Operational Verification of SDDC Manager

Validate the operational state of SDDC Manager by performing the operational verification for the SDDC Manager availability, inventory status, system component status, licenses, and connection to the online bundle repository.

Verify the Authentication in SDDC Manager by Using a Local System Account

Verify that SDDC Manager is configured correctly and that there are no communication issues by authenticating with the local system account.
Expected Outcome
You can successfully authenticate to SDDC Manager by using the
administrator@vsphere.local
system account and you have visibility to all menu items.
  1. Log in to the SDDC Manager at
    https://<sddc_manager_fqdn>
    as
    administrator@vsphere.local
    .
  2. Verify that the SDDC Manager dashboard is visible.
If you encounter issues while performing this procedure, use the following troubleshooting tips:
Troubleshooting Tips
  • Ensure that the SDDC Manager instance is configured with the correct DNS settings.
  • Ensure that the DNS is configured with forward and reverse lookup records for the SDDC Manager instance.
  • Ensure that NTP is configured properly on the SDDC Manager instance.
  • Ensure that all the services on the SDDC Manager instance are running.

Verify the Status of the SDDC Manager Inventory

Verify that the inventory status is good by checking the status of all ESXi hosts, vSphere clusters and NSX Edge clusters of the management and VI workload domains in SDDC Manager.
Expected Outcome
The management and VI workload domains have an active configuration status for all ESXi hosts, vSphere clusters and NSX Edge clusters.
  1. Log in to SDDC Manager at
    https://<sddc_manager_fqdn>
    as
    administrator@vsphere.local
    .
  2. In the left pane, select
    Inventory
    Workload domains
    .
  3. On the
    Workload Domain
    page, verify that the management and the VI workload domains have an
    Active
    configuration status.
  4. On the
    Workload Domain
    page, click the management domain.
  5. On the management domain page, click the
    Hosts
    tab and verify that all the ESXi hosts have the
    Active
    configuration status.
  6. On the management domain page, click the
    Clusters
    tab and verify that the clusters have the
    Active
    configuration status.
  7. On the management domain page, click the
    Edge clusters
    tab and verify that the edge clusters have the
    Active
    status.
  8. Repeat the steps to verify the inventory status for the VI workload domains.
If you encounter issues while performing this procedure, use the following troubleshooting tips:
Troubleshooting Tips
  • The status is shown as "Activating" during adding or configuring objects.
  • Ensure that all the services on the SDDC Manager instance are running.
  • Ensure that there are no failed tasks related to workload domains with errors.
  • Ensure that there are no failed tasks related to the ESXi hosts with errors.
  • Ensure that there are no failed tasks related to the clusters with errors.
  • Ensure that there are no failed tasks related to the edge clusters with errors.
  • Ensure that there are no failed/ongoing upgrades.

Verify the Status of the SDDC Manager Services and the Health Status of the SDDC

Verify that all services related to the SDDC Manager management functionality are running without issues and that the status of certain system components across
VMware Cloud Foundation
is good.
System Component
Expected Outcome
SDDC Manager services
All the SDDC Manager services, such as, NTP, PostgreSQL, Common Services, Domain Manager, Lifecycle Manager, Multi-Site Service, Operations Manager, and SDDC Manager UI, have the
GREEN
status.
NTP
The NTP status of all the management and VI workload domain components is
GREEN
.
vSAN
The status of vSAN and VM storage policy compliance for the managemement virtual machines is
GREEN
.
Passwords
The password expiry status of the management components in the management and all VI workload domains is
GREEN
.
Certificates
The certificate status of all the solutions managed by SDDC Manager is
Active
. No certificates have expired or are expiring soon.
  1. Log in to the SDDC Manager by using a Secure Shell (SSH) client as
    vcf
    .
  2. Switch to the
    root
    user by running the
    su
    command and entering the root password.
  3. Run the command to check the services status of the SDDC Manager and verify that the status of all the SDDC Manager services is
    GREEN
    .
    /opt/vmware/sddc-support/sos --services-health --domain-name ALL
  4. To check the status of certain system components in the management and all VI workloads domains, run these commands and verify the returned status against the expected outcome.
    System Component
    Command
    NTP
    /opt/vmware/sddc-support/sos --ntp-health --domain-name ALL
    vSAN and VM storage compliance
    /opt/vmware/sddc-support/sos --storage-health --domain-name ALL
    Passwords
    /opt/vmware/sddc-support/sos --password-health --domain-name ALL
    Certificates
    /opt/vmware/sddc-support/sos --certificate-health --domain-name ALL
If you encounter issues while performing this procedure, use the following troubleshooting tips:
System Component
Troubleshooting Tips
SDDC Manager services
  • Examine the log files for the respective services of SDDC Manager.
NTP
  • Ensure that the proper NTP value is configured for the SDDC components.
  • Ensure that the NTP server is reachable from the SDDC components with the error state.
vSAN and VM storage compliance
  • Ensure that all ESXi hosts are contributing to the vSAN storage.
  • Ensure that all management virtual machines are compliant with the storage policy defined.
Passwords
  • If an account password has expired, resolve the issue and remediate the password by using SDDC Manager UI.
  • If the password is about to expire, rotate or update the password.
Certificates
  • Ensure that the certificates of all managed components and add-on solutions are valid.
  • If there are certificates that are about to expire, plan for a certificate rotation.

Verify the License Status of SDDC Components

Verify that all managed components have valid licenses in
VMware Cloud Foundation
and that they are not expiring.
Expected Outcome
The status of the licenses for all the deployed management components are valid and are not expired.
  1. Verify the status of the vSphere licenses.
    1. Log in to the management domain vCenter Server at
      https://<management_domain_vcenter_server_fqdn>
      as
      administrator@vsphere.local
      .
    2. In the
      Administration
      inventory, under
      Licensing
      , click
      Licenses
      .
    3. On the
      Licenses
      page, click
      Assets
      and verify that the licenses for all the vSphere components are still valid and not expiring soon.
    4. Repeat the steps for the remaining vCenter Server instances in the inventory.
  2. Verify the status of NSX-T Data Center licenses.
    1. Log in to the NSX Manager instance for the management domain at
      https://<management_domain_nsxt_manager_fqdn>/login.jsp?local=true
      as
      admin
      .
    2. On the main navigation bar, click the
      System
      tab.
    3. In the left navigation bar, under
      Settings
      , click
      Licenses
      .
    4. On the
      Licenses
      page, verify that the licenses for NSX-T Data Center components are still
      Valid
      and not expiring soon.
    5. Repeat above steps for the remaining NSX Manager instances in the environment.
  3. Verify the status of vRealize Suite licenses.
    1. Log in to the vRealize Suite Lifecycle Manager at
      https://<vrealize_suite_lifecycle_manager_fqdn>
      as
      vcfadmin@local
      .
    2. On the My services page, click
      Locker
      .
    3. On the left navigation menu, click
      Licenses
      .
    4. On the
      Licenses
      page, verify that all licenses for the vRealize Suite components are
      Healthy
      and not expiring soon.
If you encounter issues while performing this procedure, use the following troubleshooting tips:
Troubleshooting Tips
  • Ensure that all applied licenses are valid.

Verify the Authentication to VMware Customer Connect in SDDC Manager

If you are using online bundle download, verify that SDDC Manager is configured with active and entitled VMware Customer Connect credentials for access to the online bundle repository.
Expected Outcome
The status of the authentication to VMware Customer Connect in SDDC Manager is
Active
.
  1. Log in to SDDC Manager at
    https://<sddc_manager_fqdn>
    as
    administrator@vsphere.local
    .
  2. In the left pane, select
    Administration
    Repository settings
    .
  3. Verify that
    My VMware account authentication
    is
    Active
    .
If you encounter issues while performing this procedure, use the following troubleshooting tips:
Troubleshooting Tips
  • Ensure that all services on the SDDC Manager instance are running.
  • Ensure that the correct VMware Customer Connect credentials are configured in SDDC Manager.
  • Ensure that the SDDC Manager has access to VMware Customer Connect. If your organization restricts access to the Internet and an HTTPS proxy is required, refer to the
    VMware Cloud Foundation
    documentation.