VMware vCenter Authentication Issue Resolution

Discovered Version: V9.0

Question

Authentication failures occurred when adding VMware vSphere platform through Vinchin, preventing successful addition of backup resource platform and causing restore job configuration failure. Investigation revealed authentication failures caused by vCenter password expiration, certificate issues, and improper addition method. Error Code: [error:3008] # Vmware get vcenter info error.

Answer

Root cause

vCenter password expiration and SSL/TLS certificate issues led to authentication failures, and adding ESXi host incorrectly using vCenter method also caused authentication problems.

Problem Details

Error Logs

When adding vCenter platform and performing restore operations, Vinchin recorded the following errors:

[ERROR:3008#Vmware get vcenter info error]: RetrieveServiceContent error,
[SDK Error]:EOF was observed that violates SSL/TLS protocol.

The client probably provided invalid authentication information.

Resolution

Root Cause Analysis

1. vCenter Password Expiration: vCenter administrator password expired, preventing Vinchin from authenticating.

2. SSL/TLS Protocol Errors: vCenter certificate issues caused SSL/TLS connection failures.

3. Improper Addition Method: ESXi host added incorrectly using vCenter method, causing authentication failure.

4. HTTP 500 Internal Error: vCenter service internal issues caused access failures.

Solution

Method 1: Add Directly Using ESXi Method

Operation Steps:

1. In Vinchin interface, go to Resources> Infrastructure to add virtual platform

2. Platform type select "VMware vSphere"

3. Login to ESXi host using root account

4. Use ESXi IP address (not vCenter IP)

5. Test connection and complete addition

Method 2: Fix vCenter Authentication Issues (If vCenter Method Required)

Operation Steps:

1. Update vCenter administrator password

2. Check and update vCenter SSL/TLS certificates

3. Restart vCenter related services

4. Confirm network connection and firewall settings

5. Test vCenter API connection

Notes

1. Confirm Environment Type Before Addition

   • Confirm whether customer uses ESXi single host or vCenter cluster

   • ESXi environment uses ESXi method for addition

   • vCenter environment uses vCenter method for addition

2. Password Policy Management

   • vCenter has password expiration policy

   • Recommend setting password update reminders

   • Regularly check password validity period

3. Certificate Maintenance

   • Regularly check vCenter certificate validity

   • Update certificates promptly before expiration

   • Ensure Vinchin server trusts vCenter certificates

4. Network Connection Check

   • Ensure network connectivity from Vinchin to VMware platform

   • Check firewall settings and port availability

   • Test domain name resolution (if using domain names)

5. Error Log Analysis

   • Save detailed error logs

   • Analyze error codes and descriptions

   • Compare with VMware official documentation