Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > Virtualization Manager (VMAN) > VMAN action to migrate a VM between Hyper-V hosts gives connection error

VMAN action to migrate a VM between Hyper-V hosts gives connection error

Updated: 3-21-2017

Overview

When completing an action to move a VM between Hyper-V hosts, you may receive errors in the Orion Web Console or VIM logs. The action may be part of a Recommendation or manually displayed on the VM Details Page .

 

You may find the following error in the Virtual Infrastructure Monitor (VIM) log The log file located at  LogFiles\VIM\Jobs\ log may contain these errors: 

"Failed to authenticate the connection at the source host: no suitable credentials available." 

"Failed to establish a connection with host ‘VMNAME’: the credentials supplied to the package were not recognized."

 

To resolve, verify security configuration of the Windows domain. See the resolution steps.

Environment

  • VMAN
  • VIM
  • Hyper-V VMs and Hosts (Windows)
  • Active Directory

 

Cause 

The Hyper-V Windows hosts require Kerberos authentication and Service Types set. Otherwise, credentials errors trigger when manually or applying Recommendation moves. The issue occurs with security settings in Active Directory.

 

Resolution

IMPORTANT: To resolve, you must complete all of the following instructions on all hosts you will migrate from and to.

Set Kerberos authentication for the authentication protocol for each host in Hyper-V Settings: 

  1. Open the Hyper-V Settings for host in Hyper-V Manager.
  2. Expand Live Migrations and click on Advanced Features.
  3. Authentication protocol select 'Use Kerberos'.
  4. Open the Hyper-V settings for the host machines and enable Live Migrations using Kerberos.


Set the Active Directory Users and Computers settings for each Hyper-V host server.

  1. Open Tools > Active Directory Users and Computers.
  2. Click on Computers and find the related host. Right click on the host and select Properties.
  3. Open the Delegation tab.
  4. Select 'Trust this computer for delegation to specified services only'.
  5. Select 'Use Kerberos only'.
  6. Add a cifs service for all other hosts in the cluster and the cluster itself:
    1. Click Add to add a service.
    2. Find and select other host in cluster.
    3. Select service 'cifs' and click on OK button.
  7. Add a Microsoft Virtual System Migration Service service for all other hosts in the cluster:
    1. Click Add to add a service.
    2. Find and select other host in cluster.
    3. Select service 'Microsoft Virtual System Migration Service' and click on OK button.

 

For example, when you have 3 hosts A, B and C in Cluster, the services may look as follows:
A

  • cifs B
  • cifs C
  • cifs Cluster
  • Microsoft Virtual System Migration Service B
  • Microsoft Virtual System Migration Service C

B

  • cifs A
  • cifs C
  • cifs Cluster
  • Microsoft Virtual System Migration Service A
  • Microsoft Virtual System Migration Service C

C

  • cifs A
  • cifs B
  • cifs Cluster
  • Microsoft Virtual System Migration Service A
  • Microsoft Virtual System Migration Service B

 

 

 

Last modified
08:23, 22 Mar 2017

Tags

Classifications

Public