Error occurred while communicating with EsxAgentManager :vCenter shows error after vCenter Certificate Renewal.

 

PROBLEM:

"vCenter Network and Security" shows error "Error occurred while communicating with EsxAgentManager". EAM Status Showing "Starting". NSX manager Communication fails.

REASON:

This issue mostly occurs whenever vCenter Certificates has expired and renewed by administrator.

SOLUTION:

Update the "ESX Agent Manager extension Certificate (EAM)" with current "vpxd-extension" certificate by following below steps.

For Windows Based vCenter

1. Create a folder "c:\certificate".

2. Run below commands in "cmd" to retrieve the vpxd-extension certificate.

"%VMWARE_CIS_HOME%"\vmafdd\vecs-cli entry getcert --store vpxd-extension --alias vpxd-extension --output c:\certificate\vpxd-extension.crt

"%VMWARE_CIS_HOME%"\vmafdd\vecs-cli entry getkey --store vpxd-extension --alias vpxd-extension --output c:\certificate\vpxd-extension.key

3. Execute "cd C:\Program Files\VMware\vCenter Server\vpxd\scripts" in "CMD".

4. Run below command to update the "EAM extension Certificate"

"%VMWARE_PYTHON_BIN%" updateExtensionCertInVC.py -e com.vmware.vim.eam -c C:\Certificate\vpxd-extension.crt -k C:\Certificate\vpxd-extension.key -s <PNID/FQDN of vCenter Server> -u Administrator@vsphere.local

5. Restart the Esx Agent Manager (EAM) Service

service-control --stop vmware-eam

service-control --start vmware-eam

For vCenter Appliance:

1. shell.set --enabled true

2. Create a directory by running command "mkdir /certificate"

3.  Run below commands to retrieve the vpxd-extension certificate.

/usr/lib/vmware-vmafd/bin/vecs-cli entry getcert --store vpxd-extension --alias vpxd-extension --output /certificate/vpxd-extension.crt

/usr/lib/vmware-vmafd/bin/vecs-cli entry getkey --store vpxd-extension --alias vpxd-extension --output /certificate/vpxd-extension.key

4. Run below command to update the "EAM extension Certificate"

python /usr/lib/vmware-vpx/scripts/updateExtensionCertInVC.py -e com.vmware.vim.eam -c /certificate/vpxd-extension.crt -k /certificate/vpxd-extension.key -s <FQDN of vCenter Server> -u Administrator@vsphere.local

5. Restart the Esx Agent Manager (EAM) Service

service-control --stop vmware-eam

service-control --start vmware-eam