Virtual Center 6.7U1b upgrade fails with: Update installation failed, vCenter is non-operational

In order to reproduce, get a VC/PSC 6.7 . Make the /storage/log full 100% . Installation fails with unexpected problem.

2019-03-07 14_29_49-host1.greg.labs - VMware ESXi.png

Step two, you clean up the /storage/log a bit and it still fails.

2019-03-07 14_31_15-host1.greg.labs - VMware ESXi.png

After this i made sure that there is 98% free.  And same error occurs.

You can reboot PSC/VC as many times as you want, that  does not help. In order to fix it, login to your VC/PSC box and delete file:


After file is gone, or moved , go back to installer and click update -> it works !

Have a look what was causing the error :

2019-03-08 13_23_22-vCenter Server Appliance11.png

And the installer script was looking at it hence failing while spotting INSTAL_FAILED with this cryptic error message that the vcenter is not operational


2019-03-08 13_26_13-vc001-psc001 - VMware Remote Console33.png

Many thanks to Ciaran from @VMware  for spotting that!

Searching for cdrom devices with Emulate Ide or Passthrough IDE mode in powercli

so we want to find all vms that have their cdrom device set to Emulate Ide mode.

$vms=get-view -viewtype virtualmachine
foreach($vm in $vms){
 if ($vm.Config.Hardware.Device |? {$_.backing -is [vmware.vim.VirtualCdromRemoteAtapiBackingInfo]}) {$}

If we want to look for vms with cdrom devices mode set to Passthrough:

$vms=get-view -viewtype virtualmachine
foreach($vm in $vms){
 if ($vm.Config.Hardware.Device |? {$_.backing -is [vmware.vim.VirtualCdromRemotePassthroughBackingInfo]}) {$}

No fancy output 😉 Just sending to screen affected vm names.

Get-LicenseReport to obtain informations regarding licenses within Virtual Center

If you need to create reports regarding licenses usage you can the below script. It gathers all licensing information for virtual center to which you are currently connected. Before running this function make sure you are connected to one single virtual center instance. Please run this function within PowerCLI console, as for now i haven’t put check/loading vmware snappin

Function Get-LicenseReport


    Get licensing report from currently connected Virtual Center


    This function returns licensing information from the currently connected 
	Virtual Center server. It can output to screen or to html file using the
	ConvertTo-HTML option.
	PreContent of html report can be modified in source code.
	Variable $PreContent describes what is written before generating 
	the table.



    Will create licenses usage report from currently connected VirtualCenter
	server and output to screen


    Get-LicenseReport -htmlfile "C:\licensereport.html"

    Will create licenses usage report from currently connected VirtualCenter
	server and output to file "C:\licensereport.html"
	Get-LicenseReport -htmlfile "C:\licensereport.html" -Name "Grzegorz 
	Kulikowski" -Email "" -CustomerNumber "123123"

    Will create licenses usage report from currently connected VirtualCenter
	server and output to file "C:\licensereport.html" and fill out predefined
	field within report such as name, email, vmware customer number

   .Parameter CustomerNumber

    If you need to specifi additional field like Customer Number
	.Parameter Name

    If you need to specify name of the person who creates the report
	.Parameter Email

    If you need to specify e-mail of the person who creates the report
   .Parameter htmlfile

    Specifies the file name to which html version report will be written


    NAME:  Get-LicenseReport

    AUTHOR: Grzegorz Kulikowski

    LASTEDIT: 08/13/2012
	SPECIAL THANKS: Luc Dekens, Robert van den Nieuwendijk, Yasen Kalchev
	NOT WORKING ? #powercli @ / 


param (
<Title>License Report for $($</Title>
 <Style type="text/css">
  P.myinfo {text-align: Left}
  body {
   margin-left: 20%;
   margin-right: 20%;
   padding-top: 30px;
   padding-bottom: 40px;
   color: #2E2E2E;
   background-color: #E6E6E6 }
  table.gridtable {
	font-family: verdana,arial,sans-serif;
	border-width: 1px;
	border-color: #666666;
	border-collapse: collapse;
  table.gridtable th {
	border-width: 1px;
	padding: 8px;
	border-style: solid;
	border-color: #666666;
	background-color: #dedede;
  table.gridtable td {
	border-width: 1px;
	padding: 8px;
	border-style: solid;
	border-color: #666666;
	background-color: #ffffff;
<p><h1>License Report</h1></p>
<p class=myinfo>VMware License Review – for VC:<b> $($ </b></br>
Customer Number:<b> $CustomerNumber </b></br>
Name of Person completing this form: <b>$Name</b></br>
Email of Person completing this form: <b>$Email</b></br>
Date: <b> $(get-date) </b></br></br</p>

if(-not ($global:DefaultVIServer) ) { 
	Write-Host -ForegroundColor Red -BackgroundColor Black "You are not connected to any VirtualCenter server. Please connect manually."
	Write-Host -ForegroundColor Yellow -BackgroundColor Black "hint: Connect-VIServer -server -Credential (Get-Credential)"
$param = @($null)
$ServiceInstance = Get-View ServiceInstance
$LicenseManager= Get-view $ServiceInstance.Content.LicenseManager
$LicenseAssignmentManager= Get-View $LicenseManager.LicenseAssignmentManager
$LicensesArrayList=New-Object System.Collections.ArrayList 
$LicenseAssignmentManager.GetType().GetMethod("QueryAssignedLicenses").Invoke($LicenseAssignmentManager,$param) |Foreach-Object{
$License=New-Object -TypeName PsObject -Property @{ProductName=$null;Version=$null;Edition=$null;DisplayName=$null;PhysProcessors=$null;CoresPerCpu=$null}
$License.ProductName= ($_.Properties.GetEnumerator()|?{$_.Key -eq 'ProductName'}).Value
$License.Version= ($_.Properties.GetEnumerator()|?{$_.Key -eq 'ProductVersion'}).Value
$License.Edition= $_.AssignedLicense.Name
    if($_.AssignedLicense.EditionKey -like "vco*"){
			$License.DisplayName+=" Used: $($_.AssignedLicense.Used) from: $($_.AssignedLicense.Total)"
	if($_.EntityId -like "host-*"){
		$HostView=Get-View -Id  "HostSystem-$($_.EntityID)"
		else {
	($LicensesArrayList | Select-Object ProductName,Version,Edition,DisplayName,CoresPerCpu,PhysProcessors | ConvertTo-Html -PreContent $PreContent -Head $Head ) -Replace '<table>','<table class="gridtable">' |Out-File $htmlfile
		return $LicensesArrayList

I would like to thank Luc Dekens, Robert van den Nieuwendijk, Yasen Kalchev for their support while i was trying get all the information which was needed in order to obtain all data from Virtual Center, as this one was bit tricky 😉

get-licensereport image

get-licensereport image

While writing this script it was very difficult to pass $null to QueryAssignedLicenses method, i mean it was impossible ;). Why did i have to query like that ?

$LicenseAssignmentManager.GetType().GetMethod("QueryAssignedLicenses").Invoke($LicenseAssignmentManager,$param) Yasen Kalchev explains why do we have to use this approach in order to get ALL licensing information from virtual center.
By the way it’s very easy to obtain exactly the same result if you will point your web browser directly to
And leave the EntityID parameter as empty.
What i have also learned while writing this script is that EntityID for VC is kept in

(Get-View ServiceInstance).Content.About.InstanceUuid

And for all esx/i hosts the id is the Value of its MoRef for example HostSystem-host-123 . So EntityID in this case would be the ‘host-123’ part.
If you want to change the content of the html report just edit contents of PreContent/Head variables. If you want to change the look of the html report , you have to edit css style. If you will modify the css table style, make sure you will also change the style name in the -replace section as well, because by default ConvertTo-Html creates a table tag without any style.

I have added functionality to get-LicenseReport. If it will discover VC OPS, it will also put into displayname TOTAL and USED numbers for that license.

ESX/ESXi host in vCenter Server reports the error: Unable to apply DRS resource settings on host. The operation is not allowed in the current state

What helped in my situation:
service mgmt-vmware restart
on the service console
Official KB for this situation:

Clone roles between two virtual center servers

So i wanted to make a copy of a role that is in vc1. I wanted to have it in vc2.
Basically you can just open two vSphere clients, one to vc1 and other to vc2, and just select each privilege that is in this role and select it on second window. (click,click,click…) Yeah, if you have 1 role to copy, with very small amount of privileges then it is not such issue. But what if you have more?
Ok, let’s start from the beginning.

VC1 ---|
.      |
.    RoleA

VC2 ---|
.      |
.    RoleA

We want to copy roleA from VC1 to VC2.
First check if your powercli runs in multi VC mode.

PowerCLI C:\Get-PowerCLIConfiguration

Proxy Policy    Default Server
------------    ---------------
UseSystemProxy  Multiple

If not, set the default server mode to multi.

Set-PowerCLIConfiguration -DefaultVIServerMode multiple -Confirm:$false

Once this is set you can now connect to multiple VC servers. Since -server handles array we can do:

Connect-viserver -server "VC1","VC2" -credential (get-credential)

Role that will be cloned has name RoleA within VC1, let’s view it:

Get-VIrole -Name "RoleA" -Server VC1 | fl *

We can see it’s description,Name,ID and what will be most important for us PrivilegeList
Let’s store the privilege list for this roleA from VC1. We will store those privileges ids as a string in string array.

[string[]]$privsforRoleAfromVC1=Get-VIPrivilege -Role (Get-VIRole -Name "RoleA" -server VC1) |%{$}

Once we have the privileges ids, we can now create blank role in VC2.

New-VIRole -name "RoleA" -Server VC2

We will now populate privileges in our empty RoleA within VC2:

Set-VIRole -role (get-virole -Name "RoleA" -Server VC2) -AddPrivilege (get-viprivilege -id $privsforRoleAfromVC1 -server VC2)

If everything went fine we should have now 1:1 copy of our RoleA. Let’s check it:

(Get-VIRole -Name RoleA -Server VC1).PrivilegeList.Count
(Get-VIRole -Name RoleA -Server VC2).PrivilegeList.Count

If you don’t want to use this additional variable that holds privileges you can put it directly in one line

Set-VIRole -role (get-virole -Name "RoleA" -Server VC2) -AddPrivilege (get-viprivilege -id (Get-VIPrivilege -Role (Get-VIRole -Name "RoleA" -server VC1) |%{$}) -server VC2)

That’s it 😉

Get-drsrule enhancement

I was doing some drs rules today and noticed( after all those years 😉 ) that i get only id’s for vms in output. So i can not see directly which vms for example are set to be together etc…
In order to quickly have the output with the names instead of ids i wrote this tiny enhancement:

get-cluster XXX | Get-DrsRule | select Name, KeepTogether,Enabled, @{N="VMnames";E={ $_.Vmids|%{(get-view -id $_).name} } } 

I got a comment today under this post, so i thought i could just put the ‘normal/better’ version of this, since clearly this one does not make sort of logical sense, i mean of course it works, but it is really ugly because of the foreach of vmids , this is really ‘not the best idea’ to run get-view so many times if one can run it just once.

get-cluster |Get-DrsRule | select Name, KeepTogether,Enabled, @{N="VMnames";E={ (get-view -id $_.vmids).name } }

So this is more elegant plus it is actually way faster than the previous one.
They might look really similar to you, but in fact those are 2 different approaches.
The first one does a loop on an array of vmids and each iteration it asks get-view to fetch data.
The latter one is asking get-view just once, as we can pass to it ALL the vm ids. in the old day i would also do a param -property name for the get-view itself but these days (2020) the powercli is so much better optimized compared to 2012… then i dont see even a speed difference.
If the output is not optimized you can always use |ft -autosize at the end of the line.
For each of the virtual machine id i get the vm view and take its name.
You can do get-vm -id or get-view -id. If there is small amount of vms in your rules, that would not affect any performance of this command.
Tiny enhancement but saves some time on checking those ids manually.

Migrating virtual center database [oracle]

I was doing some checks today and was surprised that i have few services within vCenter Service Status that have Alert status. I forgot to take screenshot from it:/
They were in the “License Services” section.

When you are migrating database like i did, from 1 host to another and you have edited the:
and have new information like:

Then after checking the right TNS Service Name in Data Sources (ODBC) and starting your VC, i assumed everything is fine.
I missed one thing as it seems. The Services with alerts in vCenter Service Status, were red because i did not change 1 config file which is:
“C:\ProgramData\VMware\VMware VirtualCenter\”
You will see that old db hostname is still there:

You need to replace the old hostname with the new one there. After this , restart your vpxd and check again vCenter Service Status.