log and there is nothing to worry about here.

Upgrade the existing database and take heart to their warning that you’ve backed it up. If you haven’t – do it now. You never know what might occur and if you have a lot of configuration in the Update Manager application you’ll definitely lose it if things go awry.

In the screen below, I selected 172.23.0.5 to disguise my Update Managers FQDN from becoming public knowledge. I highly recommend using the FQDN of your update manager here. This is a matter of preference. Some go with DNS name – others (namely those who can’t handle keeping things organized via DNS) go with IP’s… Keep the ports standard unless you are in a highly secure network with customized ports.

You may receive a warning that the Update Manager Service needs to be shutdown. Pick your poison here.

At this point update manager should install. Click finish to the final screen. (Not shown).

VMware vSphere Update Manager 5.0 to 5.1 Upgrade

VMware vSphere Update Manager 5.0 to 5.1 Upgrade

Its been awhile since my last post, but unfortunately the datacenter never sleeps while I, from time to time actually am forced to otherwise I’ll collapse. Its time to get back on the blog-horse and go through the update manager 5.0 to 5.1 upgrade. Luckily, its a fairly simple operation, so I’ll get right to it. Note – Update manager was installed on the same server as vCenter in this case.

On the vCenter installation screen select VMware vSphere Update Manager and click Install.

You should be alerted that you are performing an upgrade rather than a fresh install. Move along and click ok.

Click next to the screen below and the license agreement screen that follows (not shown).

Click next unless you have a different download source other than the default of Vmware.

Enter your vCenter’s fully qualified domain name, port and administrative credentials for vCenter.

At the database information screen enter the credentials you used to create the Update Manager Database.

If your database is set to full recovery, you’ll see the warning below. Just make sure you are regularly backing up this database and flushing the transaction log and there is nothing to worry about here.

Upgrade the existing database and take heart to their warning that you’ve backed it up. If you haven’t – do it now. You never know what might occur and if you have a lot of configuration in the Update Manager application you’ll definitely lose it if things go awry.

In the screen below, I selected 172.23.0.5 to disguise my Update Managers FQDN from becoming public knowledge. I highly recommend using the FQDN of your update manager here. This is a matter of preference. Some go with DNS name – others (namely those who can’t handle keeping things organized via DNS) go with IP’s… Keep the ports standard unless you are in a highly secure network with customized ports.

You may receive a warning that the Update Manager Service needs to be shutdown. Pick your poison here.

At this point update manager should install. Click finish to the final screen. (Not shown).

vCenter 5.1 Upgrade Procedures – The “Simple” Install

In my last post I described a different vCenter install that what you are used to.  In this post I’ll be describing my personal experience as I upgraded vCenter 5.0 Update 1b to vCenter 5.1 – again this install is a big change from vCenter 3.x-5.0 installs:

Upon launch, you are presented with the option of performing the “simple install” or another type of install that allows you to install the vCenter Single Sign On & vCenter inventory service on a different server than vCenter itself.  In the examples that follow, I’ve chosen the “simple” install that turned out to be not so simple.

If you choose to do the simple install, I’d recommend running the installer using a domain admin account rather than the local administrator account we’ve used in the past. This should automagically allow single sign on to recognize the windows domain you use to access your vCenter. If you don’t use a windows domain to access, vCenter then use the local admin.

The first decision I had to make was the password for my admin user for single sign on.

Strangely enough, VMware decided to peg the username of the single sign on to “admin@System-Domain” and does not allow you to change the username. This already has me skeptical of the new single sign on service that admittedly, I know nothing about at this point, but still it seems like a bad idea to hard code anything when it comes to authenticating.

Next, I was presented with the question of whether I would be using a local or remote database for my single sign on service. Since my vCenter was already installed with a remote database on a SQL server I picked the remote option which then explained how to create the database for single sign on using scripts located in a directory on the installation media.

After locating the SQL script I logged into my remote SQL server, launched SQL management studio and loaded up the SQL script. One thing I noticed and I highly recommend is that you read the comments in the SQL section carefully and make the necessary changes that are correct for your SQL installation. For instance you’ll need to change the location of your database, and log folder to properly create the database. Hopefully these are on different LUNs, but that’s a discussion for another time.

As you can see, I’ve changed my database path the E: and Log path to F: . I wasn’t sure about the index as I’m not a DBA and am not aware of any index file in SQL but I decided to keep it on E: with the database. This could have been an error. If anyone knows, please comment to tell me what a boneheaded move that was.

Next up, you are asked to provide information about your database server and the name of the database you just created. In the scripts above, I kept the database name as “RSA”, so I entered that information on the screen below with my SQL database server for host/ip, 1433 for the port and sa for my database because I use mixed mode authentication. No idea what the JDBC URL myself selection was for and I would recommend you leave this as the default unless you know why you are changing it.

Next, enter the fully qualified domain name of your vCenter server here.

On the following screen I decided to use the network service account to run the “Security Support Provider Interface Service”, whatever that may be. At this point vCenter seems to be getting more complex with more services running to make it work. As you might guess, I’m skeptical of the changes to vCenter I’ve seen thus far.

I kept the HTTPS port set at the 7444 default for vCenter Single Sign on.

I then was asked about my vCenter Inventory Service Database and whether I wanted to keep or overwrite my existing database. Well that should be simple right? We’ve never heard of this vCenter Inventory Service database before, so naturally we don’t have one to overwrite, right? WRONG.

Apparently starting sometime after vCenter 5.0 you had a vCenter Inventory Service installed along with vCenter. VMware must have had issues with the Inventory Service stepping on vCenter’s toes in large environments and made the decision to allow us to install it somewhere else. Now this sounds like an option I can get behind (which I didn’t take advantage of in this case, but may later).

Next, the installer crashed and burned with the error: “Installation of VMware vCenter Inventory Service failed. Install VMware vCenter Inventory Service, VMware vCenter Server separately by using individual installer rather than VMware vCenter Simple Install.”

With that, I clicked ok and ran just the vCenter Inventory Service installer from the autorun.exe screen. I was presented with the same exact screens for the vCenter Inventory Service portion of the simple install and the installation worked without error. Hrmpf. Next I launched the vCenter installation from the autorun.exe window.

Enter your vCenter 5.1 license key and move on from the screen below

Enter your vCenter database admin credentials

Next, you may receive a warning “This vCenter Server is being used by the following registered extension(s): VMware vSphere Update Manager. It’s OK, nothing to see here, these are not the droids you are looking for, move along.

Don’t forget to update vCenter Update Manager later or it won’t work is basically what this means above.

You’ll then be reminded to take a backup of your vCenter server if you want to upgrade your existing database. Why you’d want to upgrade the server but not the database is beyond me, but you are presented the option here, along with a CYA checkbox for VMware’s lawyers.

Next you’ll be asked whether you want to leave all your hosts in a disconnected state after upgrading vCenter by not upgrading the host’s vCenter Agent. The installer tells you that “vCenter Agent is installed on each host of the vCenter Server inventory. vCenter Agent enables vCenter Server to manage the hosts. vCenter Agent must be upgraded when vCenter is upgraded.”

If you are really worried about the vCenter Agent install causing a problem, select manual. In all 99.999% of other cases you’ll click “Automatic” above.

Next you’ll be asked to either use the System account or a specific service account to run vCenter 5.1 services. I chose “System” for my installation; you may have a specific account – so check your existing vCenter service if you’re performing an upgrade.

I kept all the default ports for my vCenter 5.1 upgrade installation. If you’ve customized any of these, here’s your chance to keep your port customization for vCenter 5.1

Deviating from the defaults, I chose the larger vCenter Server JVM memory setting. Managed Hosting Providers would be wise to have plenty of extra resources devoted for growth to your vCenter, so hopefully choosing “Large” here is a no brainer.

Next I received an error that was due to my vCenter server already being in a linked mode group. This seemed to be at the root of many of my problems with the vCenter install, so I’d recommend removing the server from Linked mode prior to upgrading and then re-adding it later if that is an option within your organization. The error I received stated that “Setup cannot join vCenter Server to the Linked Mode group. Refer to C:\Users\user\AppData\Local\Temp\status.txt and C:\Users\user\AppData\Local\Temp\jointool.log for more details. Click Yes to force this operation.”

I clicked yes to the above prompt. That resulted in another stern warning with “Error 28039. Setup cannot join vCenter Server to the Linked Mode group.” Sensing that I had little other choice here, I clicked OK.

I then was rolled back.

Finally, the install of vCenter 5.1 failed with the “The wizard was interrupted before VMware vCenter Server could be completely installed.” I’m then asked to “Refer to the log files vim-vcs-msi.log, vminst.log files on the installation server.

Undaunted by this depressing turn of events, I decided to try again, this time selecting just the vCenter Server installer.

I was asked by vCenter to enter information about my vCenter Single Sign On Administrator user name, password and Lookup Service URL

I begrudgingly entered admin@System-Domain for my user which appears to be change-able here, but make sure you use the same credentials during the install of single sign on. My guess is we can change the admin@System-Domain account to something more secure once its setup. For the service lookup URL I entered my vCenter fully qualified domain name along with :7444/lookupservice/sdk. Note: if you installed vCenter Single Sign On server somewhere else other than your vCenter server, you should enter its FQDN in the Lookup Service URL field.

Next you’re asked for the Lookup Service URL again and the vCenter Inventory Service URL. Again enter what you see below as long as you’re using the same server for vCenter Server, vCenter Single Sign On, & vCenter Inventory service, otherwise, use the FQDN where you installed them.

Doh. Fails. Another error yet again?

Either it’s my bumbling buffoonery or vCenter has some cleanup to do on this install. The failures I’ve encountered so far seemed to do with timing issues on services stopping and starting or vCenters being removed/added to linked mode in a timely manner during the upgrade. This error seems to indicate that the vCenter Inventory Service was not online when I went to install, so I checked it out. Sure enough:

I restarted the vCenter Inventory Service, re-launched the vCenter installation, re- entered the same information that you’ve seen in the screenshots thus far for vCenter Server and voila!

No problem, right? Well maybe not… There were a lot of trials and tribulations that just aren’t typically part of the same ol’ vCenter that we are used to. I was a bit surprised that VMware came out with these new features in a 5.1 release which seem to turn the vCenter paradigm on its head. Seem like this would have been better in the original release of 5.0 or the next 6.x version they came out with. It just seems strange to change vCenters architecture during the middle of the 5.x product cycle that is supposed to be synched with VCP 5 certifications. I mean I’m a VCP 5 and all of this stuff is new to me, I’ve never heard of it in any of the certification classes I took, nor the VCP 5 test. Anyways, perhaps I’m a bit too grumpy about them making this change. Hopefully further testing will reveal it to be a necessary and valuable change.

In my next post I’ll wrap up the vCenter upgrade with some screenshots on how to upgrade Update Manager 5.0 to 5.1 as well as the vSphere ESXi Dump Collector & vSphere Syslog Collector.

vCenter 5.1 Upgrade Procedures – This is NOT your Grandpappy’s vCenter…

vSphere 5.1 was released yesterday, so after cutting through the daily grind of setting up customers in a managed hosting datacenter I was finally able to get my grubby hands on vCenter 5.1 today.  Luckily a project of mine had a freshly installed vCenter 5.0 Update 1b on it and since it makes no sense to start out without the latest version available I decided to plunge forth into a vCenter 5.1 upgrade.

Image

One observation I noticed with vCenter 5.1 is that it seems quite a bit different from other vCenter installs you may have done in the past. I highly recommend reading (or at least skimming) the vSphere 5.1 Upgrade Guide before diving in.

There are two new items (technically one, but I’ll get to that later) – the vCenter Single Sign On Server & vCenter Inventory Service.  VMware’s documentation gives us a few options to upgrade our existing vCenter:

1. We can perform the upgrade using something called the vCenter Simple Install.  VMware’s documentation states to use this option if your vCenter is a “small installation”, but its not exactly clear what that means.  The simple option installs the vCenter Single Sign on & vCenter Inventory Service on the same server as vCenter.  In the following examples I used this method because it seemed easier to do as an upgrade to an existing vCenter.

2.  Our second option is to install Single Sign On & vCenter Inventory on servers separate from vCenter.  This sounds like the option to use if you are going to be using multiple vCenter’s across geographically dispersed sites that can be clustered.  I can’t tell if this is Linked Mode’s big brother or something new entirely, but I guess the purpose is to allow vCenter to rise above the barriers that disparate Active Directory domains impose on users ability to sign in with the same set of credentials across all vCenters.

Whichever install you choose, this is not going to be the same install you are typically used to with vCenter.  VMware seems to be adding a significant level of complexity to vCenter with 5.1, which may or may not be a good thing.  Its too early for me to decide whether I like this new added feature or not.  For now it seems like an unecessary set of added steps to the install, but who knows what advantages vCenter SSO Server and vCenter Inventory Service might give us in the future.

I chose the simple install, which was probably against my better judgement as a Managed Hosting provider for my customers, but I was most interested in upgrading to 5.1 to test other features (such as vSphere replication) so I took the path of least resistance.  Since its basically a fresh install, I still have the opportunity to reverse this later after i’ve done more research on SSO and Inventory.

In my next post, I’m going to walk you through my experience with the upgrade with some screenshots and advice – however I can’t guarantee that you’ll see these same exact steps.  I’ve also eliminated some of the more innocuous screens such as license agreements, etc… to make it quicker to view through.  So to reiterate, what you see here might not be an exact step for step replica of an upgrade within your environment. 

In other words, your mileage may vary.

Enhanced vMotion Compatibility – Why your identical hardware may not be the same.

In my previous post I alluded to the possibility that vMotion might fail even when you have hosts with identical hardware.  VMware says that vMotion should work between identical hardware – but… there’s always a but isn’t there?… If your hardware was:

1.  Made in different assembly lines

2.  Made in different factories

3.  Was manufactured several months apart

You could be affected by slight changes in Intel/AMD’s manufacturing process which prevents vMotion from executing!  See the following KB article:

http://kb.vmware.com/kb/1029785

In some cases a BIOS update will resolve this issue, but what good does that do once you have running workloads on these hosts?  You still need to bring down the host, and if there aren’t any other hosts that can accept a VM through vMotion, your workloads will need to come down too.   Not a good day.

Ok. So the soapbox is out, i’m standing on it and saying always enable EVC at the highest level possilbe for your cluster.  You won’t regret it.

vSysEng

Enhanced vMotion Compatibility – Time to break out the soapbox.

Ok, the resounding response to my first blog may not be what I had hoped.  Maybe I need to go into a bit of further detail on EVC and why using this feature is important.  The soap box is out.

It seems to be a somewhat overlooked feature of vSphere, but in the managed hosting arena it is important to use EVC or it can cause problems for your deployments down the road.

For those not familiar, EVC allows the vMotion of virtual machines between hosts with different revisions of processors.  So for instance, an cluster can have a mix of Intel procs or AMD (not Intel & AMD however).

For instance a cluster with 3 hosts using the following processor chipsets:

Cluster A

Host1:  Xeon E5450

Host2:  Xeon E3120

Host3:  Xeon E5-2440

Typically, a mixed processor chipset cluster without EVC will give errors when attempting to vMotion VM’s between hosts.  This is no secret and should be basically understood by even the most vanilla vSphere admins.

It should also be known by anyone who has used EVC before, it is critical to enable this during the initial deployment of the cluster.  If not engaged after the first host has been added to the cluster, you will need to take an outage against all VM’s in the cluster in order to get it enabled.  Imagine that you are trying to add 1 new host to an existing cluster of 16 older hosts with 160+ running VMs and you find out to use that host all 160+ VM’s need to take an outage.  Bad news.

I hear it already though – “I don’t need to use EVC because I always by the same type of hosts with the identical hardware.   EVC doesn’t matter in those types of deployments”.

R’uh R’oh – you may need EVC when you add that host with “identical hardware” to the cluster.  Yes, you may need EVC.

Like I said – The soap box is out, but I haven’t stood on it yet.  Get ready for that in a later post.

Enhanced vMotion Compatibility: When not to engage? Never.

We’ve all been there.  We setup that cluster and the question of EVC comes up.  I say always enable EVC if you are deploying either from an internal or customer perspective in the Managed Hosting space.

So Take a first example.  You are.

1. A MSP (or any other type of orgainization using VMware 5.0 and higher)

2. Deploying a new cluster of freshly purchased hardware.  Lets just say its 20 hosts.

3. Intended use is for customer deployment that may or may not need to grow in the future.

I say you always set EVC to the highest chipset level possible for the new hardware.  That way if the customer does decide to expand:

a.  they can add to their cluster when expansion comes to roost

b.  When the time for expansion comes they can decide at that time whether to go with a new cluster on the faster hardware or add to the existing.

Obviously, if you don’t then they are forced to start a new cluster.  This may or may not align with the customers needs, but its important to retain the flexibility to meet the customers needs, so I say EVC at the highest possible level.

I also say the same remains true even if you are not an MSP or an MSP deploying a cluster internally.  Yes, you will lose the chipset features of the newer servers, but at least you have the choice at a point in the future to decide to make that sacrifice or not.

If you feel differently, I’d love to learn why EVC should never be used.  Let me know your thoughts and comments.