Simple workaround: Adding a host to an empty EVC cluster fails on latest vCenter patch

This article is motivated by this VMTN thread posted by one of VMware users. I see that several users have reported this usability issue. In this post, I thought to share my understanding about this “empty EVC cluster” behavior along with simple workaround to fix this usability issue.

Update 03/20: Great news! Empty EVC cluster issue discussed in this post is fixed with latest vCenter Patches. With new vCenter patch, empty EVC cluster will NOT expose new cpuids by-default, rather it will expose cpu features based on the first host getting added into EVC cluster. For your learning, once you patch your vCenter server, I would recommend you try below script to understand the new empty EVC cluster behavior.

1. What is the issue?

Users are NOT able to add a host into an empty EVC cluster after applying latest vCenter patch, which was released as part of Hypervisor-Assisted Guest Mitigation on 9th Jan, 2018. In order to explore this further, I created a empty EVC cluster on vCenter 6.5 U1e as shown below.

You can see, I have created empty EVC cluster, where EVC mode configured is “Intel-IvyBridge”. Now I tried adding a host, where corresponding ESXi patch is NOT applied and as posted on VMTN thread, I see below error on web client.

 2. Why does it fail with this vCenter 6.5 U1e patch?

You might know that, as part of VMware patches released for Hypervisor-Assisted Guest Mitigation, there are three new cpuids got exposed i.e. cpuid.IBRS , cpuid.IBPB & cpuid.STIBP. Now we need to know whether these new cpuids are exposed by the “empty EVC cluster” that we just created but you might be wondering how to go about it? It is fairly simple to know it by using one of EVC API properties as posted in my tutorial post on EVC vSphere APIs. As part of section #4 of that tutorial i.e. “Exploring EVC Cluster state”, I had written a pyVmomi script to get the EVC cluster state i.e. getEVCClusterState.py. I little modified this script to know whether new cpuids are exposed by cluster or not. Below is the code snippet.

#Cluster object for empty EVC cluster
cluster = get_obj(content,[vim.ClusterComputeResource],cluster_name)
#EVCManager which exposes EVC APIs
evc_cluster_manager=cluster.EvcManager()

evc_state=evc_cluster_manager.evcState
current_evcmode_key= evc_state.currentEVCModeKey

if(current_evcmode_key):
        print "Current EVC Mode::"+current_evcmode_key
else:
        print "EVC is NOT enabled on the cluster"
        quit()

#getting feature capabilities available on cluster
feature_capabilities = evc_state.featureCapability

flag=False
for capability in feature_capabilities:

        if(capability.key=="cpuid.STIBP" and capability.value=="1"):
                print "Found new cpuid::"+ capability.key
                flag=True

        if(capability.key=="cpuid.IBPB" and capability.value=="1"):
                print "Found new cpuid::"+ capability.key
                flag=True

        if(capability.key=="cpuid.IBRS" and capability.value=="1"):
                print "Found new cpuid::"+ capability.key
                flag=True
if(not flag):
        print "No new cpubit found"

Once I executed above script on “empty EVC cluster” and I see output as follows

Output:
vmware@localhost:~$ python emptyEVCCluster.py
Current EVC Mode::intel-ivybridge
Found new cpuid::cpuid.IBPB
Found new cpuid::cpuid.IBRS
Found new cpuid::cpuid.STIBP
vmware@localhost:~$

Output clearly shows that new cpuids are exposed on the “empty EVC cluster” that we created on latest vCenter patch. This concludes that when you try to add a non-patched host into this cluster, it will fail since that host does NOT support these new cpuids. On the other hand, if you have applied corresponding ESXi patch (which is pulled back at the moment), then you will not face this issue as new cpuids are available on that patched host. Now that you understood this behavior, let us take a look at the simple workaround to fix this issue.

3. What is the workaround?

I understand, this is a problem from usability perspective but good news is that we have very simple workaround available i.e. Instead of upfront enabling EVC on the empty cluster, you can create non-EVC cluster first , add all possible hosts into it and finally enable EVC as per available EVC mode. If you ask me, it is always good idea to create non-EVC cluster and only after adding all possible hosts, we should finally enable EVC on cluster.

I would also recommend you to read “vMotion and EVC Information” section from VMware KB to understand EVC and vMotion behavior post applying these patches.

4. Some useful resources on EVC

1. Part-1: Managing EVC using pyVmomi
2. Part 2: Managing EVC using pyVmomi
3. Tutorial on getting started pyVmomi

I hope you enjoyed this post, let me know if you have any questions/doubts.

33 thoughts on “Simple workaround: Adding a host to an empty EVC cluster fails on latest vCenter patch

  1. Do you have any exams coming up? ovens place bbs “We will probably have some downpayment requirements and they will maintain guidance on bank lending rates for first time home buyers while keeping tight credit conditions for second-time buyers,” he added.

  2. The line’s engaged http://cedecspro.edu.co/ dark nymphets “The Intelligence Community has a high bar for its assessments but it is virtually impossible to achieve 100 percent certitude,” said Shawn Turner, chief spokesman for the Office of the Director of National Intelligence. “That’s not the way intelligence works.

    1. Could you please repeat that? http://femjoy.in.net/ femjoy models 1. This prize draw is open to residents of the UK, Channel Islands, Isle of Man and Republic of Ireland aged 18 years or over, except employees of Telegraph Media Group Limited and Lesson Nine GmbH (trading as Babbel.com), their families, agents or anyone else professionally associated with the draw.

    2. I’ve been made redundant http://greatlakesstudentloans.in.net/ great lakes student loan In her cartoon, Norris satirically proposed May 20 as an “Everybody Draw Mohammed Day.” A page with the same name quickly turned up on Facebook, but Norris later said she had nothing to do with it. “I apologise to people of Muslim faith and ask that this ‘day’ be called off,” she said at the time.

    3. Do you know what extension he’s on? http://wallpapers.in.net/ sex wallpaper
      SAC already let go about a dozen marketing and sales staff as it became clear the fund would not be attracting outside capital while it defends itself against government charges. But so far there has been no mass exodus of investment staff.

    4. I’m doing a phd in chemistry http://yuvututube.fun/ yuvutu GE stock closed up even as the broader markets dipped. Itsshares are up 12.6 percent so far this year. Earlier in the day,the 5 percent rise in GE accounted for a positive effect of 8.5points on the Dow Jones industrial average.

    5. I’ll put him on http://xnxx.promo/ xmxx Gulf Capital has hired investment bank Rothschild as a financial adviser for a planned initial public offering(IPO) of the unit on an overseas exchange in 2014, the firm’schief executive said last week.

    6. Insufficient funds http://thisav.fun/ thisav.com Rodriguez and Braun received their penalties for their connection to the Biogenesis clinic in Florida that has been accused of dispensing banned drugs. A-Rod was among 13 players suspended 12 days ago by MLB, while Braun was penalized earlier this year.

    7. I’ve got a very weak signal http://xvedio.in.net/xvidoes/ xvidoes.com ** Oman’s Renaissance Services SAOG has sold itsoilfield maintenance services unit Topaz Oil and Gas, based inthe United Arab Emirates, to Interserve Plc for $46million, a bourse filing said on Sunday.

    8. Your account’s overdrawn http://9taxi.in.net/ taxi69 The town was grappling with the loss of a Maytag refrigerator factory, and Obama has often referred to the experience of meeting with disillusioned workers as he talks about restoring what he calls the “basic bargain” of the American Dream.

    9. We used to work together http://lamalinks.fun/ lama nudes
      Kellie Pickler’s wedding might’ve come as a surprise to her fans but it wasn’t last-minute. In fact, the former ‘American Idol’ contestant found time to collaborate on her wedding gown with Badgley Mischka. Pickler, 24, wore the ivory-colored, strapless satin dress during the New Year’s Day 2011 ceremony in the Caribbean where she and songwriter Kyle Jacobs exchanged vows.

    10. I’m on business http://ampland.fun/ ampland movies A harsh winter led to a seven per cent increase in patients through the doors of A&E at Queen’s Hospital last winter, leading to longer waiting times, more can celled operations and an increase in mortality rates.

    11. I’m on business http://keezmovies.in.net/ keez movies Florimon’s homer turned a one-run game into what, these days, amounts to an insurmountable deficit for this year’s Yankees. The Yanks outhit the Twins, 8-6, but managed nothing beyond a first-inning run off starter Sam Deduno (5-4), who kept them off balance with a late-moving fastball and sharp breaking ball and allowed one run and six hits in seven innings.

    12. How do you know each other? http://fittor.fun fina fittor With the one win in your pocket, do you go for broke on, say, a fuel call deep into the race and try to secure that elusive second win? Or do you simply play it safe, go for the good points day and hope that one win still will be enough to get you into the Chase?

    13. Have you got a current driving licence? http://keandra.in.net/ keandra porn Perhaps Asiana 214 had a bum autothrottle that neither worked nor alerted the pilot to its failure mode. Regardless, these pilots were distracted by the automation, or counting on it too much, and ignoring the simple (manual) rules of pitch, power and airspeed.

    14. Do you know each other? http://apetitmascotas.com/ combitic global nizagara “The most popular year-round flavors are cherry, Coke and blue raspberry. People love to have their tongues turn the shade of blue!” Chabris said of the free flavors offered in 12-ounce cups — almost double the size of last year’s — which normally retail for $1.29.

    15. I’d like to pay this cheque in, please http://xnxx.in.net/ xnxx tube Attractive valuations alongside a more buoyant globaleconomic backdrop have seen Kevin Lilley, manager of the OldMutual European Equity fund, lift his exposure to European autosas he cut back on consumer staples.

    16. Do you like it here? http://ghettotube.in.net/ ghettotube They have somehow given New York a baseball season with meaningful games in September, the Yankees have, but it is an illusionary one and, judging by all those empty seats at Yankee Stadium against the Red Sox, their fans seem to agree.

    17. Best Site good looking http://myvidster.fun/ myvidster.com Manning needs to keep throwing passes into those tight windows and keep throwing without caution. It’s the only way Manning knows how to be effective, and Ryan is convinced that it will soon be effective again.

    18. Would you like a receipt? http://femjoy.in.net/ femjoy galleries Heins was appointed BlackBerry CEO in early 2012, takingover from former co-CEOs Mike Lazaridis and Jim Balsillie. Inthe months before they stepped down, Lazaridis and Balsillie hadcut their base salary to $1, a symbolic gesture that they wouldnot draw fat cheques while the company was obviously suffering.

    19. Could I order a new chequebook, please? http://xnxx.zone/ xnxx 2019 Minutes to the Fed’s June meeting released on Wednesdayshowed about half of its policymakers felt the U.S. centralbank’s bond-buying stimulus should be brought to a halt by yearend, but many wanted reassurance the U.S. jobs recovery was onsolid ground before any policy retreat.

    20. Do you know the number for ? http://xnxx.zone/ hnxx But the crisis in the country´s power grid has little to do with sabotage, analysts say. Years of mismanagement, lack of maintenance, and frozen power rates have wrecked havoc with a electricity grid that is simply falling apart.

  3. I’d like , please http://apetitmascotas.com/ nizagara with alcohol Then, after taking the stage with Miley Cyrus at the Video Music Awards in August, Thicke faced backlash for performing with the under-21 pop star, with some critics saying he should have had more regard for his marriage.

  4. I’m self-employed http://apetitmascotas.com/ nizagara espao-ol Kuroda (11-9) hadn’t allowed a home run in 57.2 innings dating back to June 30, when he served up three longballs in a loss to the Orioles. He gave up a season-high four to the Rays, who scored six of their seven runs on those four blasts.

  5. A pension scheme http://fittor.top/ fina fittor Garner spoke with MTV News in Toronto, promoting her new movie “Dallas Buyer’s Club,” and said her husband has the chops it takes to bring the caped crusader back to the silver screen in the “Man of Steel” sequel.

  6. Accountant supermarket manager http://thisav.fun/ thisavcom
    But Western security officials and Lebanese businessmen say common use of cash and informal transfers by such enterprises makes it hard to detect whether any engage in money laundering. Businesses move money across borders through friends and family rather than banks. Some may even send cash by the suitcase load.

  7. Who’s calling? http://beeg.in.net/ beg.com Tepco said last month that 300 metric tons of highly radioactive water leaked from one of the hastily built steel tanks at the plant, which was crippled by a massive earthquake and tsunami in March 2011.

  8. What qualifications have you got? http://xnxx.in.net/ xnxx videos In selling mortgages loans, banks make representations andwarranties such as how well the loans were underwritten, andwhether the borrowers can afford them. Banks can be forced torepurchase soured loans if those claims prove wrong.

  9. I work for a publishers http://cedecspro.edu.co/ teenie models “Independent of the legal determination that will be made, I believe that this tragedy provides yet another opportunity for our nation to speak honestly about the complicated and emotionally-charged issues that this case has raised.”

  10. this is be cool 8) http://rulertube.fun/ ruler porn tube “Planets found by direct imaging are incredibly hard to study, since they are right next to their much brighter host stars,” Niall Deacon, of the Max Planck Institute for Astronomy in Germany, explained in a statement. “PSO J318.5-22 is not orbiting a star so it will be much easier for us to study. It is going to provide a wonderful view into the inner workings of gas-giant planets like Jupiter shortly after their birth.”

  11. Could you ask him to call me? http://fittor.top/ unga fittor “To be honest, I thought I was going to be in Minnesota a long time,” Kirilenko ceded. “I don’t have any regrets. During the summer, I always sit with my wife and discuss different options. For me, my family .. at this point, the Brooklyn Nets was the best option possible. But if you take a look, 10 years ago I would not take that deal. But it’s a great chance to win that [championship] trophy.”

  12. How much notice do you have to give? http://fittor.top/ gamla fittor Tweeter shares had been listed under the symbol TWTRQ – the Q indicating the company is in bankruptcy – and on Thursday Twitter indicated it plans to list its shares under TWTR. That confusion was lifted Tuesday, when Tweeter Entertainment resumed trading under the symbol THEGQ.

  13. How do you do? http://9taxi.in.net/ taxi9
    Last month, a French inquiry uncovered proof Ullrich used EPO when he finished second to 1998 Tour champion Marco Pantani, who also used the banned blood-booster. Pantani died from a drug overdose in 2004.

Leave a Reply to Hobert Cancel reply

Your email address will not be published. Required fields are marked *