Before upgrading the appliance, let’s first resolve the SSL certificate problem of vSphere Data Protection Appliance.
The modern internet browsers don’t like VMware’s vSphere Data Protection Appliance 6.0 SSL certificate. So VMware made available a hotfix that removes the old SHA1 certificate of the VDPA tomcat service and installs a new SHA2 certificate.
It’s a pretty straightforward guide that resolves the connectivity problem of chrome or firefox browsers to VDPA.
So, download the compressed 2111900_VDPHotfix.SHA2.sh script, sftp it to the tmp folder of the appliance as admin user, ssh login as admin, su – root, goto tmp folder and chmod a+x the script file. Finally execute it and it will replace the certificate. Now you may connect to vdp-configure using your latest chrome browser.
Before upgrading the appliance you must take a snapshot of VDPA virtual machine. If you don’t, the upgrade cannot be completed. At this point you cannot take a snapshot since the three backup disks of the appliance are configured as independent disks. So, shutdown the appliance via vSphere client, edit the appliance settings and uncheck the “independent” disk mode of each backup disk. Finally take a snapshot of the vm. Leave the disk mode unchecked and power on the appliance.
To upgrade vSphere Data Protection Appliance, download the latest upgrade iso file from my.vmware portal and sftp it to a datastore accessible from VDPA. Using your vSphere Client, mount the iso to the appliance. Open your browser and login to the vdp-configure page of VDPA. Click on Upgrade tab and wait until the appliance checks the iso image.
When the check is completed, click on the Upgrade button and wait until the job is completed.
During the upgrade the web connectivity is lost.
At the end the appliance shuts down. It’s time to delete the vm snapshot and reconfigure back the three backup disks to independent/persistent mode. Power on VDPA and the console display shows:
Connect to vdp-configure and check the services status. Run a backup job to make sure that everything works fine.
- If you upgrade to version 6.1.1, do not forget to install first VDP61_Iso_Hotfix.tar.gz otherwise the iso image will not be detected. More info at the Release Notes.