Nimble Storage for VMWare Center pluigin won't install

[x_Jesh]

Hello,

We keep receiving an error when upgrading to 7.0 u3.

'Download Plugin' Task name, 'HPE Alletra 6000 and Nimble Storage for VMware vCentger Plugin (com.nimblestorage.hi.h5:6.0.956221.0), details. it won't install.

The full error is below.  System was working fine with u2. Please advise as how to fix, we are switching over and management is asking what the hold up is.

Cannot complete the operation. See the event log for details. Error downloading plug-in. Make sure that the URL is reachable and the registered thumbprint is correct. sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280) sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:451) sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:323) sun.security.validator.Validator.validate(Validator.java:271) sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:315) sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:234) sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:110) com.vmware.vim.vmomi.client.http.impl.ThumbprintTrustManager.checkServerTrusted(ThumbprintTrustManager.java:236) sun.reflect.GeneratedMethodAccessor3795.invoke(Unknown Source) sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) java.lang.reflect.Method.invoke(Method.java:498) com.vmware.vise.util.reflection.ProfilingInvocationHandler.invoke(ProfilingInvocationHandler.java:120) com.sun.proxy.$Proxy969.checkServerTrusted(Unknown Source) sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:1256) sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638) sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473) sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369) sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:377) sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444) sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422) sun.security.ssl.TransportContext.dispatch(TransportContext.java:182) sun.security.ssl.SSLTransport.decode(SSLTransport.java:156) sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1418) sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1324) sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:439) sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:410) sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559) sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:197) sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1567) sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1495) java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480) sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:352) com.vmware.vise.util.http.ConnectionManager.connect(ConnectionManager.java:284) com.vmware.vise.util.http.SimpleHttpClient.connect(SimpleHttpClient.java:354) com.vmware.vise.util.http.SimpleHttpClient.connect(SimpleHttpClient.java:324) com.vmware.vise.util.http.SimpleHttpClient.executeMethodResponseAsStream(SimpleHttpClient.java:222) com.vmware.vise.plugin.download.PluginDownloadServiceImpl.downloadPackageInfo(PluginDownloadServiceImpl.java:287) com.vmware.vise.plugin.download.PluginDownloadServiceImpl.writeToFile(PluginDownloadServiceImpl.java:253) com.vmware.vise.plugin.download.PluginDownloadServiceImpl.download(PluginDownloadServiceImpl.java:135) com.vmware.vise.plugin.async.task.PluginDownloadTask.run(PluginDownloadTask.java:73) java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1640) com.vmware.vise.util.concurrent.QueuingCachedThreadPool$2.call(QueuingCachedThreadPool.java:873) java.util.concurrent.FutureTask.run(FutureTask.java:266) com.vmware.vise.util.concurrent.QueuingCachedThreadPool$QueueProcessor.run(QueuingCachedThreadPool.java:1271) java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) java.util.concurrent.FutureTask.run(FutureTask.java:266) java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) com.vmware.vise.util.concurrent.WorkerThreadFactory$1.run(WorkerThreadFactory.java:64) java.lang.Thread.run(Thread.java:748)

Initiator

VSPHERE.LOCAL\vsphere-webclient-ca91b3a9-8810-4d79-adae-ad339ccbf68a

Target

vcenter.smt.local

Server

vcenter.smt.local

Error stack:

Error downloading plug-in. Make sure that the URL is reachable and the registered thumbprint is correct.

sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280) sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:451) sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:323) sun.security.validator.Validator.validate(Validator.java:271) sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:315) sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:234) sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:110) com.vmware.vim.vmomi.client.http.impl.ThumbprintTrustManager.checkServerTrusted(ThumbprintTrustManager.java:236) sun.reflect.GeneratedMethodAccessor3795.invoke(Unknown Source) sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) java.lang.reflect.Method.invoke(Method.java:498) com.vmware.vise.util.reflection.ProfilingInvocationHandler.invoke(ProfilingInvocationHandler.java:120) com.sun.proxy.$Proxy969.checkServerTrusted(Unknown Source) sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:1256) sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638) sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473) sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369) sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:377) sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444) sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422) sun.security.ssl.TransportContext.dispatch(TransportContext.java:182) sun.security.ssl.SSLTransport.decode(SSLTransport.java:156) sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1418) sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1324) sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:439) sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:410) sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559) sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:197) sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1567) sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1495) java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480) sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:352) com.vmware.vise.util.http.ConnectionManager.connect(ConnectionManager.java:284) com.vmware.vise.util.http.SimpleHttpClient.connect(SimpleHttpClient.java:354) com.vmware.vise.util.http.SimpleHttpClient.connect(SimpleHttpClient.java:324) com.vmware.vise.util.http.SimpleHttpClient.executeMethodResponseAsStream(SimpleHttpClient.java:222) com.vmware.vise.plugin.download.PluginDownloadServiceImpl.downloadPackageInfo(PluginDownloadServiceImpl.java:287) com.vmware.vise.plugin.download.PluginDownloadServiceImpl.writeToFile(PluginDownloadServiceImpl.java:253) com.vmware.vise.plugin.download.PluginDownloadServiceImpl.download(PluginDownloadServiceImpl.java:135) com.vmware.vise.plugin.async.task.PluginDownloadTask.run(PluginDownloadTask.java:73) java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1640) com.vmware.vise.util.concurrent.QueuingCachedThreadPool$2.call(QueuingCachedThreadPool.java:873) java.util.concurrent.FutureTask.run(FutureTask.java:266) com.vmware.vise.util.concurrent.QueuingCachedThreadPool$QueueProcessor.run(QueuingCachedThreadPool.java:1271) java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) java.util.concurrent.FutureTask.run(FutureTask.java:266) java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) com.vmware.vise.util.concurrent.WorkerThreadFactory$1.run(WorkerThreadFactory.java:64) java.lang.Thread.run(Thread.java:748)

Related events:

[Mahesh202]

Hi x_Jesh

• The nimble plugin works with vCenter Server 7.0 Update 3 using the Spring 5 framework, see internal notes with a link
• Link to VMware release notes - https://docs.vmware.com/en/VMware-vSphere/7.0/rn/vsphere-vcenter-server-703-release-notes.html
• Vmware also states a workaround to disable Spring 5 and use Spring 4 if necessary.

After you upgrade your system to vCenter Server 7.0 Update 3, the vSphere Client is upgraded to use the Spring Framework version 5, because Spring 4 is EOL as of December 31, 2020. However, some plug-ins which use Spring 4 APIs might fail due to incompatibility with Spring 5. For example, plug-ins for VMware NSX Data Center for vSphere of version 6.4.10 or earlier

Workaround: Update the plug-ins to use Spring 5. Alternatively, downgrading the vSphere Client to use Spring 4 by uncommenting the line //-DuseOldSpring=true in the /etc/vmware/vmware-vmon/svcCfgfiles/vsphere-ui.json file and restarting the vSphere Client. For more information, see VMware knowledge base article 85632.

Hope this helps.!!

Regards
Mahesh.

[x_Jesh]

Hello, thanks for your reply and sorry for the delay, I have been on vacation.

The problem is we are on 7.0 U3 and can not update the Nimble Plugin. It is as if the link is not good or the certificate is invalid:

"Download plug-in

Status

Error downloading plug-in. Make sure that the URL is reachable and the registered thumbprint is correct. sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"

Can you tell me the correct location? Will that fix the problem? We are using: https://update.nimblestorage.com/esx7.0/ncm/index.xml under 'LifeCycle Manager->Settings->Patch Setup).

Thank you.

[mamatadesaiNim]

Let me understand the problem, Is this correct?
* you have a certain version of Nimble OS on your array
* your Nimble vCenter Plugin was registered with your vCenter
* you upgraded your vCenter

Did your Nimble OS version/array software version change, or is it the same?

[x_Jesh]

Hello,

Yes that is correct. That is what we did except we also updated the Nimble OS to 6.0.0.300-956221-opt. Do we need to reregister under 'VMWare Integration'?

[mamatadesaiNim]

Go to the "VMware Integration" page.  See this vCenter in the list.  Does it have some kind of an indication in the UI to upgrade vcenter plugin?  You may need to click some little icon.  LMK please.

[x_Jesh]

Thanks again for the quick reply.

The vcenter is listed, and 'Test Status' is functioning. There are no icons to upgrade the vcenter plugin unfortunately!

[mamatadesaiNim · Accepted solution]

thanks for the update.  you can always call nimble support and they can help you out, but we could try one or two more things.

1. check what version of the nimble plugin is in vcenter.  go to https://vcenter-name-or-ip/mob/?moid=ExtensionManager, and see if this item is in the list: extensionList["com.nimblestorage.hi.h5"].  If yes, click on it and check if the version string last 6 digits match the nimble OS version.  Then click on "server" and see if your array is listed there
2. one can always unregister and re-register the vcenter plugin.  go to the "vmware administration" page again, click on "edit" on this vcenter, uncheck "Web client", let it finish, then redo this to check it again to install it.

[x_Jesh]

OK I checked.

In MOB it is: "6.0.956221"

In the NIMBLE GUI: Currently installed software version:  6.0.0.300-956221-opt

When I go to server I see:

description Description Name Type Value label string "HPE Alletra 6000 and Nimble Storage vCenter web-client for c-nimblegroup|6.0.956221" summary string "3412753338816263817"

Unregistering and reregistering 'Web Client' will NOT cause any data loss, correct?

[mamatadesaiNim]

>Unregistering and reregistering 'Web Client' will NOT cause any data loss, correct?
Correct.  no data loss.

[x_Jesh]

Thank you very much. Unregistering and registering the plugin did the trick immediately.

Thanks again!

[mamatadesaiNim]

Very happy to hear that progress!  Thank you for the update here.