PROBLEM:
"vCenter Network and Security" shows error "Error occurred while communicating with EsxAgentManager". EAM Status Showing "Starting". NSX manager Communication fails.
REASON:
This issue mostly occurs whenever vCenter Certificates has expired and renewed by administrator.
SOLUTION:
Update the "ESX Agent Manager extension Certificate (EAM)" with current "vpxd-extension" certificate by following below steps.
For Windows Based vCenter
1. Create a folder "c:\certificate".
2. Run below commands in "cmd" to retrieve the vpxd-extension certificate.
"%VMWARE_CIS_HOME%"\vmafdd\vecs-cli entry getcert --store vpxd-extension --alias vpxd-extension --output c:\certificate\vpxd-extension.crt
"%VMWARE_CIS_HOME%"\vmafdd\vecs-cli entry getkey --store vpxd-extension --alias vpxd-extension --output c:\certificate\vpxd-extension.key
3. Execute "cd C:\Program Files\VMware\vCenter Server\vpxd\scripts" in "CMD".
4. Run below command to update the "EAM extension Certificate"
"%VMWARE_PYTHON_BIN%" updateExtensionCertInVC.py -e com.vmware.vim.eam -c C:\Certificate\vpxd-extension.crt -k C:\Certificate\vpxd-extension.key -s <PNID/FQDN of vCenter Server> -u Administrator@vsphere.local
5. Restart the Esx Agent Manager (EAM) Service
service-control --stop vmware-eam
service-control --start vmware-eam
For vCenter Appliance:
1. shell.set --enabled true
2. Create a directory by running command "mkdir /certificate"
3. Run below commands to retrieve the vpxd-extension certificate.
/usr/lib/vmware-vmafd/bin/vecs-cli entry getcert --store vpxd-extension --alias vpxd-extension --output /certificate/vpxd-extension.crt
/usr/lib/vmware-vmafd/bin/vecs-cli entry getkey --store vpxd-extension --alias vpxd-extension --output /certificate/vpxd-extension.key
4. Run below command to update the "EAM extension Certificate"
python /usr/lib/vmware-vpx/scripts/updateExtensionCertInVC.py -e com.vmware.vim.eam -c /certificate/vpxd-extension.crt -k /certificate/vpxd-extension.key -s <FQDN of vCenter Server> -u Administrator@vsphere.local
5. Restart the Esx Agent Manager (EAM) Service
service-control --stop vmware-eam
service-control --start vmware-eam
