topic Re: Snapdrive 7.1.5P2 and vSphere 6.7 U2 in Data Protection

Snapdrive 7.1.5P2 and vSphere 6.7 U2

amayacitta — Thu, 08 Aug 2019 14:17:47 GMT

Hey all,

IMT doesnt specifically list support or lack of support for this, however we are having issues with Snap Drive 7.1.5 connecting to vSphere 6.7 U2 to map RDM LUN's. We can connect to 6.5 no problem, however 6.7 whether the VC or the ESXi host can't connect, the general error is below. This has been tried against multiple 6.7 instances and from multiple snap drive installations, so it's not specific to a particular version of windows, tried many of them, they all produce the same error.

If I enable schannel debugging I can see TLS 1.2 connects fine.

An SSL server handshake completed successfully. The negotiated cryptographic parameters are as follows.

Protocol: TLS 1.2
CipherSuite: 0xC028
Exchange strength: 256

Here is the error.

Has anyone else seen this? I can connect to the VC and ESXi fine using IE on the same/different machines.

Re: Snapdrive 7.1.5P2 and vSphere 6.7 U2

amayacitta — Thu, 08 Aug 2019 16:20:46 GMT

My colleague Wayne found a fix, seems even though the OS and IE can connect using TLS 1.2 - snap drive doesn't so! if you enable older versions of TLS then snap drive connects. To mess with the versions available on VC 6.7 follow this article.

https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-145A078D-2F33-4B39-987C-0F2C91BB23CB.html

Re: Snapdrive 7.1.5P2 and vSphere 6.7 U2

florianmoje — Wed, 20 Nov 2019 11:04:05 GMT

@amayacitta wrote:

My colleague Wayne found a fix, seems even though the OS and IE can connect using TLS 1.2 - snap drive doesn't so! if you enable older versions of TLS then snap drive connects. To mess with the versions available on VC 6.7 follow this article.

https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-145A078D-2F33-4B39-987C-0F2C91BB23CB.html

So which TLS settings exactly did you disable/enable to solve the problem? Has TLS 1.0 to be enabled?

Re: Snapdrive 7.1.5P2 and vSphere 6.7 U2

amayacitta — Wed, 20 Nov 2019 11:47:37 GMT

It's been a while now but pretty sure we just left TLS 1.2 enabled.

If your running Linux the commands are:

cd /usr/lib/vmware-TlsReconfigurator/VcTlsReconfigurator
./reconfigureVc update -p TLSv1.2

If you running windows the commands are:

cd %VMWARE_CIS_HOME%\TlsReconfigurator\VcTlsReconfigurator
reconfigureVc update -p TLSv1.2

Re: Snapdrive 7.1.5P2 and vSphere 6.7 U2

luc_beaudoinlefort — Tue, 03 Dec 2019 14:58:50 GMT

I have the same issue ... we found that work around but my question is .... is it supported by Netapp ... in the Compatibility matrix .. it says NO !!!!!!

Re: Snapdrive 7.1.5P2 and vSphere 6.7 U2

JosephFry — Tue, 03 Dec 2019 16:54:10 GMT

I'm getting a permission denied when I try to run the commands from the shell. What am I missing?

PermissionError: [Errno 13] Permission denied: '/var/log/vmware/vSphere-TlsReconfigurator'

Re: Snapdrive 7.1.5P2 and vSphere 6.7 U2

amayacitta — Tue, 03 Dec 2019 17:41:44 GMT

Are you getting that error entering the folder? Remember the script is inside the folder. Also make sure you login as root.

Follow the below KB:

https://kb.vmware.com/s/article/2147469

Re: Snapdrive 7.1.5P2 and vSphere 6.7 U2

luc_beaudoinlefort — Tue, 03 Dec 2019 17:49:50 GMT

is that configuration supported by NetApp ??????

Re: Snapdrive 7.1.5P2 and vSphere 6.7 U2

YitzhakB — Mon, 15 Feb 2021 09:17:56 GMT

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Protection_and_Security/SnapManager_Suite/SDW_fails_to_connect_to_vCenter_6.7u3

no !