vCentre authentication failed

Hello @Kelvin 

This is one of two things.

Can you make sure that the VSA proxy has the required port access to vCenter and the ESX hosts? You can identify the VSA proxy by going to the “Proxies tab” shown in your screen shot.

We need to ensure that port 443 is opened from the VSA proxy to the vCenter server and port 902 is opened to the ESX hosts in the VMware environment.

Once this is verified, we need to ensure that the ccloud\Commvault user account has the required permissions from VMware.

If both of these conditions are met, the authorization should be successful.

Hi @Dan White ,

Under the Proxy tab, it showed a Client Group called “Infrastructure”

And if I click the Proxy ESX Server drop down box, it does allow me to browse the vCentre

So, I assume the username, password and ports must be working then ?

OK, that being said, the Client Group “Infrastructure” has 5 Servers

Mil-Commvault-2 is the backup Server in question. It also serves a proxy Server to vCentre, and the port 443 is good on it, however, the port 902 is not good but I’m not too sure if this port is relevant... 

Because we have another Commvault Server, on which the port 902 also doesn’t work, only the port 443 works but that Commvault Server doesn’t have any authentication problem to the vCentre...

mil-ccloud-ma and mil-ccloud-nas are the other 2 media agents but they are not really in use anymore, but, is it the case that port 443/902 need to be opened on them as well ?

Thanks,

Kelvin 

Hey @Kelvin - Port 902 is only used to pull data from ESXi primarily with NBD transport mode, so not required for discovery or initial communication with vCenter - you should be good there with 443 open for the vCenter client.

It does seem like the discovery window is attempting to use a proxy which may not be able to establish a connection, whereas the actual backup job may cycle through all of them until finding one that works. The implemented logic may not be the same when entering credentials on the vCenter client/instance.

Does the proxy ESX server browse work instantly or does it take a few seconds? I wonder if that detail is cached which is why it shows. Rather than leaving the infrastructure group on the proxy list, try set Mil-Commvault-2 manually and see if that works.

Either way, the behavior is strange and should be fixed, but if that works it might give us some more information about what is going on. I believe the EvMgrS.log on the CommServe should also provide detail on where its routing the connection request before displaying the error.

@Dan White @Damian Andre  “Rather than leaving the infrastructure group on the proxy list, try set Mil-Commvault-2 manually and see if that works.” ----  Yes, it worked !!!

Now I’m wondering why ?