Nos marques

Bienvenue sur le site Web de Schneider Electric

Bienvenue sur notre site Web.
		
En quoi pouvons-nous vous aider aujourd'hui ?
PowerChute Network Shutdown v5 reports "Could not connect to Host over the network."

Article available in these languages: Japonais

Issue:
PowerChute Network Shutdown v5 reports "Could not connect to Host over the network." when configuring with VMware ESXi 8 host.

Could not connect to Host

Product:
PowerChute Network Shutdown version 5

Environment:
VMware ESXi 7 or 8 host that VMware vCenter Server does not manage.

Cause:
Security certificate created with the CN= localhost.localdomain
During the installation of ESXi, the installer generates a self-signed certificate for each ESXi host, but the process is performed before the ESXi identity is configured. This means all ESXi hosts have a common name in their self-signed certificate of localhost.localdomain.



Security Certificate
Solution:
1 - Verify that the ESXi host IP address and/or domain name have been entered correctly.
2 - Verify the ESXi host can be pinged from the PowerChute VM or server PowerChute is running on.
3 - Review the security certificate presented by the host. It should contain the host IP address or domain name as the CN.

If the CN = localhost.localdomain, create a new security certificate after adding the correct domain name to the host.


Option 1: Regenerating ESXi Self-Signed Certificates Using Built-In Tools

1 - Login to the ESXi host over SSH
a. Requires ESXi shell and SSH access to be enabled on the host

2 - Back up the existing certificate files

a. mv /etc/vmware/ssl/rui.crt /etc/vmware/ssl/rui.crt.old
b. mv /etc/vmware/ssl/rui.key /etc/vmware/ssl/rui.key.old
3 - Generate a new certificate that contains the FQDN for the CN value.
a. /sbin/generate-certificates
4 - Restart the hostd service on the host
a. /etc/init.d/hostd restart

5 - Login to the PowerChute VM
a. Edit /etc/hosts file and add the IP address and hostname of the ESXi host
Examples: 192.168.0.100 ESXiHost100.homelab.local or 192.168.0.100 ESXi100 if DNS is not configured.
For help with editing the hosts file, please see How to edit the hosts file on the system PowerChute Network Shutdown has been installed on to.

6 - Reboot the PowerChute VM
a. The command is init 6

7 - Login to the PowerChute web interface
a. Run the setup wizard

Option 2: Manual SSL Certificate Creation and Installation via OpenSSL

1 -  Connect to the ESXi host via SSH and run the following commands to backup existing certificates
  • mkdir /etc/vmware/ssl/bak
  • mv /etc/vmware/ssl/rui.* /etc/vmware/ssl/bak/

2 - Using a text editor (e.g. notepad) and WinSCP, create a custom OpenSSL config file (webclient.cnf) with the following content and upload it in the /etc/vmware/ssl/ folder.

[ req ]
default_bits = 2048
default_keyfile = rui.key
distinguished_name = req_distinguished_name
encrypt_key = no
prompt = no
string_mask = nombstr
req_extensions = v3_req[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = digitalSignature, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth, clientAuth
subjectAltName = DNS:esxi.local, IP:192.168.1.100[ req_distinguished_name ]
countryName = PH
stateOrProvinceName = Cavite
localityName = Cavite
organizationName = YourCompany
organizationalUnitName = IT
commonName = esxi.local
3. Run the following commands on the ESXi host to generate a new key, CSR and SSL certificate:
  • openssl genrsa -out /etc/vmware/ssl/rui.key 2048
  • openssl req -new -nodes -out /etc/vmware/ssl/rui.csr -keyout /etc/vmware/ssl/rui.key -config /etc/vmware/ssl/webclient.cnf
  • openssl x509 -req -days 365 -in /etc/vmware/ssl/rui.csr -signkey /etc/vmware/ssl/rui.key -out /etc/vmware/ssl/rui.crt -extensions v3_req -extfile /etc/vmware/ssl/webclient.cnf

4. Restart the ESXi host services to apply the new certificate

/etc/init.d/hostd restart && /etc/init.d/rhttpproxy restart

Note: In certain cases, the steps outlined above may not successfully apply the updated SSL certificate. If the changes do not take effect, performing a full system restart of the ESXi host may be necessary to ensure the new certificate is properly loaded and recognized.

Schneider Electric Belgium

En savoir plus
Gamme :
En savoir plus
Gamme :

Besoin d'aide ?

  • Sélectionnez le bon produit

    Trouvez rapidement et facilement les produits et accessoires adaptés à vos applications.

  • Obtenir un devis

    Effectuez une demande de renseignements en ligne et un expert vous contactera.

  • Où acheter ?

    Trouvez facilement le distributeur Schneider Electric local le plus proche.

  • Centre d'aide

    Trouvez des ressources de support pour tous vos besoins, en un seul endroit.

  • Documentation produits
  • Téléchargement de logiciels
  • Sélecteur de produits
  • Substitution et remplacement de produits
  • Centre d'aide et de contact
  • Trouver nos sites
  • Obtenir un devis
  • Où acheter
  • Carrières
  • Qui sommes-nous ?
  • Signaler une mauvaise conduite
  • Accessibilité
  • Salle de presse
  • Partenaires
  • EcoStruxure
  • Nos emplois
  • Blog
  • Soyez informé des nouveautés en premier ?
  • Protection des données
  • Mention sur les cookies
  • Conditions d utilisation
  • Conditions générales de vente et d'achat
  • Change your cookie settings