Cause
This issue occurs because of the vCenter Server configuration. You see this issue if your vCenter Server uses one of these configurations:
- Your system is configured with a Hosts file for mapping of hostnames to IP address:
vCenter Single Sign-On system pulls Domain Name Server (DNS) information from the guest operating system during the installation. If a Host's file is configured on the Windows system with the shortname rather than the fully qualified domain name (FQDN), this will result in the SSL certificates for vCenter Single Sign-On generating incorrectly. This in turn results in the vCenter Single Sign-On Lookup Service being configured with the FQDN of the system, while the SSL certificates are generated with the shortname of the system the Lookup Service becomes unresponsive. - If the system has been multihomed via multiple (v)NIC:
vCenter Single Sign-On system pulls DNS information from the guest operating system during the installation, if the order of the (v)NICs on the system is setup where the DNS information is incorrect or different than the true hostname of the system resulting in incorrect SSL certificates, either using the hostname or IP address assigned to the (v)NIC. The vCenter Single Sign-On Lookup Service is then configured with the correct FQDN of the system while the SSL certificates are generated with the incorrect FQDN or IP of the system, as a result the Lookup Service becomes unresponsive.
Resolution
This is a known issue affecting vCenter Single Sign-On 5.5 and vSphere Web Client 5.5.
To work around this issue, perform one of these options depending on your environment's configuration:
- Update the Windows Host's file with the proper FQDN of the vCenter Server.
- Update the order of the (v)NIC on vCenter Server for proper FQDN resolution.
To Update the Windows Host's file with the proper FQDN of the vCenter Server
- Connect to the vCenter Server system via remote desktop or console.
- Navigate to this directory containing the Host's file:
%systemroot%\system32\drivers\etc\ - Open the hosts file using a plain text editor.
- Locate the entry for the the vCenter Server's hostname. Ensure that the hostname has been entered as the FQDN as well as the proper case as reported when running the hostname oripconfig /all commands via command prompt.
For example, use this mode:
...
# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost
192.169.1.10 vCenterServer.domain.local
... - Uninstall that instance of vCenter Single Sign-On 5.5 and clean up the %ProgramData% installation directory. For more information, see the Resolution section of Installing or upgrading vCenter Single Sign-On 5.5 fails with the error: vCenter Single Sign-On Setup Wizard ended prematurely because of an error (2059481).
- Reinstall vCenter Single Sign-On 5.5 to generate the SSL certificates using the proper FQDN. For more information, see Installing vCenter Single Sign-On 5.5 on a Microsoft Windows platform (2058239)
Please refer to below kb for more info:https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2062921
Thanks,
Amz