Security

Reply
Regular Contributor I
Posts: 175
Registered: ‎04-13-2009

ClearPass 6.6 and VMware vSphere 6.5 : Duplicate Key cpuHotAddEnabled

If you try to deploy ClearPass 6.6(.0) on VMware vSphere 6.5, you can get the following error message when deploy : -109.5:VALUE_ILLEGAL: Duplicate Key "cpuHotAddEnabled"

 

It is easy to fix ! (waiting a new release of OVF...)

edit the CPPM-VM-x86_64-6.6.0.81015-ESX-CP-VA.ovf with notepad

and search line (end of file):

<vmw:Config ovf:required="false" vmw:key="cpuHotAddEnabled" vmw:value="false"/>

And if you look

      <vmw:Config ovf:required="false" vmw:key="cpuHotAddEnabled" vmw:value="false"/>
      <vmw:Config ovf:required="false" vmw:key="cpuHotRemoveEnabled" vmw:value="false"/>
      <vmw:Config ovf:required="false" vmw:key="firmware" vmw:value="bios"/>
      <vmw:Config ovf:required="false" vmw:key="cpuHotAddEnabled" vmw:value="false"/>
      <vmw:Config ovf:required="false" vmw:key="memoryHotAddEnabled" vmw:value="false"/>
      <vmw:Config ovf:required="false" vmw:key="tools.syncTimeWithHost" vmw:value="false"/>

 there is this line twice :

      <vmw:Config ovf:required="false" vmw:key="cpuHotAddEnabled" vmw:value="false"/>

 

 

Remove the first and save and redeploy ! and it work :-D

ACMP 6.4 / ACMX #107
Guru Elite
Posts: 8,451
Registered: ‎09-08-2010

Re: ClearPass 6.6 and VMware vSphere 6.5 : Duplicate Key cpuHotAddEnabled

Just as an FYI, ESXi 6.5 is not officially supported yet.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Regular Contributor I
Posts: 175
Registered: ‎04-13-2009

Re: ClearPass 6.6 and VMware vSphere 6.5 : Duplicate Key cpuHotAddEnabled


cappalli wrote:
Just as an FYI, ESXi 6.5 is not officially supported yet.

Yes, i known... but not always choice !

ACMP 6.4 / ACMX #107
Occasional Contributor II
Posts: 21
Registered: ‎02-12-2012

Re: ClearPass 6.6 and VMware vSphere 6.5 : Duplicate Key cpuHotAddEnabled

Hi Tim,

 

I made the edit to the OVF file that you outlined above. However, I am getting a different error when trying to deploy the OVF. When I am on step 6 of 6 the install wizard shows "a required disk image was missing". After I hit finish, I get the error "Failed to deploy VM: postNFCData failed."

 

I did select both the .OVF and .VMDK file when I chose to deploy a new OVF...

 

Few screen shots attached. Any thoughts?

 

Thanks

Regular Contributor I
Posts: 175
Registered: ‎04-13-2009

Re: ClearPass 6.6 and VMware vSphere 6.5 : Duplicate Key cpuHotAddEnabled


snyer wrote:

Hi Tim,

 

I made the edit to the OVF file that you outlined above. However, I am getting a different error when trying to deploy the OVF. When I am on step 6 of 6 the install wizard shows "a required disk image was missing". After I hit finish, I get the error "Failed to deploy VM: postNFCData failed."

 

I did select both the .OVF and .VMDK file when I chose to deploy a new OVF...

 

Few screen shots attached. Any thoughts?

 

Thanks


Hi,

 

You need only to select the OVF file (and select Deploy OVF)

 

And like tim say, it is not yet supported for the moment...

ACMP 6.4 / ACMX #107
Occasional Contributor II
Posts: 21
Registered: ‎02-12-2012

Re: ClearPass 6.6 and VMware vSphere 6.5 : Duplicate Key cpuHotAddEnabled

[ Edited ]

If you don't select a VMDK file with the OVF you can not contiue. Screen shot attached.

 

I realize it's not supported, but this thread was created to address issues with CPPM 6.6.0 / ESX 6.5 deployement. So any insight would be appreciated.

 

Also note this deployement is using vSphere, not vCenter.

 

Thanks

 

 

Occasional Contributor II
Posts: 21
Registered: ‎02-12-2012

Re: ClearPass 6.6 and VMware vSphere 6.5 : Duplicate Key cpuHotAddEnabled

I ended up installing vCenter for 6.5 and was able to provision the 6.6.0 OVF from there. I was not able to provison the OVF directly from vSphere though however much i manipulated/converted the OVF using ovftool.

Regular Contributor I
Posts: 175
Registered: ‎04-13-2009

Re: ClearPass 6.6 and VMware vSphere 6.5 : Duplicate Key cpuHotAddEnabled


snyer wrote:

I ended up installing vCenter for 6.5 and was able to provision the 6.6.0 OVF from there. I was not able to provison the OVF directly from vSphere though however much i manipulated/converted the OVF using ovftool.


Ok strange...

 

ACMP 6.4 / ACMX #107
Aruba Employee
Posts: 117
Registered: ‎09-21-2010

Re: ClearPass 6.6 and VMware vSphere 6.5 : Duplicate Key cpuHotAddEnabled

[ Edited ]

It is possible that the VM was exported with ovftool using the --compress argument, so the Host Client is unable to deploy them because the ESXi host expects the uncompressed disk images to be uploaded. Unfortunately, there seems to be no good way to un-gzip those disk images using the web browser at the moment.

 

So I had to use the ovftool to deploy on my ESXi and I was able to delpoy it successfully.

 

To use the ovftool for deployment, download the latest version 4.2 from the VMware suppport site. The OVFtool can run on linux, mac or windows OS. Once installed you can use

 

/Applications/"VMware OVF Tool"/ovftool -ds=datastore3 -n=ClearPass ~/Documents/ClearPass/Images/CPPM-VM-x86_64-6.5.0.71095-ESX-80G-CP-SW-EVAL-ovf/CPPM-VM-x86_64-6.5.0.71095-ESX-80G-CP-SW-EVAL.ovf vi://192.168.1.10

 

 

-ds --> datastore name

 

-n --> Name of the VM

 

/Applications/"VMware OVF Tool"/ovftool --> Ovftool path in mac. Will be different on linux and windows

 

~/Documents/ClearPass/Images/CPPM-VM-x86_64-6.5.0.71095-ESX-80G-CP-SW-EVAL-ovf/CPPM-VM-x86_64-6.5.0.71095-ESX-80G-CP-SW-EVAL.ovf  ---> Path for the Clearpass image that you want to deploy

 

vi://192.168.1.10 ---> My esxi server

 

you can usel "ovftool --help" to checkout other paramters that you can pass with the ovftool

 

Guru Elite
Posts: 8,451
Registered: ‎09-08-2010

Re: ClearPass 6.6 and VMware vSphere 6.5 : Duplicate Key cpuHotAddEnabled

VMware ESXi 6.5 is now supported in ClearPass 6.6.4

 

http://community.arubanetworks.com/t5/Security/ClearPass-Release-Announcements/m-p/283286/highlight/false#M29334


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: