Before VxRail upgrade I run VxVerify tool and one of the errors was: bmc: firmware test timeout. check platform service.
You can read all about VxVerify tool in this article.
NOTE: If you do not fix this issue your upgrade will faile
Let’s fix it!
- SSH to the node showing error.
- Check if the PTAdmin account is active by running this command:
/opt/vxrail/tools/ipmitool user list 1
The output should look like this:
- If the account is not active then we need to correct it by executing:
/opt/dell/DellPTAgent/tools/ipmitool_static channel setaccess 1 16 callin=on ipmi=on link=on privilege=4
- Check if vxpsvc_ptagent_op account is present under system account list by executing:
esxcli system account list
- If vxpsvc_ptagent_op account is present under system account list then try to create test account “esxcli system account add -i test -p “VxR@il123!” -c “VxR@il123!“
- If creation of test user is successfull, then you fixed the issue and you can run VxVerify script again
- If you received an error message like below, you need to perform few more steps
A general system error occurred: passwd: Module is unknown
- Check PAM.d
root@ServerName: cd /etc/pam.d
[root@ServerName: /etc/pam.d] cat passwd
password requisite /lib/security//pam_passwdqc.so retry=3 min=disabled,disabled,disabled,7,7
password required /lib/security//pam_deny.so
password sufficient /lib/security//pam_unix.so use_authtok nullok shadow sha512 remember=5
[root@ServerName:/etc/pam.d] cat .#passwd
#%PAM-1.0
# Change only through host advanced option "Security.PasswordQualityControl".
password requisite /lib/security/$ISA/pam_passwdqc.so retry=3 min=disabled,disabled,disabled,7,7
password sufficient /lib/security/$ISA/pam_unix.so use_authtok nullok shadow sha512
password required /lib/security/$ISA/pam_deny.so
- Save original copy by executing command:
[root@ServerName:/etc/pam.d] cp passwd ee.passwd
- Copy default settings to current config:
[root@ServerName:/etc/pam.d] cp .#passwd passwd
- Remove the test which was created in step 4 by running:
esxcli system account remove -i test
NOTE: You may need to restart PTAgent, platform service, VXRM managment agents
Please like and share to spread the knowledge in the community.
Visit my FB page: https://www.facebook.com/AngrySysOps
Subscribe to my YouTube channel: https://www.youtube.com/channel/UCRTcKGl0neismSRpDMK_M4A
DON’T FORGET ABOUT COMPETITION FOR FREE EXAM VOUCHER!!! -> https://angrysysops.com/2021/07/08/how-to-get-free-vmware-vcp-certification-voucher-competition/