VMware VSphere Replication Administration 8.1 V Sphere 81 Admin
User Manual: Pdf vSphere Replication - 8.1 - Administration User Guide for VMware vSphere Software, Free Instruction Manual
Open the PDF directly: View PDF .
Page Count: 126 [warning: Documents this large are best viewed by clicking the View PDF Link!]
- VMware vSphere Replication Administration
- Contents
- vSphere Replication Administration
- Overview of VMware vSphere Replication
- vSphere Replication System Requirements
- Installing and Uninstalling vSphere Replication
- Install vSphere Replication
- Uninstall vSphere Replication
- Unregister vSphere Replication from vCenter Server If the Appliance Was Deleted
- Configuring the Customer Experience Improvement Program
- Isolating the Network Traffic of vSphere Replication
- Set Up a VMkernel Adapter for vSphere Replication Traffic on a Source Host
- Set Up a VMkernel Adapter for vSphere Replication Traffic on a Target Host
- Create a VM Network Adapter to Use for Incoming Replication Traffic on the Combined vSphere Replication Appliance
- Create VM Network Adapters to Isolate the Network Traffic of a vSphere Replication Server
- Deploying Additional vSphere Replication Servers
- Upgrading vSphere Replication
- Reconfigure the vSphere Replication Appliance
- Reconfigure General vSphere Replication Settings
- Change the SSL Certificate of the vSphere Replication Appliance
- Change the Password of the vSphere Replication Appliance
- Change the Keystore Passwords of the vSphere Replication Appliance
- Change the Truststore Passwords of the vSphere Replication Appliance
- Configure vSphere Replication Network Settings
- Configure vSphere Replication System Settings
- Update the NTP Server Configuration
- Reconfigure vSphere Replication to Use an External Database
- Use the Embedded vSphere Replication Database
- vSphere Replication Roles and Permissions
- Replicating Virtual Machines
- How the Recovery Point Objective Affects Replication Scheduling
- How the 5 Minute Recovery Point Objective Works
- How Retention Policy Works
- Replicating a Virtual Machine and Enabling Multiple Point in Time Instances
- Using vSphere Replication with vSAN Storage
- Using vSphere Replication with vSphere Storage DRS
- How vSphere Replication Synchronizes Data Between vCenter Server Sites During Initial Configuration
- Replicating Virtual Machines Using Replication Seeds
- Replicating a Virtual Machine in a Single vCenter Server Instance
- Best Practices for Using and Configuring vSphere Replication
- Configure Replication
- Move a Replication to a New vSphere Replication Server
- Stop Replicating a Virtual Machine
- Reconfiguring Replications
- Reconfigure Recovery Point Objectives in Replications
- Resize the Virtual Machine Disk Files of a Replication that Uses Replication Seeds
- Resize Virtual Machine Disk Files of a Replication That Does Not Use Replication Seeds
- Change the Point in Time Settings of a Replication
- Change the Target Datastore Location of a Replication
- Monitoring and Managing Replications in vSphere Replication
- Performing a Recovery with vSphere Replication
- Troubleshooting vSphere Replication
- Generate vSphere Replication Support Bundle
- vSphere Replication Events and Alarms
- Solutions for Common vSphere Replication Problems
- Error at vService Bindings When Deploying the vSphere Replication Appliance
- OVF Package is Invalid and Cannot be Deployed
- Connection Errors Between vSphere Replication and SQL Server Cannot Be Resolved
- Configuring Replication Fails for Virtual Machines with Two Disks on Different Datastores
- vSphere Replication Service Fails with Unresolved Host Error
- Error Recovering Virtual Machine in a Single vCenter Server Instance
- vSphere Replication RPO Violations
- vSphere Replication Appliance Extension Cannot Be Deleted
- vSphere Replication Does Not Start After Moving the Host
- Unexpected vSphere Replication Failure Results in a Generic Error
- Reconnecting Sites Fails If One of the vCenter Servers Has Changed Its IP Address
- Uploading a Valid Certificate to vSphere Replication Results in a Warning
- vSphere Replication Server Registration Takes Several Minutes
- Generating Support Bundles Disrupts vSphere Replication Recovery
- vSphere Replication Operations Take a Long Time to Complete
- vSphere Replication Operations Fail with Authentication Error
- vSphere Replication Does Not Display Reverse Replications When the Source Site Is Inaccessible
- vSphere Replication is Inaccessible After Changing vCenter Server Certificate
- vSphere Replication Cannot Establish a Connection to the Hosts
- Anti-virus Agent in Firewall Terminates Virtual Machine Replication
- Initial Full Synchronization of Virtual Machine Files to VMware vSAN Storage Is Slow
- Configuring Replication Fails Because Another Virtual Machine has the Same Instance UUID
- Not Active Replication Status of Virtual Machines
- vSphere Replication Operations Run Slowly as the Number of Replications Increases
- Error at Reconfiguring the vSphere Replication Management Server from the Virtual Appliance Management Interface
- Unable to Establish an SSH Connection to the vSphere Replication Appliance
- The Replication Pauses When You Add a New Disk To the Source VM
- The vSphere Replication Appliance Root File System Switches to Read-only Mode and Login Fails
VMware vSphere
Replication
Administration
vSphere Replication 8.1
VMware vSphere Replication Administration
VMware, Inc. 2
You can find the most up-to-date technical documentation on the VMware website at:
https://docs.vmware.com/
If you have comments about this documentation, submit your feedback to
docfeedback@vmware.com
Copyright © 2012–2018 VMware, Inc. All rights reserved. Copyright and trademark information.
VMware, Inc.
3401 Hillview Ave.
Palo Alto, CA 94304
www.vmware.com
Contents
vSphere Replication Administration 6
1Overview of VMware vSphere Replication 7
Contents of the vSphere Replication Appliance 8
Site Recovery Client Plug-In 8
Local and Remote Sites 9
How vSphere Replication Works 10
Replication Data Compression 13
2vSphere Replication System Requirements 16
vSphere Replication Licensing 16
vSphere Replication Network Ports 17
Operational Limits of vSphere Replication 17
Compatibility of vSphere Replication with Other vSphere Features 18
vSphere Replication Compatibility with Other Software 19
Bandwidth Requirements for vSphere Replication 19
3Installing and Uninstalling vSphere Replication 22
Install vSphere Replication 23
Uninstall vSphere Replication 31
Unregister vSphere Replication from vCenter Server If the Appliance Was Deleted 32
4Configuring the Customer Experience Improvement Program 34
Categories of Information That VMware Receives 34
Join or Leave the Customer Experience Improvement Program in the vSphere Web Client 34
5Isolating the Network Traffic of vSphere Replication 35
Set Up a VMkernel Adapter for vSphere Replication Traffic on a Source Host 36
Set Up a VMkernel Adapter for vSphere Replication Traffic on a Target Host 37
Create a VM Network Adapter to Use for Incoming Replication Traffic on the Combined
vSphere Replication Appliance 38
Create VM Network Adapters to Isolate the Network Traffic of a vSphere Replication Server 39
6Deploying Additional vSphere Replication Servers 41
Deploy an Additional vSphere Replication Server 41
Register an Additional vSphere Replication Server 42
Replication Server Connection States 43
Reconfigure vSphere Replication Server Settings 43
VMware, Inc. 3
Unregister and Remove A vSphere Replication Server 45
Disable the Embedded vSphere Replication Server 45
7Upgrading vSphere Replication 47
Order of Upgrading vSphere and vSphere Replication Components 48
Upgrade Additional vSphere Replication Servers 48
Upgrade the vSphere Replication Appliance 50
Upgrade vSphere Replication 8.0 to Version 8.1 52
Update the vCenter Server IP Address in the vSphere Replication Management Server 54
8Reconfigure the vSphere Replication Appliance 55
Reconfigure General vSphere Replication Settings 56
Change the SSL Certificate of the vSphere Replication Appliance 57
Change the Password of the vSphere Replication Appliance 60
Change the Keystore Passwords of the vSphere Replication Appliance 61
Change the Truststore Passwords of the vSphere Replication Appliance 62
Configure vSphere Replication Network Settings 63
Configure vSphere Replication System Settings 64
Update the NTP Server Configuration 65
Reconfigure vSphere Replication to Use an External Database 66
Use the Embedded vSphere Replication Database 69
9vSphere Replication Roles and Permissions 71
vSphere Replication Roles Reference 71
Assign vSphere Replication Roles to Users 74
Assign VRM Replication Viewer Role 74
Assign VRM Virtual Machine Replication User Role 75
Assign VRM Virtual Machine Recovery User Role and Perform a Recovery Operation 75
Clone Existing VRM Administrator Role and Modify Privileges 76
10 Replicating Virtual Machines 77
How the Recovery Point Objective Affects Replication Scheduling 78
How the 5 Minute Recovery Point Objective Works 78
How Retention Policy Works 79
Replicating a Virtual Machine and Enabling Multiple Point in Time Instances 80
Using vSphere Replication with vSAN Storage 81
Using vSphere Replication with vSphere Storage DRS 83
How vSphere Replication Synchronizes Data Between vCenter Server Sites During Initial
Configuration 83
Replicating Virtual Machines Using Replication Seeds 85
Replicating a Virtual Machine in a Single vCenter Server Instance 85
Best Practices for Using and Configuring vSphere Replication 85
VMware vSphere Replication Administration
VMware, Inc. 4
Configure Replication 87
Move a Replication to a New vSphere Replication Server 89
Stop Replicating a Virtual Machine 89
Reconfiguring Replications 91
11 Monitoring and Managing Replications in vSphere Replication 95
Monitor Replication for Virtual Machines 95
View Replication Reports for a Site 97
Identifying Replication Problems 99
Manage vSphere Replication Connections 99
Manage vSphere Replication Servers 100
12 Performing a Recovery with vSphere Replication 102
Recover Virtual Machines with vSphere Replication 102
Failback of Virtual Machines in vSphere Replication 104
13 Troubleshooting vSphere Replication 105
Generate vSphere Replication Support Bundle 105
vSphere Replication Events and Alarms 106
Solutions for Common vSphere Replication Problems 110
VMware vSphere Replication Administration
VMware, Inc. 5
vSphere Replication Administration
vSphere Replication Administration provides information about installing, configuring, and using
VMware vSphere Replication.
Intended Audience
This information is intended for anyone who wants to protect the virtual machines in their virtual
infrastructure by using vSphere Replication. The information is written for experienced Windows or Linux
system administrators who are familiar with virtual machine technology and data center operations.
VMware, Inc. 6
Overview of
VMware vSphere Replication 1
VMware vSphere Replication is an extension to VMware vCenter Server that provides a hypervisor-based
virtual machine replication and recovery.
vSphere Replication is an alternative to storage-based replication. It protects virtual machines from partial
or complete site failures by replicating the virtual machines between the following sites:
nFrom a source site to a target site
nWithin a single site from one cluster to another
nFrom multiple source sites to a shared remote target site
vSphere Replication provides several benefits as compared to storage-based replication.
nData protection at a lower cost per virtual machine.
nA replication solution that allows flexibility in the storage vendor selection at the source and target
sites.
nLower overall cost per replication.
You can use vSphere Replication with the vCenter Server Appliance or with a standard vCenter Server
installation. You can have a vCenter Server Appliance on one site and a standard vCenter Server
installation on the other.
With vSphere Replication, you can replicate virtual machines from a source data center to a target site
quickly and efficiently.
You can deploy additional vSphere Replication servers to meet your load balancing needs.
After you set up the replication infrastructure, you can choose the virtual machines to be replicated at a
different recovery point objective (RPO). You can enable the multi-point-in-time retention policy to store
more than one instance of the replicated virtual machine. After recovery, the retained instances are
available as snapshots of the recovered virtual machine.
You can use VMware vSAN datastores as target datastores and choose destination storage profiles for
the replica virtual machine and its disks when configuring replications.
Note vSAN is a fully supported feature of vSphere 5.5 Update 1 and later.
You can configure all vSphere Replication features in the vSphere Web Client. You can manage sites
monitor the status of a replication through the replication management and monitoring dashboard.
VMware, Inc. 7
nContents of the vSphere Replication Appliance
The vSphere Replication appliance provides all the components that vSphere Replication requires.
nSite Recovery Client Plug-In
The vSphere Replication appliance adds a plug-in to the vSphere Web Client and vSphere Client.
The plug-in is also shared with Site Recovery Manager and is named Site Recovery.
nLocal and Remote Sites
In a typical vSphere Replication installation, the local site provides business-critical data center
services. The remote site is an alternative facility to which you can migrate these services.
nHow vSphere Replication Works
With vSphere Replication, you can configure the replication of a virtual machine from a source site to
a target site, monitor and manage the status of the replication, and recover the virtual machine at the
target site.
nReplication Data Compression
You can configure vSphere Replication to compress the data that it transfers through the network.
Contents of the vSphere Replication Appliance
The vSphere Replication appliance provides all the components that vSphere Replication requires.
nSite Recovery user interface that provides full functionality for working with vSphere Replication.
nA plug-in to the vSphere Web Client and vSphere Client that provides a user interface for
troubleshooting vSphere Replication health status and links to the Site Recovery standalone user
interface.
nAn embedded database that stores replication configuration and management information.
nA vSphere Replication management server:
nConfigures the vSphere Replication server.
nEnables, manages, and monitors replications.
nAuthenticates users and checks their permissions to perform vSphere Replication operations.
nA vSphere Replication server that provides the core of the vSphere Replication infrastructure.
The vSphere Replication appliance provides a virtual appliance management interface (VAMI). You can
use the VAMI to configure the appliance after deployment. For example, you can use the VAMI to change
the appliance security settings, change the network settings, or configure an external database. You can
deploy additional vSphere Replication Servers using a separate .ovf package.
Site Recovery Client Plug-In
The vSphere Replication appliance adds a plug-in to the vSphere Web Client and vSphere Client. The
plug-in is also shared with Site Recovery Manager and is named Site Recovery.
VMware vSphere Replication Administration
VMware, Inc. 8
You use the Site Recovery client plug-in to perform all vSphere Replication actions.
nView the vSphere Replication status for all vCenter Server instances that are registered with the
same vCenter Single Sign-On.
nOpen the Site Recovery user interface.
nView a summary of the replication configuration parameters on the Summary tab of virtual machines
that are configured for replication.
nReconfigure the replications of one or more virtual machines by selecting the VMs and using the
context menu.
Note Site Recovery user interface opens in a new browser tab.
Local and Remote Sites
In a typical vSphere Replication installation, the local site provides business-critical data center services.
The remote site is an alternative facility to which you can migrate these services.
The local site can be any site where vCenter Server supports a critical business need. The remote site
can be in another location, or in the same facility to establish redundancy. The remote site is usually
located in a facility that is unlikely to be affected by environmental, infrastructure, or other disturbances
that might affect the local site.
vSphere Replication has the following requirements for the vSphere® environments at each site:
nEach site must have at least one data center.
nThe remote site must have hardware, network, and storage resources that can support the same
virtual machines and workloads as the local site.
nThe sites must be connected by a reliable IP network.
nThe remote site must have access to networks (public and private) comparable to the ones on the
local site, although not necessarily the same range of network addresses.
Connecting Local and Remote Sites
Before you replicate virtual machines between two sites, you must connect the sites. When connecting
sites, users at both sites must have the VRM remote.Manage VRM privilege assigned.
When you connect sites that are part of the same vCenter Single Sign-On domain, you must select the
remote site only, without providing authentication details, because you are already logged in.
VMware vSphere Replication Administration
VMware, Inc. 9
When you connect sites that belong to different vCenter Single Sign-On domains, the
vSphere Replication Management Server must register with the Platform Services Controller on the
remote site. You must provide authentication details for the remote site, including IP or FQDN of the
server where Platform Services Controller runs, and user credentials. See Configure vSphere Replication
Connections.
After connecting the sites, you can monitor the connectivity state between them in the Site Recovery user
interface.
How vSphere Replication Works
With vSphere Replication, you can configure the replication of a virtual machine from a source site to a
target site, monitor and manage the status of the replication, and recover the virtual machine at the target
site.
When you configure a virtual machine for replication, the vSphere Replication agent sends changed
blocks in the virtual machine disks from the source site to the target site. The changed blocks are applied
to the copy of the virtual machine. This process occurs independently of the storage layer.
vSphere Replication performs an initial full synchronization of the source virtual machine and its replica
copy. You can use replication seeds to reduce the network traffic that is generated by data transfer during
the initial full synchronization.
During replication configuration, you can set a recovery point objective (RPO) and enable retention of
instances from multiple points in time (MPIT).
As administrator, you can monitor and manage the status of the replication. You can view information for
forward and reverse replications, local and remote site status, replication issues, and for warnings and
errors.
When you manually recover a virtual machine, vSphere Replication creates a copy of the virtual machine
connected to the replica disk, but does not connect any of the virtual network cards to port groups. You
can review the recovery and status of the replica virtual machine and attach it to the networks. You can
recover virtual machines at different points in time, such as the last known consistent state.
vSphere Replication presents the retained instances as ordinary virtual machine snapshots to which you
can revert the virtual machine.
vSphere Replication stores replication configuration data in its embedded database. You can also
configure vSphere Replication to use an external database.
You can replicate a virtual machine between two sites. vSphere Replication is installed on both source
and target sites. Only one vSphere Replication appliance is deployed on each vCenter Server. You can
deploy additional vSphere Replication Servers.
VMware vSphere Replication Administration
VMware, Inc. 10
Figure 1‑1. Replication Between Two Sites
(Further VR
Servers)
vCenter vCenter
VR Agent
VR vSCSI Filter
VR Appliance VR Appliance
Site Recovery UI
Protected Site Recovery Site
NFC Service
ESX
You can also replicate a virtual machine between datastores at the same vCenter Server. In that topology
one vCenter Server manages hosts at the source and at the target. Only one vSphere Replication
appliance is deployed on the single vCenter Server. You can add multiple Additional vSphere Replication
servers in a single vCenter Server to replicate virtual machines to other clusters.
To perform recovery, the vCenter Server managing the target datastore, the vSphere Replication
appliance, and any additional vSphere Replication Servers managing the replication must be up and
running.
VMware vSphere Replication Administration
VMware, Inc. 11
Figure 1‑2. Replication in a Single vCenter Server
Network
FileCopy
ESXi
Network
FileCopy
ESXi
vCenter Server
ESXi ESXi
VR Server VR Server
VR Appliance
Site Recovery UI
Replication
Cluster 1 Cluster 2
You can replicate virtual machines to a shared target site.
VMware vSphere Replication Administration
VMware, Inc. 12
Figure 1‑3. Replication to a Shared Target Site
Network
FileCopy
ESXi
Network
FileCopy
ESXi
vCenter
Server
ESXi
VR Agent
ESXi
VR Agent
ESXi
VR Agent
VR Appliance
VR Appliance vCenter
Server
vSphere
Web Client
Source Site
vCenter
Server
ESXi
VR Agent
ESXi
VR Agent
ESXi
VR Agent
VR Appliance
Source Site
Target Site
Replicate
Replication
Replication
Replication Data Compression
You can configure vSphere Replication to compress the data that it transfers through the network.
VMware vSphere Replication Administration
VMware, Inc. 13
Compressing the replication data that is transferred through the network saves network bandwidth and
might help reduce the amount of buffer memory used on the vSphere Replication server. However,
compressing and decompressing data requires more CPU resources on both the source site and the
server that manages the target datastore.
Data Compression Support
vSphere Replication 6.x supports end-to-end compression when the source and target ESXi hosts are
version 6.0. The support of data compression for all other use cases depends on the versions of source
and target ESXi hosts. The vSphere Replication servers on both the source and target sites must be 6.x.
Table 1‑1. Support for Data Compression Depending on Other Product Versions
Source ESXi host
ESXi Host that Manages the Target
Datastore Data Compression Support
Earlier than 6.0 Any supported version vSphere Replication does not support
data compression for the source ESXi
host, so the option Enable network
compression for VR data is disabled in
the Configure Replication wizard.
6.0 Earlier than 6.0 The ESXi host on the source site sends
compressed data packets to the
vSphere Replication server on the target
site. The vSphere Replication server
searches the target site for ESXi 6.0 hosts
that can decompress the data. If no 6.0
hosts are available for the target
datastore, the vSphere Replication server
uses the resources of the
vSphere Replication appliance to
decompress the data, and sends the
uncompressed data to the ESXi host.
6.0 6.0 This is an environment that supports full
end-to-end compression. The ESXi host
on the source site compresses the data,
and the vSphere Replication server on the
target site passes the data off to the ESXi
host where the host decompresses the
data and writes it to disk.
Data Compression and vSphere vMotion
If data compression is disabled, you can perform vMotion operations on replication source machines
between any pair of hosts that support vMotion and vSphere Replication.
VMware vSphere Replication Administration
VMware, Inc. 14
When data compression is enabled, if both the source and the target ESXi hosts support data
compression, vMotion operations can be performed as usual. However, if the target ESXi host is earlier
than 6.0, vSphere Replication prevents vMotion from moving replication source VMs to that host because
it does not support data compression. This prevents DRS from performing automated vMotion operations
to hosts that do not support compression. Therefore, if you need to move a replication source VM to an
ESXi host earlier than 6.0, before you perform the vMotion operation, you must reconfigure the replication
to disable data compression.
VMware vSphere Replication Administration
VMware, Inc. 15
vSphere Replication System
Requirements 2
The environment in which you run the vSphere Replication virtual appliance must meet certain hardware
requirements.
vSphere Replication is distributed as a 64-bit virtual appliance packaged in the .ovf format. It is
configured to use a dual-core or quad-core CPU, a 13 GB and a 9 GB hard disk, and 8 GB of RAM.
Additional vSphere Replication servers require 716 MB of RAM.
You must deploy the virtual appliance in a vCenter Server environment by using the OVF deployment
wizard on an ESXi host.
vSphere Replication consumes negligible CPU and memory on the source host ESXi and on the guest
OS of the replicated virtual machine.
Note vSphere Replication can be deployed with either IPv4 or IPv6 address. Mixing IP addresses, for
example having a single appliance with an IPv4 and an IPv6 address, is not supported. To register as an
extension, vSphere Replication relies on the VirtualCenter.FQDN property of the vCenter Server. When
an IPv6 address is used for vSphere Replication, the VirtualCenter.FQDN property must be set to a
fully qualified domain name that can be resolved to an IPv6 address or to a literal address. When
operating with an IPv6 address, vSphere Replication requires that all components in the environment,
such as vCenter Server and ESXi hosts are accessible using the IPv6 address.
This chapter includes the following topics:
nvSphere Replication Licensing
nvSphere Replication Network Ports
nOperational Limits of vSphere Replication
nCompatibility of vSphere Replication with Other vSphere Features
nvSphere Replication Compatibility with Other Software
nBandwidth Requirements for vSphere Replication
vSphere Replication Licensing
You can use vSphere Replication with certain editions of vSphere that include vSphere Replication in the
license.
VMware, Inc. 16
vSphere Replication does not have a separate license as it is a feature of certain vSphere license
editions.
nvSphere Essentials Plus
nvSphere Standard
nvSphere Enterprise
nvSphere Enterprise Plus
If you have the correct vSphere license, there is no limit on the number of virtual machines that you can
replicate by using vSphere Replication.
You cannot use vSphere Replication to replicate virtual machines on ESXi hosts that do not have the
correct vSphere license. If you install vSphere Replication on an ESXi host that does not have the correct
license and try to configure replication for virtual machines on that host, the replication fails with a
licensing error.
If you configure a virtual machine for replication on a host with the correct vSphere license and move it to
a host with an unsupported license, vSphere Replication stops replication of that virtual machine. You can
disable vSphere Replication on a configured virtual machine on the unlicensed host.
vSphere Replication Network Ports
vSphere Replication uses default network ports for intrasite communication between hosts at a single site
and intersite communication between hosts at the protected and recovery sites.
For a list of all the ports that must be open for vSphere Replication, see
http://kb.vmware.com/kb/2087769.
For the list of default ports that all VMware products use, see http://kb.vmware.com/kb/1012382.
Operational Limits of vSphere Replication
vSphere Replication has certain operational limits.
To ensure successful virtual machine replication, you must verify that your virtual infrastructure respects
certain limits before you start the replication.
nYou can only deploy one vSphere Replication appliance on a vCenter Server instance. When you
deploy another vSphere Replication appliance, during the boot process vSphere Replication detects
another appliance already deployed and registered as an extension to vCenter Server. You have to
confirm if you want to proceed with the new appliance and recreate all replications or shut it down and
reboot the old appliance to restore the original vSphere Replication extension thumbprint in
vCenter Server.
nEach newly deployed vSphere Replication appliance can manage a maximum of 2000 replications.
See http://kb.vmware.com/kb/2102453 for more information.
VMware vSphere Replication Administration
VMware, Inc. 17
nUpgraded vSphere Replication appliances that use the embedded vSphere Replication database
require additional configuration to enable the support of a maximum of 2000 replications. See
http://kb.vmware.com/kb/2102463. No additional configuration is required for vSphere Replication
appliances that are configured to use an external database.
Compatibility of vSphere Replication with Other vSphere
Features
vSphere Replication is compatible with certain other vSphere management features.
You can safely use vSphere Replication with certain vSphere features, such as vSphere vMotion. Some
other vSphere features, for example vSphere Distributed Power Management, require special
configuration for use with vSphere Replication.
Note You cannot upgrade VMware Tools in the vSphere Replication appliance.
Table 2‑1. Compatibility of vSphere Replication with Other vSphere Features
vSphere Feature
Compatible with
vSphere Replication Description
vSphere vMotion Yes You can migrate replicated virtual machines by using vMotion. Replication
continues at the defined recovery point objective (RPO) after the migration is
finished.
vSphere Storage
vMotion
Yes You can move the disk files of a replicated virtual machine on the source site
using Storage vMotion with no impact on the ongoing replication.
vSphere High
Availability
Yes You can protect a replicated virtual machine by using HA. Replication continues
at the defined RPO after HA restarts a virtual machine. vSphere Replication
does not perform any special HA handling. You can protect the
vSphere Replication appliance itself by using HA.
vSphere Fault
Tolerance
No vSphere Replication cannot replicate virtual machines that have fault tolerance
enabled. You cannot protect the vSphere Replication appliance itself with FT.
vSphere DRS Yes Replication continues at the defined RPO after resource redistribution is
finished.
vSphere Storage
DRS
Yes On the source site, Storage DRS can move the disk files of replicated virtual
machines with no impact on the ongoing replication.
On the target site, you must register the vSphere Replication appliance with the
vCenter Single Sign-On service to enable the communication between Storage
DRS and the vSphere Replication Management server. See Register the
vSphere Replication Appliance with vCenter Single Sign-On.
vSAN datastore Yes You can use vSAN datastores as the source and target datastore when
configuring replications.
Note vSAN is a fully supported feature of vSphere 5.5 Update 1 and later.
vSphere
Distributed Power
Management
Yes vSphere Replication coexists with DPM on the source site. vSphere Replication
does not perform any special DPM handling on the source site. You can disable
DPM on the target site to allow enough hosts as replication targets.
VMware vSphere Replication Administration
VMware, Inc. 18
Table 2‑1. Compatibility of vSphere Replication with Other vSphere Features (Continued)
vSphere Feature
Compatible with
vSphere Replication Description
VMware vSphere
Flash Read Cache
Yes You can protect virtual machines that contain disks that use VMware vSphere
Flash Read Cache storage. Since the host to which a virtual machine recovers
might not be configured for Flash Read Cache, vSphere Replication disables
Flash Read Cache on disks when it starts the virtual machines on the recovery
site. vSphere Replication sets the reservation to zero. Before performing a
recovery on a virtual machine that is configured to use vSphere Flash Read
Cache, take note of the virtual machine's cache reservation from the
vSphere Web Client. After the recovery, you can migrate the virtual machine to
a host with Flash Read Cache storage and restore the original Flash Read
Cache setting on the virtual machine manually.
vCloud APIs Not applicable No interaction with vSphere Replication.
vCenter
Chargeback
Not applicable No interaction with vSphere Replication
VMware Data
Recovery
Not applicable No interaction with vSphere Replication.
vSphere Replication Compatibility with Other Software
vSphere Replication is compatible with certain versions of ESXi, vCenter Server, Site Recovery Manager,
databases, and Web browsers.
vSphere Replication is compatible with the same versions as vCenter Server, except for ESXi:
vSphere Replication requires ESXi 5.0 or later. See the following documents for more information.
nCompatibility Matrices for vSphere Replication 8.1 at https://docs.vmware.com/en/vSphere-
Replication/8.1/rn/vsphere-replication-compat-matrix-8-1.html.
nFor vSphere Replication interoperability with backup software when using VSS, see
http://kb.vmware.com/kb/2040754.
nVMware Compatibility Guide at http://partnerweb.vmware.com/comp_guide2/search.php
nBrowser compatibility at vSphere Client and vSphere Web Client Software Requirements in vSphere
Installation and Setup.
Bandwidth Requirements for vSphere Replication
Before configuring replications, best practice is to determine the storage and network bandwidth
requirements for vSphere Replication to replicate virtual machines efficiently.
Storage and network bandwidth requirements can increase when using vSphere Replication. The
following factors play a role in the amount of network bandwidth vSphere Replication requires for an
efficient replication.
VMware vSphere Replication Administration
VMware, Inc. 19
Network Based Storage
Network bandwidth requirements increase if all storage is network-based because data operations
between the host and the storage also use network. When you plan your deployment, be aware of the
following levels of traffic:
nBetween the host running the replicated virtual machine and the vSphere Replication server.
nBetween the vSphere Replication server and a host with access to the replication target datastore.
nBetween the host and storage.
nBetween storage and the host during redo log snapshots.
Network-based storage is a concern when you are replicating virtual machines within a single vCenter
Server instance that shares the network for the levels of traffic listed. When you have two sites with a
vCenter Server instance on each site, the link speed between the two sites is the most important as it can
slow down replication traffic between the two sites.
Dataset Size
vSphere Replication might not replicate every virtual machine nor every VMDK file in the replicated virtual
machines. To evaluate the dataset size that vSphere Replication replicates, calculate the percentage of
the total storage used for virtual machines, then calculate the number of VMDKs within that subset that
you have configured for replication.
For example, you might have 2 TB of virtual machines on the datastores and usevSphere Replication to
replicate half of these virtual machines. You might only replicate a subset of the VMDKs and assuming all
the VMDKs are replicated, the maximum amount of data for replication is 1 TB.
Data Change Rate and Recovery Point Objective
The data change rate is affected by the recovery point objective (RPO). To estimate the size of the data
transfer for each replication, you must evaluate how many blocks change in a given RPO for a virtual
machine. The data change rate within the RPO period provides the total number of blocks that
vSphere Replication transfers. This number might vary throughout the day, which alters the traffic that
vSphere Replication generates at different times.
vSphere Replication transfers blocks based on the RPO schedule. If you set an RPO of one hour,
vSphere Replication transfers any block that has changed in that hour to meet that RPO.
vSphere Replication only transfers the block once in its current state at the moment that
vSphere Replication creates the bundle of blocks for transfer. vSphere Replication only registers that the
block has changed within the RPO period, not how many times it changed. The average daily data
change rate provides an estimation of how much data vSphere Replication transfers or how often the
transfers occur.
VMware vSphere Replication Administration
VMware, Inc. 20
If you use volume shadow copy service (VSS) to quiesce the virtual machine, replication traffic cannot be
spread out in small sets of bundles throughout the RPO period. Instead, vSphere Replication transfers all
the changed blocks as one set when the virtual machine is idle. Without VSS, vSphere Replication can
transfer smaller bundles of changed blocks on an ongoing basis as the blocks change, spreading the
traffic throughout the RPO period. The traffic changes if you use VSS and vSphere Replication handles
the replication schedule differently, leading to varying traffic patterns.
If you change the RPO, vSphere Replication transfers more or less data per replication to meet the new
RPO.
Link Speed
If you have to transfer an average replication bundle of 4 GB in a one hour period, you must examine the
link speed to determine if the RPO can be met. If you have a 10Mb link, under ideal conditions on a
completely dedicated link with little overhead, 4GB takes about an hour to transfer. Meeting the RPO
saturates a 10Mb WAN connection. The connection is saturated even under ideal conditions, with no
overhead or limiting factors such as retransmits, shared traffic, or excessive bursts of data change rates.
You can assume that only about 70% of a link is available for traffic replication. This means that on a
10Mb link you obtain a link speed of about 3GB per hour. On a 100Mb link, you obtain a speed of about
30GB per hour.
To calculate the bandwidth, see Calculate Bandwidth for vSphere Replication.
Calculate Bandwidth for vSphere Replication
To determine the bandwidth that vSphere Replication requires to replicate virtual machines efficiently, you
calculate the average data change rate within an RPO period divided by the link speed.
If you have groups of virtual machines that have different RPO periods, you can determine the replication
time for each group of virtual machines. For example, you might have four groups with RPO of 15
minutes, 1 hour, 4 hours, and 24 hours. Factor in all the different RPOs in the environment, the subset of
virtual machines in your environment that is replicated, the change rate of the data within that subset, the
amount of data changes within each configured RPO, and the link speeds in your network.
Prerequisites
Examine how data change rate, traffic rates, and the link speed meet the RPO. Then look at the
aggregate of each group.
Procedure
1Identify the average data change rate within the RPO by calculating the average change rate over a
longer period, then dividing it by the RPO.
2Calculate how much traffic this data change rate generates in each RPO period.
3Measure the traffic against your link speed.
For example, a data change rate of 100GB requires approximately 200 hours to replicate on a T1
network, 30 hours to replicate on a 10Mbps network, 3 hours on a 100Mbps network.
VMware vSphere Replication Administration
VMware, Inc. 21
Installing and Uninstalling
vSphere Replication 3
vSphere Replication uses the replication technologies included in ESXi with the assistance of virtual
appliances to replicate virtual machines between source and target sites.
Installing vSphere Replication
To use vSphere Replication, you must deploy the vSphere Replication appliance on an ESXi host by
using the vSphere Web Client.
The vSphere Replication appliance registers as an extension with the corresponding vCenter Server
instance. For example, on the source site, the vSphere Replication appliance registers with the
vCenter Server instance on the source site. Only one vSphere Replication appliance is allowed per
vCenter Server.
The vSphere Replication appliance contains an embedded vSphere Replication server that manages the
replication process. To meet the load balancing needs of your environment, you might need to deploy
additional vSphere Replication servers at each site. Additional vSphere Replication servers that you
deploy are themselves virtual appliances. You must register any additional vSphere Replication server
with the vSphere Replication appliance on the corresponding site.
The vSphere Replication appliance provides a virtual appliance management interface (VAMI). You can
use the VAMI to perform initial configuration and reconfigure the vSphere Replication database, network
settings, public-key certificates, and passwords for the appliances.
Uninstalling vSphere Replication
To uninstall vSphere Replication from your environment, you must unregister the appliance from the
vCenter Single Sign-On service and from the vCenter Server, and then delete the vSphere Replication
appliance.
If you delete the vSphere Replication appliance before unregistering it from the vCenter Single Sign-On
server and the vCenter Server, a special procedure must be performed to clean up your environment. For
more information, see Unregister vSphere Replication from vCenter Server If the Appliance Was Deleted.
This chapter includes the following topics:
nInstall vSphere Replication
nUninstall vSphere Replication
VMware, Inc. 22
nUnregister vSphere Replication from vCenter Server If the Appliance Was Deleted
Install vSphere Replication
The installation procedure of vSphere Replication involves several steps.
Procedure
1Prepare Your Environment to Install vSphere Replication
Before you deploy the vSphere Replication appliance, you must prepare the environment.
2Deploy the vSphere Replication Virtual Appliance
vSphere Replication is distributed as an OVF virtual appliance.
3Register the vSphere Replication Appliance with vCenter Single Sign-On
You must register the vSphere Replication Management Server with vCenter Single Sign-On on both
the source and the target sites.
4Configure vSphere Replication Connections
To use vSphere Replication between two sites managed by different vCenter Server instances, you
must configure a connection between the two vSphere Replication appliances.
Prepare Your Environment to Install vSphere Replication
Before you deploy the vSphere Replication appliance, you must prepare the environment.
Procedure
1Verify that you have vSphere and vSphere Web Client installations for the source and target sites.
2In the vSphere Web Client, select the vCenter Server instance on which you are deploying
vSphere Replication, click Configure > Settings > Advanced Settings, and verify that the
VirtualCenter.FQDN value is set to a fully qualified domain name or a literal address.
Note vSphere Replication can be deployed with either IPv4 or IPv6 address. Mixing IP addresses,
for example having a single appliance with an IPv4 and an IPv6 address, is not supported. To register
as an extension, vSphere Replication relies on the VirtualCenter.FQDN property of the
vCenter Server. When an IPv6 address is used for vSphere Replication, the VirtualCenter.FQDN
property must be set to a fully qualified domain name that can be resolved to an IPv6 address or to a
literal address. When operating with an IPv6 address, vSphere Replication requires that all
components in the environment, such as vCenter Server and ESXi hosts are accessible using the
IPv6 address.
3If you configure vSphere Replication in an IPv6 network, verify that the IPv6 address of the
vSphere Replication appliance, vCenter Server, the ESXi hosts, and an external database, if used,
are mapped to fully qualified domain names on the DNS server. Install the vSphere Replication
appliance by using FQDN and post installation, make sure that the VRM Host text box in the VAMI is
set to the FQDN of the vSphere Replication appliance. Do not use a static IPv6 address.
VMware vSphere Replication Administration
VMware, Inc. 23
What to do next
You can deploy the vSphere Replication appliance.
Deploy the vSphere Replication Virtual Appliance
vSphere Replication is distributed as an OVF virtual appliance.
You deploy the vSphere Replication appliance by using the standard vSphere OVF deployment wizard.
Important If you use the HTML5-based vSphere Client to deploy the OVF virtual appliance, the
deployment succeeds, but the vSphere Replication fails to start.
Note vSphere Replication can be deployed with either IPv4 or IPv6 address. Mixing IP addresses, for
example having a single appliance with an IPv4 and an IPv6 address, is not supported. To register as an
extension, vSphere Replication relies on the VirtualCenter.FQDN property of the vCenter Server. When
an IPv6 address is used for vSphere Replication, the VirtualCenter.FQDN property must be set to a
fully qualified domain name that can be resolved to an IPv6 address or to a literal address. When
operating with an IPv6 address, vSphere Replication requires that all components in the environment,
such as vCenter Server and ESXi hosts are accessible using the IPv6 address.
Prerequisites
Download the vSphere Replication ISO image and mount it on a system in your environment.
Procedure
1Log in to the vSphere Web Client on the source site.
2On the home page, select Hosts and Clusters.
3Right-click a host and select Deploy OVF template.
4Provide the location of the OVF file from which to deploy the vSphere Replication appliance, and click
Next.
nSelect URL and provide the URL to deploy the appliance from an online URL.
nIf you downloaded and mounted the vSphere Replication ISO image on a system in your
environment, select Local file > Browse and navigate to the \bin directory in the ISO image,
and select the vSphere_Replication_OVF10.ovf, vSphere_Replication-system.vmdk, and
vSphere_Replication-support.vmdk files.
5Accept the name, select or search for a destination folder or data center for the virtual appliance, and
click Next.
You can enter a new name for the virtual appliance. The name must be unique within each
vCenter Server virtual machine folder.
6Select a cluster, host, or resource pool where you want to run the deployed template, and click Next.
7Review the virtual appliance details and click Next.
VMware vSphere Replication Administration
VMware, Inc. 24
8Accept the end-user license agreements (EULA) and click Next.
9Select the number of vCPUs for the virtual appliance and click Next.
Note Selecting higher number of vCPUs ensures better performance of the vSphere Replication
Management Server, but might slow down the replications that run on ESXi host systems that have 4
or less cores per NUMA node. If you are unsure what the hosts in your environment are, select 2
vCPUs.
10 Select a destination datastore and disk format for the virtual appliance and click Next.
11 Select a network from the list of available networks, set the IP protocol and IP allocation, and click
Next.
vSphere Replication supports both DHCP and static IP addresses. You can also change network
settings by using the virtual appliance management interface (VAMI) after installation.
12 On the Customize template page, enter one or more NTP server host names or IP addresses.
13 Set the password for the root account for the customized template, and click Next.
The password must be at least eight characters long.
14 Review the settings and click Finish.
The vSphere Replication appliance is deployed.
15 Power on the vSphere Replication appliance. Take a note of the IP address of the appliance and log
out of the vSphere Web Client.
16 To deploy vSphere Replication on the target site, repeat the procedure.
What to do next
Register the vSphere Replication appliance with the vCenter Single Sign-On service.
Register the vSphere Replication Appliance with vCenter Single
Sign-On
You must register the vSphere Replication Management Server with vCenter Single Sign-On on both the
source and the target sites.
After you deploy the vSphere Replication appliance, you use the Virtual Appliance Management Interface
(VAMI) to register the endpoint and the certificate of the vSphere Replication Management Server with the
vCenter Lookup Service, and to register the vSphere Replication solution user with the vCenter Single
Sign-On administration server.
If you do not register vSphere Replication with vCenter Single Sign-On on the target site,
vSphere Replication cannot operate as expected. In addition, storage DRS does not detect the replicated
data that vSphere Replication stores on the target site and might destroy it.
Prerequisites
nVerify that the vSphere Replication appliance is powered on.
VMware vSphere Replication Administration
VMware, Inc. 25
nVerify that you have administrator privileges to configure the vSphere Replication appliance.
nVerify that the vSphere Replication management server is synchronized with the time of the Single
Sign-On server.
Procedure
1Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
2Enter the root user name and password for the appliance.
You configured the root password during the OVF deployment of the vSphere Replication appliance.
3On the VR tab, click Configuration.
4In the LookupService Address text box, enter the IP address or domain name of the server where
the lookup service runs.
5Enter the credentials of a user with administrator privileges to vCenter Single Sign-On.
Initially, only the user administrator@vsphere.local has these privileges.
6Click Save and Restart Service.
7To register vSphere Replication on the target site, repeat the procedure.
vSphere Replication appears on the Home tab in the vSphere Web Client.
What to do next
Note If you registered the vSphere Replication appliance with vCenter Single Sign-On as part of the
upgrade procedure, all existing connections will turn into Connection issue status. See Reconfigure the
Connection to a Remote Site.
If you competed this procedure as part of the installation process, you can configure connections between
the source and target sites.
Perform an optional reconfiguration of the vSphere Replication appliance by using the VAMI. You can
install a certificate, change the appliance root password, change the trust policy, or configure
vSphere Replication to use an external database.
States of vSphere Replication Displayed in the vSphere Web Client or
vSphere Client
You can see the vSphere Replication status on each vCenter Server in your environment and if
vSphere Replication does not function properly, find the appropriate remediation.
Before you can begin using vSphere Replication, you must register the vSphere Replication appliance
with the vCenter Lookup Service and the Single Sign-On administration server in the environment.
VMware vSphere Replication Administration
VMware, Inc. 26
After the registration, in the vSphere Web Client or vSphere Client, when you click Site Recovery, you
can see the list of vCenter Server instances in the Single-Sign On domain and the status of
vSphere Replication on each vCenter Server instance. If you have Site Recovery Manager deployed in
your environment, you can also see the status of Site Recovery Manager. You can change the
configuration of each vSphere Replication appliance by clicking the Configure icon next to the status
icon.
The following table lists the vSphere Replication states that you can observe, their meanings, and what
you can do to change a state back to normal.
Table 3‑1. vSphere Replication States on vCenter Server Instances
Status Description Remediation
Not installed The vSphere Replication extension is not
registered in the vCenter Server
Extension Manager.
The vSphere Replication appliance is
either not deployed or the
vSphere Replication extension has been
deleted from the vCenter Server
Extension Manager.
If a vSphere Replication appliance is
deployed on this vCenter Server, restart
the appliance or the vSphere Replication
Management service on the appliance.
1 Use a supported browser to log in to
the vSphere Replication VAMI as the
root user.
The URL for the VAMI is https://vr-
appliance-address:5480.
2 On the Configuration tab, click Save
and Restart Service.
Not configured A configuration error occurred.
The vSphere Replication Management
Server is either not registered with the
vCenter Single Sign-On components, or
the configuration is incorrect and must
be updated.
You cannot manage existing replications,
or configure new replications to this
server .
Configure the vSphere Replication
appliance.
1 Point to the Enabled
(Configuration issue) status.
The detailed error message appears
in a tooltip.
2 Click the Configure icon.
The vSphere Replication VAMI opens.
3 On the VR tab, click Configuration,
and enter the parameters indicated in
the error message.
4 Click Save and Restart Service .
Not compatible There is a vSphere Replication appliance
with earlier version than 8.0, registered
in the vCenter Server.
Install vSphere Replication 8.0 or later.
VMware vSphere Replication Administration
VMware, Inc. 27
Table 3‑1. vSphere Replication States on vCenter Server Instances (Continued)
Status Description Remediation
Not accessible The vSphere Replication Management
Server is not accessible.
The vSphere Replication extension is
registered in the vCenter Server
Extension Manager, but the
vSphere Replication appliance is missing
or powered off, or the
vSphere Replication Management
service is not running.
You cannot manage existing replications,
or configure new replications to this
server .
nVerify that the vSphere Replication
appliance exists on the vCenter
Server.
nVerify that the vSphere Replication
appliance is powered on.
nRestart the VRM service.
a Click the Configure icon.
b On the VR tab, click
Configuration and restart the
VRM service.
OK The vSphere Replication appliance is
installed, configured, and functioning
properly.
Not needed.
Configure vSphere Replication Connections
To use vSphere Replication between two sites managed by different vCenter Server instances, you must
configure a connection between the two vSphere Replication appliances.
If the source and target vCenter Server instances use the same vCenter Single Sign-On domain, the
connection is considered local. vSphere Replication uses the vCenter Single Sign-On service on the local
site to authenticate with each vCenter Server in the vCenter Single Sign-On domain.
If the source and the target vCenter Server instances use different vCenter Single Sign-On domains, the
connection is considered remote. The vSphere Replication Management Server on the source site
registers with the Platform Services Controller of the remote vCenter Single Sign-On domain.
You can use vSphere Replication to replicate virtual machines between ESXi hosts that the same
vCenter Server manages. In this case, you deploy only one vSphere Replication appliance and do not
need to connect the local and remote sites.
You can configure a connection on either site on which you have installed a vSphere Replication
appliance. If you are using an untrusted certificate, certificate warnings might appear during the process.
You can also set up a connection between two sites while you configure a replication between them.
Prerequisites
nVerify that you have installed vSphere Replication at the local and remote sites.
nIf you plan to configure a remote connection, obtain the IP address or domain name of the server
where the PSC runs. The address appears in the LookupService Address text box on the
Configuration tab under VR in the vSphere Replication VAMI on the remote site.
Procedure
1On the home page, click Site Recovery and click Open Site Recovery.
VMware vSphere Replication Administration
VMware, Inc. 28
2On the Site Recovery home page, click the New Site Pair button.
3Select the first site from the list.
4Enter the address of the Platform Services Controller for the vSphere Replication Management
Server on the second site, provide the user name and password, and click Next.
5Select the vCenter Server and the services you want to pair, and click Next.
6On the Ready to complete page, review the pairing settings, and click Finish.
The local and the remote sites are connected. The pair appears under on the home page of the
Site Recovery user interface.
vSphere Replication Site Connection States
You can view the states of the connections to target sites in the Site Recovery user interface.
The following table lists the states that you can observe, their meanings, and what you can do to change
a state back to normal. You can view the states by clicking View Details for a site pair in the
Site Recovery user interface.
Table 3‑2. Replication Server Connection States
Icon Status Description Remediation
Connected The connection between the
local and remote
vSphere Replication
management servers is
working properly.
Not needed.
Not Connected nThe SSL certificate on the
local or remote
vSphere Replication
Management Server has
been changed.
nThe network connection
between the local and
remote
vSphere Replication
Management Servers is
not functioning properly or
one of the servers is
offline.
nThe user that is used for
authentication with the
Lookup Service or the
VRMS extension user in
the vCenter Single Sign-
On might be disabled or
deleted.
In this state, configured
replications might not be
running.
nTo reconfigure the site
connection, click
Reconfigure Site Pair.
nIn the vSphere Client or
vSphere Web Client,
navigate to the
vCenter Server, select the
Monitor tab, and select
Events under Tasks and
Events to search for
events related to
vSphere Replication.
nVerify the status of the
remote
vSphere Replication
appliances in the
Site Recovery plug-in for
vSphere Client or
vSphere Web Client.
VMware vSphere Replication Administration
VMware, Inc. 29
Reconfigure the Connection to a Remote Site
If the state of the connection to a target site is Not connected, you must repair the connection to
manage existing replications, and to enable the creation of new replications.
The states of connections to target sites appear in the Site Recovery user interface.
For reconnecting to cloud sites, see topic Reconnect to a Cloud Provider Site in the vSphere Replication
for Disaster Recovery to Cloud documentation.
If the source and the target vCenter Server instances use different vCenter Single Sign-On domains, the
connection is considered remote. The vSphere Replication Management Server on the source site
registers with the Platform Services Controller of the remote vCenter Single Sign-On domain. To establish
a connection to a remote site, you provide the address of the vCenter Server and the
Platform Services Controller, and enter the credentials of a user that has the VRM remote.VRM
Server.Manage VRM privilege assigned. If the Platform Services Controller address changes or there is
a change in the certificate, the connection status changes to Not connected and you must reconnect the
two sites.
Note You cannot use the Reconfigure Site Pair action to add a missing pairing or a pairing that was
manually broken with Break Site Pair. If your site pair is missing a pairing, you must use New Site Pair
to configure it.
Prerequisites
Verify that the vCenter Server and the vSphere Replication Management Server on the local site are up
and running, and that the Not connected status is not caused by a network problem.
Procedure
1Log in to the vSphere Client or vSphere Web Client.
2On the home page, click Site Recovery and click Open Site Recovery.
3On the Site Recovery home page, select a site pair and click View Details.
4From the list of target sites, select the connection that indicates Not connected status.
5Click the Reconfigure Site Pair button.
The Reconfigure Site Pair wizard starts.
6Enter the PSC address and the credentials of a user that has the VRM remote.Manage VRM
privilege assigned, and click Next.
Note If you upgraded from an earlier vSphere Replication version, the text box for the
Platform Services Controller address may be automatically populated with the IP address of the
target vSphere Replication Management server. In this case, you must replace it with the address of
the Platform Services Controller on the target site before providing the credentials.
VMware vSphere Replication Administration
VMware, Inc. 30
7Select a vCenter Server on the second site, select vSphere Replication from the list of services, and
click Next.
8Review the settings and click Finish.
The connection status changes to Connected.
Uninstall vSphere Replication
You uninstall vSphere Replication by unregistering the appliance from vCenter Server and removing it
from your environment.
Prerequisites
nVerify that the vSphere Replication appliance is powered on.
nStop all existing forward or reverse replications to the site.
nDisconnect any connections to other vSphere Replication sites.
Procedure
1Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
2On the VR tab, click Configuration.
3Click Unregister VRMS.
4In the vSphere Web Client, power off and delete the vSphere Replication appliance.
The Site Recovery plug-in is uninstalled automatically.
You removed vSphere Replication from your environment.
What to do next
Note If a vSphere Replication appliance is deleted before all replications that it manages are stopped,
target datastores remain tagged with the com.vmware.vr.HasVrDisks tag. If a target datastore that is
tagged with com.vmware.vr.HasVrDisks is part of a datastore cluster where Storage DRS is enabled,
some operations, like Enter maintenance mode, might not succeed when the vSphere Replication
Management server is missing. To prevent errors, you must remove the tags from all target datastores
that were used for replications by the deleted vSphere Replication appliance. See Search and Remove
the vSphere Replication Tag from Target Datastores.
Search and Remove the vSphere Replication Tag from Target
Datastores
If a vSphere Replication appliance is deleted before all replications that it manages are stopped, target
datastores remain tagged with the com.vmware.vr.HasVrDisks tag.
VMware vSphere Replication Administration
VMware, Inc. 31
If a target datastore that is tagged with com.vmware.vr.HasVrDisks is part of a datastore cluster where
Storage DRS is enabled, some operations, like Enter maintenance mode, might not succeed when the
vSphere Replication Management server is missing.
Prerequisites
nThe vSphere Replication appliance is deleted.
nRequired privilege: Inventory Service.vSphere Tagging.Assign or Unassign vSphere Tag on the
root vCenter Server instance.
Procedure
1Use the vSphere Web Client to log in to the target vCenter Server.
2In the search text box on the upper right, enter com.vmware.vr.HasVrDisks and search for the tag.
The list of users and groups that have permissions to manage the com.vmware.vr.HasVrDisks tag
appears.
3Click the Related Objects tab.
The list of datastores that have the com.vmware.vr.HasVrDisks tag assigned appears.
4Right-click a datastore and select Tags > Remove Tag.
5In the Remove Tag dialog box, select the row that contains com.vmware.vr.HasVrDisks and click
Remove.
6Repeat steps 4 and 5 for all datastores that are assigned the com.vmware.vr.HasVrDisks tag.
Unregister vSphere Replication from vCenter Server If the
Appliance Was Deleted
If the vSphere Replication appliance was deleted before you unregistered it from the environment , you
cannot use the virtual appliance management interface (VAMI) to unregister vSphere Replication from
vCenter Server.
Only a vSphere administrator can clean up the environment.
The procedures on removing the permissions for a solution user and on removing a solution user from the
vCenter Single Sign-On domain are documented in the vSphere 6.5 Security document. See topics
Remove Permissions and Delete vCenter Single Sign-On Solution Users.
Prerequisites
Verify that you know the credentials of a vSphere administrator.
Procedure
1Log in to https://<vCenter_Server_address>/mob/?moid=ExtensionManager with
vCenter Server credentials.
VMware vSphere Replication Administration
VMware, Inc. 32
2In the extensionList property, click the link for the com.vmware.vcHms extension key to check the key
details.
3Verify that the displayed data is for a vSphere Replication appliance that is already lost.
4In ExtensionManager, click unregisterExtension.
5Enter com.vmware.vcHms for the extension key value, and click Invoke Method.
6Verify that the result displays void and not an error message.
An error message might appear if the specified extension is not registered, or if an unexpected
runtime error occurs.
7Close the window.
8Refresh the ExtensionManager page and verify that the extensionList entry does not include
com.vmware.vcHms.
9Remove the permissions for the HMS solution user from all vCenter Server instances in the Single
Sign-On domain.
10 Remove the HMS solution user from the vCenter Single Sign-On domain.
What to do next
You can deploy a new vSphere Replication appliance.
Note If a vSphere Replication appliance is deleted before all replications that it manages are stopped,
target datastores remain tagged with the com.vmware.vr.HasVrDisks tag. If a target datastore that is
tagged with com.vmware.vr.HasVrDisks is part of a datastore cluster where Storage DRS is enabled,
some operations, like Enter maintenance mode, might not succeed when the vSphere Replication
Management server is missing. To prevent errors, you must remove the tags from all target datastores
that were used for replications by the deleted vSphere Replication appliance. See Search and Remove
the vSphere Replication Tag from Target Datastores.
VMware vSphere Replication Administration
VMware, Inc. 33
Configuring the Customer
Experience Improvement
Program 4
When you choose to participate in the Customer Experience Improvement Program (CEIP), VMware
receives anonymous information to improve the quality, reliability, and functionality of VMware products
and services.
This chapter includes the following topics:
nCategories of Information That VMware Receives
nJoin or Leave the Customer Experience Improvement Program in the vSphere Web Client
Categories of Information That VMware Receives
This product participates in the VMware Customer Experience Improvement Program (CEIP).
Details regarding the data collected by CEIP and the purposes for which it is used by VMware are
available at the Trust & Assurance Center at http://www.vmware.com/trustvmware/ceip.html.
To join or leave the CEIP for this product, see Join or Leave the Customer Experience Improvement
Program in the vSphere Web Client.
Join or Leave the Customer Experience Improvement
Program in the vSphere Web Client
You can choose to join the Customer Experience Improvement Program (CEIP), or leave the CEIP at any
time.
Prerequisites
Verify that you are a member of the Administrators@vsphere.local group.
Procedure
1Log in to the vCenter Server instance as a member of Administrators@vsphere.local by using the
vSphere Web Client.
2On the vSphere Web Client Home page, under Administration, click Customer Experience
Improvement Program.
3Click Join to enable the CEIP or Leave to disable the CEIP.
VMware, Inc. 34
Isolating the Network Trac of
vSphere Replication 5
You can isolate the network traffic of vSphere Replication from all other traffic in a data center's network.
Isolating the replication traffic helps you ensure that sensitive information is not routed to the wrong
destination, and helps you enhance the network performance in the data center, because the traffic that
vSphere Replication generates does not impact other types of traffic. You isolate the network traffic to the
vSphere Replication Server by dedicating a VMKernel NIC on each ESXi host on the primary site that
sends data to the vSphere Replication Server. See Set Up a VMkernel Adapter for vSphere Replication
Traffic on a Source Host.
If you are using a distributed network switch, you can take advantage of the vSphere Network I/O Control
feature to set limits or shares for incoming and outgoing replication traffic on each ESXi host. The feature
allows you to manage the network resources that vSphere Replication uses.
By default, the vSphere Replication appliance has one VM network adapter that is used for various traffic
types.
nManagement traffic between vSphere Replication Management Server and vSphere Replication
Server.
nReplication traffic from the source ESXi hosts to the vSphere Replication Server.
nTraffic between vCenter Server and vSphere Replication Management Server.
You can add network adapters to the vSphere Replication appliance and use the VAMI to configure a
separate IP address to use for each traffic type.
In the combined vSphere Replication appliance, the IP address that is used for management traffic
between the vSphere Replication Management Server and vSphere Replication Server is localhost
127.0.0.1. Therefore, you do not need to add network adapters for this type of traffic.
When the vSphere Replication Management Server and the vSphere Replication Server run on separate
appliances, you can specify a non-localhost IP address to be used by the vSphere Replication
Management Server.
Note After the IP address of the vSphere Replication server on the target site changes, you must
manually reconfigure replications on the source site to point to the new IP address.
In addition you must configure static routes on each ESXi host at the source site with how to
communicate with the target site and the reverse. See http://kb.vmware.com/kb/2001426. For replications
to flow in the opposite direction, you must configure reverse routes on the target site ESXi hosts.
VMware, Inc. 35
This chapter includes the following topics:
nSet Up a VMkernel Adapter for vSphere Replication Traffic on a Source Host
nSet Up a VMkernel Adapter for vSphere Replication Traffic on a Target Host
nCreate a VM Network Adapter to Use for Incoming Replication Traffic on the Combined vSphere
Replication Appliance
nCreate VM Network Adapters to Isolate the Network Traffic of a vSphere Replication Server
Set Up a VMkernel Adapter for vSphere Replication
Trac on a Source Host
You create VMkernel adapters to isolate the outgoing replication traffic on source ESXi hosts.
Note One VMkernel adapter must handle one traffic type.
Perform this procedure for every ESXi host that is used as a replication source, and for which you want to
isolate the replication traffic.
Prerequisites
nVerify that the vSphere Replication virtual appliance is deployed and registered with the
vCenter Server.
nVerify that the ESXi host is version 6.0 or later.
nFor distributed network switches, verify that you have a port group that you can dedicate to the new
VMkernel adapter.
Procedure
1In the vSphere Web Client, navigate to the ESXi host.
2Click the Configure tab and under Networking, select VMkernel adapters.
3Click the Add host networking icon .
The Add Networking wizard opens.
4On the Select connection type page, select VMkernel Network Adapter and click Next.
5On the Select target device page, select a port group or a standard switch and click Next.
6On the Port properties page, under VMkernel port settings, configure the IP settings and TCP/IP
stack to comply with your environment.
Note vSphere Replication requires that all components in your environment, such as
vCenter Server, ESXi hosts, and the vSphere Replication appliance use the same IP version, IPv4 or
IPv6.
7Under Available services, select vSphere Replication and click Next.
VMware vSphere Replication Administration
VMware, Inc. 36
8Apply the IP settings, click Next, and Finish to complete the wizard.
The VMkernel adapter that you created for outgoing vSphere Replication traffic appears in the list of
adapters. The outgoing replication data from the ESXi host is sent to the vSphere Replication server
through this adapter.
What to do next
You can add a vNIC to the vSphere Replication appliance and use the VAMI to configure an IP address to
use for incoming replication data.
Set Up a VMkernel Adapter for vSphere Replication
Trac on a Target Host
You create VMkernel adapters to isolate the incoming replication traffic on target ESXi hosts.
Note One VMkernel adapter must handle one traffic type.
Perform this procedure for every ESXi host that is used as replication target, and for which you want to
isolate the replication traffic.
Prerequisites
nVerify that the ESXi host is version 6.0 or later.
nFor distributed network switches, verify that you have a port group that you can dedicate to the new
VMkernel adapter.
Procedure
1In the vSphere Web Client, navigate to the ESXi host.
2Click the Configure tab and under Networking, select VMkernel adapters.
3Click the Add host networking icon .
The Add Networking wizard opens.
4On the Select connection type page, select VMkernel Network Adapter and click Next.
5On the Select target device page, select a port group or a standard switch and click Next.
6On the Port properties page, under VMkernel port settings, configure the IP settings and TCP/IP
stack to comply with your environment.
Note vSphere Replication requires that all components in your environment, such as
vCenter Server, ESXi hosts, and the vSphere Replication appliance use the same IP version, IPv4 or
IPv6.
7Under Available services, select vSphere Replication NFC traffic and click Next.
8Apply the IP settings, click Next, and Finish to complete the wizard.
VMware vSphere Replication Administration
VMware, Inc. 37
The VMkernel adapter that you tagged for NFC traffic appears in the list of adapters. The
vSphere Replication Server routes the replication data to the adapter, and the ESXi host saves the data
to a datastore.
Create a VM Network Adapter to Use for Incoming
Replication Trac on the Combined vSphere Replication
Appliance
By default, the combined vSphere Replication appliance has one VM network adapter that is used by the
vSphere Replication server for replication traffic, and by the vCenter Server for virtual machine
management.
The IP address that is used for vSphere Replication management traffic is localhost 127.0.0.1. Because
the default VM network adapter is used for different types of traffic, you can add a second adapter to the
appliance, and configure vSphere Replication to use the second adapter only for incoming replication
traffic.
Prerequisites
nVerify that the vSphere Replication virtual appliance is deployed and registered with the
vCenter Server.
nMake a note of the IP address of the VM network adapter.
Procedure
1Power off the vSphere Replication appliance and edit the VM Hardware settings to add a new VM
NIC.
a Right-click the VM and select Edit Settings.
b From the New Device drop-down menu at the bottom of the Virtual Hardware tab, select
Network, and click Add.
The new network adapter appears in the list of devices at the right.
c Expand the properties of the new network adapter to verify that Connect At Power On is
selected.
You can assign a static MAC address or leave the text box empty to obtain an IP address
automatically.
d Click OK to close the Edit Setting dialog box.
2Power on the vSphere Replication appliance.
3From the Summary tab of the vSphere Replication appliance, take a note of the IP address of the
new network adapter.
You can click View all XX IP addresses to check the IP address of the new NIC.
4Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
VMware vSphere Replication Administration
VMware, Inc. 38
5On the VR tab, click Configuration.
6In the IP Address for Incoming Storage Traffic text box, enter the IP address of the new network
adapter that you added.
7Click Apply Network Settings.
The vSphere Replication appliance uses the IP address that you assigned only for incoming replication
traffic.
Create VM Network Adapters to Isolate the Network
Trac of a vSphere Replication Server
By default, the vSphere Replication Server appliance has one VM network adapter that is used by the
vSphere Replication Server for management and replication traffic.
Because the default VM network adapter is used for different types of traffic, you can add network
adapters to the appliance, and configure vSphere Replication to use a separate adapter for each traffic
type.
Prerequisites
Verify that you have deployed the vSphere Replication Server appliance in your environment and that it is
registered as a vSphere Replication Server in the vSphere Web Client.
Procedure
1Power off the vSphere Replication appliance and edit the VM Hardware settings to add a new VM
NIC.
a Right-click the VM and select Edit Settings.
b From the New Device drop-down menu at the bottom of the Virtual Hardware tab, select
Network, and click Add.
The new network adapter appears in the list of devices at the right.
c Expand the properties of the new network adapter to verify that Connect At Power On is
selected.
You can assign a static MAC address or leave the text box empty to obtain an IP address
automatically.
d Click OK to close the Edit Setting dialog box.
2Repeat Step 1 to add another VM NIC.
3Power on the vSphere Replication appliance.
4From the Summary tab of the vSphere Replication appliance, take note of the IP address of the new
network adapters.
You can click View all XX IP addresses to check the IP addresses of the new NICs.
VMware vSphere Replication Administration
VMware, Inc. 39
5Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
6On the VRS tab, click Configuration.
7Enter the IP addresses of the new VM NICs that you want to use to isolate the network traffic of
vSphere Replication.
Option Description
IP Address for Incoming Storage
Traffic
The IP address to be used by the vSphere Replication Server for incoming
replication data.
IP Address for VRMS Management
Traffic
The IP address to be used by the vSphere Replication Management Server to
manage the vSphere Replication Server.
8Click Apply Network Settings.
The different types of traffic that vSphere Replication generates are handled by separate NICs.
VMware vSphere Replication Administration
VMware, Inc. 40
Deploying Additional
vSphere Replication Servers 6
Depending on replication traffic, you might need to deploy one or more additional vSphere Replication
servers.
This chapter includes the following topics:
nDeploy an Additional vSphere Replication Server
nRegister an Additional vSphere Replication Server
nReplication Server Connection States
nReconfigure vSphere Replication Server Settings
nUnregister and Remove A vSphere Replication Server
nDisable the Embedded vSphere Replication Server
Deploy an Additional vSphere Replication Server
The vSphere Replication appliance includes a vSphere Replication server. However, you might need to
deploy multiple vSphere Replication servers to meet your load balancing needs.
You can deploy multiple vSphere Replication servers to route traffic from source hosts to target
datastores without traveling between different sites managed by the same vCenter Server.
Important If you use the HTML5-based vSphere Client to deploy the OVF virtual appliance, the
deployment succeeds, but the vSphere Replication fails to start.
For information about the loads that a vSphere Replication management server and a
vSphere Replication server can support, see http://kb.vmware.com/s/article/2102453.
Prerequisites
nDeploy vSphere Replication appliances on the source and target sites.
nDeploy vSphere Replication servers on a network that allows them to communicate with the
vSphere Replication appliances on the source and target sites.
nVerify that the vSphere Replication servers can communicate with the ESXi Server instances on the
source site that hosts the replicated virtual machines.
VMware, Inc. 41
Procedure
1Log in to the vSphere Web Client on the site where you want to deploy the additional
vSphere Replication server.
2On the home page, select Hosts and Clusters.
3Right-click on a data center, host or cluster, and select Deploy OVF Template.
4Provide the location of the OVF file from which to deploy the additional vSphere Replication server,
and click Next.
nSelect URL and provide the URL to deploy the appliance from an online URL.
nIf you downloaded and mounted the vSphere Replication ISO image on a system in your
environment, select Local file > Browse and navigate to the \bin directory in the ISO image,
and select the vSphere_Replication_AddOn_OVF10.ovf, vSphere_Replication-
system.vmdk, and vSphere_Replication-support.vmdk files.
5Accept the name, select or search for a destination folder or data center for the virtual appliance, and
click Next.
You can enter a new name for the virtual appliance. The name must be unique within each
vCenter Server virtual machine folder.
6Select a cluster, host, or resource pool where you want to run the deployed template, and click Next.
7Review the virtual appliance details and click Next.
8Select a destination datastore and disk format for the virtual appliance and click Next.
9Set the network properties. Select DHCP or set a static IP address.
You can change network settings after deployment in the VAMI.
10 Enter a password for the appliance that is at least eight characters long.
11 Review your settings and click Finish.
12 Power on the vSphere Replication appliance.
What to do next
When the OVF file has deployed, register the vSphere Replication server with the vSphere Replication
appliance.
Register an Additional vSphere Replication Server
If you deploy additional vSphere Replication servers, you must register these servers with the
vSphere Replication appliance to enable them as traffic handlers at the recovery site.
Note You can register additional vSphere Replication servers that run within the same vSphere
environment.
VMware vSphere Replication Administration
VMware, Inc. 42
Prerequisites
nVerify that the vSphere Replication appliance is deployed and configured.
nVerify that an additional vSphere Replication Server is deployed.
Procedure
1Log in to the vSphere Client or vSphere Web Client.
2On the home page, click Site Recovery and click Open Site Recovery.
3On the Site Recovery home page, select a site pair and click View Details.
4On the Site Pair tab, select Configure > Replication Servers.
5Click the Register icon.
6From the list, select a virtual machine that is a working vSphere Replication server and click Select.
The newly registered vSphere Replication server appears in the list of vSphere Replication servers.
Replication Server Connection States
You can view the states of the connections with the replication servers and determine if they need a
remediation.
The following table lists the states that you can observe, their meanings, and what you can do to change
a state back to normal.
Table 6‑1. Replication Server Connection States
Icon Status Description Remediation
Connected The connection between the
source replication server and
the target replication server is
working properly.
Not needed.
Disconnected The SSL certificate on the
remote replication server has
been changed.
nClick the Reconnect icon.
nVerify that the replication
server has network
connectivity.
Reconfigure vSphere Replication Server Settings
The vSphere Replication appliance contains a vSphere Replication server. If you deploy additional
vSphere Replication servers, the server settings are established during deployment. You can modify the
settings after you deploy the server.
A vSphere Replication server does not require additional configuration through the virtual appliance
management interface (VAMI) after deployment. To increase security, you can change the root password
of the vSphere Replication server and install a new certificate. Using a self-signed certificate provides the
benefit of public-key based encryption and authentication, although using such a certificate does not
provide the level of assurance offered when you use a certificate signed by a certificate authority.
VMware vSphere Replication Administration
VMware, Inc. 43
You can also reconfigure the network settings for the vSphere Replication server virtual appliance.
Note vSphere Replication can be deployed with either IPv4 or IPv6 address. Mixing IP addresses, for
example having a single appliance with an IPv4 and an IPv6 address, is not supported. To register as an
extension, vSphere Replication relies on the VirtualCenter.FQDN property of the vCenter Server. When
an IPv6 address is used for vSphere Replication, the VirtualCenter.FQDN property must be set to a
fully qualified domain name that can be resolved to an IPv6 address or to a literal address. When
operating with an IPv6 address, vSphere Replication requires that all components in the environment,
such as vCenter Server and ESXi hosts are accessible using the IPv6 address.
Prerequisites
You deployed an optional vSphere Replication server in addition to the vSphere Replication appliance,
and the server is powered on.
Procedure
1Use a supported browser to log in to the VAMI of the additional vSphere Replication Server that you
deployed.
The URL for the VAMI is https://vr-server-address:5480.
Use the root password that you set when you deployed the vSphere Replication server.
2Click the VRS tab.
3(Optional) Click Configuration to generate or upload a new certificate.
Option Action
Generate and install a self-signed
certificate
Click Generate and Install.
Upload an existing SSL certificate Click Choose File next to the Upload PKCS#12 (*.pfx) file text box to browse for
an existing certificate, and click Upload and Install.
4(Optional) Click Security to change the Super User password for the vSphere Replication server.
root is the Super User.
5(Optional) Click the Network tab to change the network settings.
Option Action
View current network settings Click Status.
Set static or DHCP IPv4 or IPv6
addresses
nClick Address, and select DHCP, Static, or None for IPv4 addresses.
nSelect Auto, DHCP, or Static for IPv6 addresses. If you select Static, enter
the default gateway and DNS server addresses to use.
VMware vSphere Replication Administration
VMware, Inc. 44
Option Action
Configure proxy server Click Proxy, select the Use a proxy server check box, and enter the proxy
server address and port number.
Save Settings If you do not click Save Settings, changes are discarded.
Note After the IP address of the vSphere Replication server on the target site changes, you must
manually reconfigure replications on the source site to point to the new IP address.
6(Optional) Select VRS > Configuration > Restart to restart the vSphere Replication service.
7(Optional) Select the System tab and click Reboot to reboot the vSphere Replication server
appliance.
Unregister and Remove A vSphere Replication Server
If you deployed additional vSphere Replication server instances that you no longer require, you must
unregister them from the vSphere Replication appliance before you delete them.
Prerequisites
Verify that the vSphere Replication server that you want to unregister does not serve any replications,
otherwise the operations will fail.
Procedure
1On the Site Recovery home page, select a site pair and click View Details.
2On the Site Pair tab, select Replication Servers and find the vSphere Replication server in the list.
If you have both vSphere Replication and Site Recovery Manager installed, Replication Servers is
located on the Site Pair tab, under Configure.
3Select the server and click the Unregister icon.
4In the Hosts and Clusters view of the vSphere Client, power off and delete the vSphere Replication
server virtual machine.
Disable the Embedded vSphere Replication Server
The vSphere Replication appliance includes an embedded vSphere Replication Server by default. If you
want to disable the embedded vSphere Replication server, you can do so using ssh.
Prerequisites
Make sure that no replications are using the embedded server. Stop the replications or move them to a
different server.
VMware vSphere Replication Administration
VMware, Inc. 45
Procedure
1Use SSH into the vSphere Replication appliance and enter:
# /opt/vmware/hms/bin/hms-configtool -cmd reconfig -property hms-embedded-hbr=false
2Restart the HMS service.
# service hms restart
You can now unregister the embedded vSphere Replication server from the vSphere Replication user
interface.
What to do next
Rebooting vSphere Replication does not automatically register the embedded server. To restore the
default behavior to register automatically the embedded vSphere Replication server, enter:
# /opt/vmware/hms/bin/hms-configtool -cmd reconfig -property hms-embedded-hbr=true
# service hms restart
VMware vSphere Replication Administration
VMware, Inc. 46
Upgrading vSphere Replication 7
You upgrade the vSphere Replication appliance and any additional vSphere Replication servers by using
a downloaded ISO image.
The downloadable ISO image is the only means of upgrading from vSphere Replication 6.1.2 or 6.5.1 to
vSphere Replication 8.1. You cannot upgrade vSphere Replication from version 6.1.2 or 6.5.1 to version
8.1 by using vSphere Update Manager or the virtual appliance management interface (VAMI) of the
vSphere Replication appliance. After you have installed vSphere Replication 8.1 or upgraded to version
8.1 by using the ISO image, you can use the VAMI or Update Manager to install later 8.1.x update
releases.
After you upgrade vSphere Replication to version 8.1, you can no longer use the old vSphere Replication
plug-in to manage the updated vSphere Replication sites. You must use the new standalone
vSphere Replication user interface and plug-in instead.
You cannot downgrade to an earlier version of vSphere Replication.
Example: vSphere Replication Upgrade Scenarios
You use the ISO file to upgrade to a major version of vSphere Replication, for example from 6.1.2 or 6.5.1
to 8.1.
You use Update Manager, the VAMI, or the ISO file to install an update release of vSphere Replication,
for example upgrade 5.5.0 to 5.5.1.
These examples of upgrade and update scenarios are not exhaustive. For the full list of supported
upgrade paths, see the Compatibility Matrices for vSphere Replication 8.1 at
https://docs.vmware.com/en/vSphere-Replication/8.1/rn/vsphere-replication-compat-matrix-8-1.html.
nYou can upgrade vSphere Replication 6.1.2 or 6.5.1 to 8.1 by using the ISO file for
vSphere Replication 8.1.
nYou cannot upgrade vSphere Replication 6.1.2 or 6.5.1 to 8.1 by using Update Manager or the VAMI.
nYou can upgrade vSphere Replication 5.5.0 to 5.5.1 by using Update Manager, the VAMI, or the ISO
file.
VMware, Inc. 47
This chapter includes the following topics:
nOrder of Upgrading vSphere and vSphere Replication Components
nUpgrade Additional vSphere Replication Servers
nUpgrade the vSphere Replication Appliance
nUpgrade vSphere Replication 8.0 to Version 8.1
nUpdate the vCenter Server IP Address in the vSphere Replication Management Server
Order of Upgrading vSphere and vSphere Replication
Components
To upgrade vSphere Replication, you must upgrade certain components of your vSphere environment in
the correct order.
Upgrade the components on the protected site before you upgrade the components on the recovery site.
If you encounter problems that prevent you from using the protected site when you upgrade the protected
site, you can use the recovery site to perform a recovery. The ESXi hosts can be upgraded at any time.
1 Upgrade all components of vCenter Server on the protected site.
2 Upgrade any additional vSphere Replication server deployments on the protected site.
3 Upgrade the vSphere Replication appliance on the protected site.
4 Upgrade all components of vCenter Server on the recovery site.
5 Upgrade any additional vSphere Replication server deployments on the recovery site.
6 Upgrade the vSphere Replication appliance on the recovery site.
7 Upgrade the ESXi host on the recovery site.
8 Upgrade the ESXi host on the protected site.
9 Upgrade VMware Tools for the replicated VMs.
Upgrade Additional vSphere Replication Servers
You upgrade the additional vSphere Replication servers by using a downloadable ISO image.
You must deploy your additional vSphere Replication servers before the vSphere Replication
Management Server. If you deploy the vSphere Replication Management Server before the additional
servers, you must restart the management server after you complete the upgrade procedure of the
additional servers.
Important If you use the HTML5-based vSphere Client to deploy the OVF virtual appliance, the
deployment succeeds, but the vSphere Replication fails to start.
VMware vSphere Replication Administration
VMware, Inc. 48
Prerequisites
nDownload the VMware-vSphere_Replication-8.1.x.x-build_number.iso image from the
vSphere Downloads page. Copy the ISO image file to a datastore that is accessible from the
vCenter Server instance that you use with vSphere Replication.
nIf the vSphere Replication version that you run is not supported for direct upgrade to
vSphere Replication 8.1, upgrade your vSphere Replication instance to a supported version. For
example, to upgrade vSphere Replication 6.0 to 8.1, you must first upgrade 6.0 to 6.1.2, and then
upgrade 6.1.2 to 8.1. See the interoperability matrix at
http://www.vmware.com/resources/compatibility/sim/interop_matrix.php for solution upgrade paths for
vSphere Replication.
Procedure
1Log in to the vSphere Web Client on the site where you want to upgrade vSphere Replication.
2On the home page, select Hosts and Clusters.
3Right-click on a data center, host or cluster, and select Deploy OVF Template.
4Provide the location of the OVF file from which to deploy the vSphere Replication server, and click
Next.
nSelect URL and provide the URL to deploy the appliance from an online URL.
nIf you downloaded and mounted the vSphere Replication ISO image on a system in your
environment, select Local file > Browse and navigate to the \bin directory in the ISO image,
and select the vSphere_Replication_Migrate_AddOn_OVF10.ovf, vSphere_Replication-
system.vmdk, and vSphere_Replication-support.vmdk files.
5Accept the name, select or search for a destination folder or data center for the virtual appliance, and
click Next.
You can enter a new name for the virtual appliance. The name must be unique within each
vCenter Server virtual machine folder.
6Select a cluster, host, or resource pool where you want to run the deployed template, and click Next.
7Review the virtual appliance details and click Next.
8Select a destination datastore and disk format for the virtual appliance and click Next.
9Select a network from the list of available networks, set the IP protocol and IP allocation, and click
Next.
vSphere Replication supports both DHCP and static IP addresses. You can also change network
settings by using the virtual appliance management interface (VAMI) after installation.
10 Set the password for the root account for the customized template, and click Next.
11 Review the binding to the vCenter Extension vService and click Next.
12 Review the settings and click Finish.
The vSphere Replication appliance is deployed.
VMware vSphere Replication Administration
VMware, Inc. 49
13 Power on the vSphere Replication virtual machine.
14 Open the console of the newly deployed vSphere Replication server.
15 Enter the IP address of the additional vSphere Replication server that you want to upgrade.
16 Enter the root password of the additional vSphere Replication server that you want to upgrade.
What to do next
nUpgrade the vSphere Replication appliance. See Upgrade the vSphere Replication Appliance.
nDelete the virtual machine of the old vSphere Replication server.
Upgrade the vSphere Replication Appliance
You upgrade the vSphere Replication appliance and the vSphere Replication server by using a
downloadable ISO image.
Important If you use the HTML5-based vSphere Client to deploy the OVF virtual appliance, the
deployment succeeds, but the vSphere Replication fails to start.
Prerequisites
nDownload the VMware-vSphere_Replication-8.1.x.x-build_number.iso image from the
vSphere Downloads page. Copy the ISO image file to a datastore that is accessible from the
vCenter Server instance that you use with vSphere Replication.
nIf the vSphere Replication version that you run is not supported for direct upgrade to
vSphere Replication 8.1, upgrade your vSphere Replication instance to a supported version. For
example, to upgrade vSphere Replication 6.0 to 8.1, you must first upgrade 6.0 to 6.1.2, and then
upgrade 6.1.2 to 8.1. See the interoperability matrix at
http://www.vmware.com/resources/compatibility/sim/interop_matrix.php for solution upgrade paths for
vSphere Replication.
Procedure
1Log in to the vSphere Web Client on the site where you want to upgrade vSphere Replication.
2On the home page, select Hosts and Clusters.
3Right-click on a data center, host or cluster, and select Deploy OVF Template.
Note You must deploy your additional vSphere Replication servers before the vSphere Replication
appliance.
VMware vSphere Replication Administration
VMware, Inc. 50
4Provide the location of the OVF file from which to deploy the vSphere Replication server, and click
Next.
nSelect URL and provide the URL to deploy the appliance from an online URL.
nIf you downloaded and mounted the vSphere Replication ISO image on a system in your
environment, select Local file > Browse and navigate to the \bin directory in the ISO image,
and select the vSphere_Replication_OVF10.ovf, vSphere_Replication-system.vmdk, and
vSphere_Replication-support.vmdk files.
5Accept the name, select or search for a destination folder or data center for the virtual appliance, and
click Next.
You can enter a new name for the virtual appliance. The name must be unique within each
vCenter Server virtual machine folder.
6Select a cluster, host, or resource pool where you want to run the deployed template, and click Next.
7Review the virtual appliance details and click Next.
8Accept the end-user license agreements (EULA) and click Next.
9Select the number of vCPUs for the virtual appliance and click Next.
Note Selecting higher number of vCPUs ensures better performance of the vSphere Replication
appliance, but might slow down the replications that run on ESXi host systems that have 4 or less
cores per NUMA node. If you are unsure what the hosts in your environment are, select 2 vCPUs.
10 Select a destination datastore and disk format for the virtual appliance and click Next.
11 Select a network from the list of available networks, set the IP protocol and IP allocation, and click
Next.
vSphere Replication supports both DHCP and static IP addresses. You can also change network
settings by using the virtual appliance management interface (VAMI) after installation.
12 On the Customize template page, enter one or more NTP server host names or IP addresses.
13 Set the password for the root account for the customized template, and click Next.
14 Review the binding to the vCenter Extension vService and click Next.
15 Review the settings and click Finish.
The vSphere Replication appliance is deployed.
16 Power on the vSphere Replication virtual machine.
17 Open the console of the newly deployed vSphere Replication appliance.
VMware vSphere Replication Administration
VMware, Inc. 51
18 Select Upgrade.
Option Description
Continue Continue with the deployment of a new vSphere Replication appliance. After
successful deployment, you must register the vSphere Replication appliance to
the vCenter Server from the VAMI. As a result, you can no longer use the existing
replications. You must create new ones.
Shutdown Shut down the machine if you do not want to proceed with the upgrade.
Upgrade Continue with the upgrade of the vSphere Replication appliance. During the
upgrade process, the existing configuration of the vSphere Replication appliance
is migrated to the new vSphere Replication appliance. After successful upgrade,
all replications continue working.
19 Enter the root password of the vSphere Replication appliance that you want to upgrade.
20 Confirm that you want to continue with the upgrade process.
21 Enter the credentials of a user with administrator privileges to vCenter Single Sign-On.
Initially, only the user administrator@vsphere.local has these privileges.
What to do next
nIf your infrastructure uses more than one vSphere Replication Server, you must upgrade all
vSphere Replication Server instances to version 8.1 on the protected and the recovery site.
nDelete the virtual machine of the old vSphere Replication server.
Important If the vSphere Replication appliance that you upgraded uses the embedded database, you
must apply additional configuration to enable the support of up to 2000 replications. See
http://kb.vmware.com/kb/2102463. No additional configuration is required for vSphere Replication
appliances that are configured to use an external database.
Upgrade vSphere Replication 8.0 to Version 8.1
If you are using vSphere Replication 8.0 as part of the VMware Site Recovery service, you can upgrade
vSphere Replication 8.0 by using a downloadable ISO image.
Important If you use the HTML5-based vSphere Client to deploy the OVF virtual appliance, the
deployment succeeds, but the vSphere Replication fails to start.
Prerequisites
nDownload the VMware-vSphere_Replication-8.1.x.x-build_number.iso image from the
vSphere Downloads page. Copy the ISO image file to a datastore that is accessible from the
vCenter Server instance that you use with vSphere Replication.
Procedure
1In the vSphere Web Client, right-click the vSphere Replication appliance virtual machine and select
Open Console.
VMware vSphere Replication Administration
VMware, Inc. 52
2Log in as the root user, and run the following command.
if [ -d '/var/run' ] && [ ! -L '/var/run' ] ; then mv -f /var/run/* /run/; rm -
rf /var/run; ln -sf /run /var/; fi
3Right-click the vSphere Replication virtual machine and select Edit Settings.
4Increase the vSphere Replication Management Server appliance memory to 8 GB.
5On the Virtual Hardware tab, select CD/DVD Drive > Datastore ISO File.
6Navigate to the ISO image in the datastore.
7For File Type, select ISO Image and click OK.
8Select the option to connect at power-on and follow the prompts to add the CD/DVD drive to the
vSphere Replication virtual machine.
9Power on the vSphere Replication virtual machine.
10 In a Web browser, log in to the virtual appliance management interface (VAMI).
The URL for the VAMI is https://vr_appliance_address:5480.
11 Click the Update tab.
12 Click Settings, select Use CDROM Updates, and click Save Settings.
13 Click Status and click Check Updates.
The appliance version appears in the list of available updates.
14 Click Install Updates and click OK.
15 After the updates install, click the System tab and click Reboot.
16 After the vSphere Replication appliance reboots, log in to the VAMI and repeat the steps to register
the vSphere Replication appliance with vCenter Single Sign-On.
This registers the vSphere Replication appliance in the Lookup Service and vCenter Single Sign-On
or updates an existing vSphere Replication registration.
17 Log out of the vSphere Web Client, clear the browser cache, and log in again to see the upgraded
appliance.
18 Reboot the vSphere Replication appliance.
What to do next
nIf your infrastructure uses more than one vSphere Replication Server, you must upgrade all
vSphere Replication Server instances to version 8.1 on the on-premises site.
VMware vSphere Replication Administration
VMware, Inc. 53
nDelete the virtual machine of the old vSphere Replication server.
Important If the vSphere Replication appliance that you upgraded uses the embedded database, you
must apply additional configuration to enable the support of up to 2000 replications. See
http://kb.vmware.com/kb/2102463. No additional configuration is required for vSphere Replication
appliances that are configured to use an external database.
Update the vCenter Server IP Address in the
vSphere Replication Management Server
After you upgrade vCenter Server and the vSphere Replication appliance, if the vCenter Server certificate
or the IP address changed during the upgrade, you must perform additional steps.
To update the vCenter Server certificate, see vSphere Replication is Inaccessible After Changing vCenter
Server Certificate.
If vCenter Server uses a static IP address, it preserves the IP address by default after upgrade. If the
vCenter Server uses a DHCP address that changed during the upgrade, and the vSphere Replication
Management Server is configured to use the vCenter Server IP address and not FQDN, update the IP
address in the vSphere Replication Management Server.
Prerequisites
Verify that the vCenter Server and vSphere Replication components are upgraded. For more information,
see Order of Upgrading vSphere and vSphere Replication Components.
Procedure
1Power off the vSphere Replication appliance and power it on to retrieve the OVF environment.
2Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
3On the Configuration tab, enter the new IP address of the vCenter Server.
4Click Save and Restart.
VMware vSphere Replication Administration
VMware, Inc. 54
Reconfigure the
vSphere Replication Appliance 8
If necessary, you can reconfigure the vSphere Replication appliance settings by using the virtual
appliance management interface (VAMI).
You provide the settings for the vSphere Replication appliance in the Deploy OVF wizard when you
deploy the appliance. If you selected automatic configuration of the appliance using an embedded
database, you can use the vSphere Replication appliance immediately after deployment. If necessary you
can modify the configuration settings of the vSphere Replication appliance after you deploy it.
nReconfigure General vSphere Replication Settings
You can use vSphere Replication immediately after you deploy the vSphere Replication appliance. If
necessary, you can reconfigure the general settings after deployment in the virtual appliance
management interface (VAMI).
nChange the SSL Certificate of the vSphere Replication Appliance
You can change the initial vSphere Replication SSL certificate by generating a new self-signed
certificate or uploading an SSL certificate signed by a trusted Certificate Authority.
nChange the Password of the vSphere Replication Appliance
You set the password of the vSphere Replication appliance when you deploy the appliance. You can
change the password after installation by using the virtual appliance management interface (VAMI).
nChange the Keystore Passwords of the vSphere Replication Appliance
To increase security, you can change the passwords of the vSphere Replication appliance keystore.
If you copy the keystores from the appliance to another machine, you must change the passwords
before the copy operation.
nChange the Truststore Passwords of the vSphere Replication Appliance
To increase security, you can change the passwords of the vSphere Replication appliance truststore.
nConfigure vSphere Replication Network Settings
You can review current network settings and change address and proxy settings for
vSphere Replication. You might make these changes to match network reconfigurations.
nConfigure vSphere Replication System Settings
You can view the vSphere Replication system settings to gather information about the
vSphere Replication appliance. You can also set the system time zone, and reboot or shut down the
appliance.
VMware, Inc. 55
nUpdate the NTP Server Configuration
Change the NTP server configuration of your vSphere Replication server if you change the NTP
servers that your vSphere Replication server uses.
nReconfigure vSphere Replication to Use an External Database
The vSphere Replication appliance contains an embedded vPostgreSQL database that you can use
immediately after you deploy the appliance, without any additional database configuration. If
necessary, you can reconfigure vSphere Replication to use an external database.
nUse the Embedded vSphere Replication Database
If you configured vSphere Replication to use an external database, you can reconfigure
vSphere Replication to use the embedded database.
Reconfigure General vSphere Replication Settings
You can use vSphere Replication immediately after you deploy the vSphere Replication appliance. If
necessary, you can reconfigure the general settings after deployment in the virtual appliance
management interface (VAMI).
The general settings of the vSphere Replication appliance include the name and IP address of the
vSphere Replication appliance, the address, and port of the vCenter Server instance to which it connects,
and an administrator email address. You can change the general settings from the default values in the
virtual appliance management interface (VAMI).
For example, you can reconfigure the address of the vSphere Replication appliance if you did not specify
a fixed IP address when you deployed the appliance, and DHCP changes the address after deployment.
Similarly, you can update the address of the vCenter Server instance if the address changes after
deployment.
Prerequisites
nVerify that the vSphere Replication appliance is powered on.
nVerify that you have administrator privileges to configure the vSphere Replication appliance.
nVerify that the vCenter Server version is upgraded to vCenter Server 6.5.
Procedure
1Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
2(Optional) Review and confirm the browser security exception to proceed to the login page.
3Enter the root user name and password for the appliance.
You configured the root password during the OVF deployment of the vSphere Replication appliance.
4On the VR tab, click Configuration.
5In the VRM Host text box, enter the address of the vSphere Replication appliance or click Browse to
select an IP address from a list.
VMware vSphere Replication Administration
VMware, Inc. 56
6In the LookupService Address text box, enter the Platform Services Controller address to use with
this installation.
You must use the same address format that you used when you installed vCenter Server. For
example, if you used a fully qualified domain name during installation, you must use that FQDN. If
you used an IP address, you must use that IP address.
7In the SSO Administrator text box, enter a Platform Services Controller administrator email address.
8Click Save and Restart Service to apply the changes.
You reconfigured the general settings of the vSphere Replication appliance.
Change the SSL Certificate of the vSphere Replication
Appliance
You can change the initial vSphere Replication SSL certificate by generating a new self-signed certificate
or uploading an SSL certificate signed by a trusted Certificate Authority.
vSphere Replication generates a standard SSL certificate when the appliance first boots and registers
with vCenter Server. The vSphere Replication self-signed certificate expires after five years from the first
boot of the appliance. The default certificate policy uses trust by thumbprint.
You can change the SSL certificate, for example if your company's security policy requires that you use
trust by validity and thumbprint or a certificate signed by a certification authority. You change the
certificate by using the virtual appliance management interface (VAMI) of the vSphere Replication
appliance. For information about the SSL certificates that vSphere Replication uses, see vSphere
Replication Certificate Verification and Requirements When Using a Public Key Certificate with vSphere
Replication.
See vSphere Replication Certificate Verification for details of how vSphere Replication handles
certificates.
Prerequisites
nVerify that the vSphere Replication appliance is powered on.
nVerify that you have administrator privileges to configure the vSphere Replication appliance.
Procedure
1Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
2Enter the root user name and password for the appliance.
You configured the root password during the OVF deployment of the vSphere Replication appliance.
3(Optional) Click the VR tab and click Security to review the current SSL certificate.
4Click Configuration.
VMware vSphere Replication Administration
VMware, Inc. 57
5(Optional) To enforce verification of a certificate validity, select the Accept only SSL certificates
signed by a trusted Certificate Authority check box.
6Generate or install a new SSL certificate.
Option Action
Generate a self-signed certificate Click Generate and Install. Using a self-signed certificate provides trust by
thumbprint only and might not be suitable for environments that require high
levels of security. You cannot use a self-signed certificate if you selected Accept
only SSL certificates signed by a trusted Certificate Authority.
Upload a certificate Click Choose File to select a PKCS#12 certificate and click Upload and Install.
Public key certificates must meet certain requirements. See Requirements When
Using a Public Key Certificate with vSphere Replication.
7Click Save and Restart Service to apply the changes.
You changed the SSL certificate and optionally changed the security policy to use trust by validity and
certificates signed by a certificate authority.
Note If you change a certificate on one of the source or target sites, the connection status to this site
changes to Connection issue. In the vSphere Web Client, you can check the list of target sites under
vSphere Replication on the Manage tab, and reconnect the sites.
vSphere Replication Certificate Verification
vSphere Replication verifies the certificates of vCenter Server and remote vSphere Replication servers.
All communication between vCenter Server, the local vSphere Replication appliance, and the remote
vSphere Replication appliance goes through a vCenter Server proxy at port 80. All SSL traffic is
tunnelled.
VMware vSphere Replication Administration
VMware, Inc. 58
vSphere Replication can trust remote server certificates either by verifying the validity of the certificate
and its thumbprint or by verifying the thumbprint only. The default is to verify by thumbprint only. You can
activate the verification of the certificate validity in the virtual appliance management interface (VAMI) of
the vSphere Replication appliance by selecting the option Accept only SSL certificates signed by a
trusted Certificate Authority when you upload a certificate.
Thumbprint Verification vSphere Replication checks for a thumbprint match. vSphere Replication
trusts remote server certificates if it can verify the the thumbprints through
secure vSphere platform channels or, in some rare cases, after the user
confirms them. vSphere Replication only takes certificate thumbprints into
account when verifying the certificates and does not check certificate
validity.
Verification of
Thumbprint and
Certificate Validity
vSphere Replication checks the thumbprint and checks that all server
certificates are valid. If you select the Accept only SSL certificates
signed by a trusted Certificate Authority option, vSphere Replication
refuses to communicate with a server with an invalid certificate. When
verifying certificate validity, vSphere Replication checks expiration dates,
subject names and the certificate issuing authorities.
In both modes, vSphere Replication retrieves thumbprints from vCenter Server. vSphere Replication
refuses to communicate with a server if the automatically determined thumbprint differs from the actual
thumbprint that it detects while communicating with the respective server.
You can mix trust modes between vSphere Replication appliances at different sites. A pair of
vSphere Replication appliances can work successfully even if you configure them to use different trust
modes.
Requirements When Using a Public Key Certificate with vSphere
Replication
If you enforce verification of certificate validity by selecting Accept only SSL certificates signed by a
trusted Certificate Authority in the virtual appliance management interface (VAMI) of the
vSphere Replication appliance, some fields of the certificate request must meet certain requirements.
vSphere Replication can only import and use certificates and private keys from a file in the PKCS#12
format. Sometimes these files have a .pfx extension.
nThe certificate must be issued for the same server name as the value in the VRM Host setting in the
VAMI. Setting the certificate subject name accordingly is sufficient, if you put a host name in the VRM
Host setting. If any of the certificate Subject Alternative Name fields of the certificate matches the
VRM Host setting, this will work as well.
nvSphere Replication checks the issue and expiration dates of the certificate against the current date,
to ensure that the certificate has not expired.
VMware vSphere Replication Administration
VMware, Inc. 59
nIf you use your own certificate authority, for example one that you create and manage with the
OpenSSL tools, you must add the fully qualified domain name or IP address to the OpenSSL
configuration file.
nIf the fully qualified domain name of the appliance is VR1.example.com, add subjectAltName =
DNS: VR1.example.com to the OpenSSL configuration file.
nIf you use the IP address of the appliance, add subjectAltName = IP: vr-appliance-ip-
address to the OpenSSL configuration file.
nvSphere Replication requires a trust chain to a well-known root certificate authority.
vSphere Replication trusts all the certificate authorities that the Java Virtual Machine trusts. Also, you
can manually import additional trusted CA certificates in /opt/vmware/hms/security/hms-
truststore.jks on the vSphere Replication appliance.
nvSphere Replication accepts MD5 and SHA1 signatures, but VMware recommends that you use
SHA256 signatures.
nvSphere Replication does not accept RSA or DSA certificates with 512-bit keys. vSphere Replication
requires at least 1024-bit keys. VMware recommends using 2048-bit public keys. vSphere Replication
shows a warning if you use a 1024-bit key.
Change the Password of the vSphere Replication
Appliance
You set the password of the vSphere Replication appliance when you deploy the appliance. You can
change the password after installation by using the virtual appliance management interface (VAMI).
Prerequisites
nVerify that the vSphere Replication appliance is powered on.
nVerify that you have administrator privileges to configure the vSphere Replication appliance.
nVerify that the vCenter Server version is upgraded to vCenter Server 6.5.
Procedure
1Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
2Enter the root user name and password for the appliance.
You configured the root password during the OVF deployment of the vSphere Replication appliance.
3Click the VR tab and click Security.
4Enter the current password in the Current Password text box.
5Enter the new password in the New Password and the Confirm New Password text boxes.
The password must be a minimum of eight characters. vSphere Replication does not support blank
passwords.
VMware vSphere Replication Administration
VMware, Inc. 60
6Click Apply to change the password.
Change the Keystore Passwords of the
vSphere Replication Appliance
To increase security, you can change the passwords of the vSphere Replication appliance keystore. If you
copy the keystores from the appliance to another machine, you must change the passwords before the
copy operation.
The keystore passwords might be stored in an access restricted configuration file. vSphere Replication
has the following keystores:
n/opt/vmware/hms/security/hms-keystore.jks, which contains the vSphere Replication
appliance private key and certificate.
n/opt/vmware/hms/security/hms-truststore.jks, which contains additional CA certificates
besides the ones that Java already trusts.
Procedure
1To change the password for the hms-keystore.jks keystore, open the remote console of your
vSphere Replication virtual machine and log in as root.
2Obtain the current keystore password.
# /opt/vmware/hms/bin/hms-configtool -cmd list | grep keystore
Example of the output hms-keystore-password = old_password
3Change the keystore password.
# /usr/java/default/bin/keytool -storepasswd -storepass old_password -new new_password -
keystore /opt/vmware/hms/security/hms-keystore.jks
4Change the vSphere Replication appliance private key password.
The following command is a long, single command and must be run at once. There are breaks in the
command for better visibility. Verify that the command returns a success message.
# /usr/java/default/bin/keytool -keypasswd -alias jetty -keypass
old_password -new new_password -storepass new_password -keystore
/opt/vmware/hms/security/hms-keystore.jks
5Update the configuration with the new password.
/opt/vmware/hms/bin/hms-configtool -cmd reconfig -property 'hms-keystore-password=new_password'
6Update the tomcat server.xml file with the new password.
sed -i -- 's/old_password/new_password/g' /var/opt/apache-tomcat/conf/server.xml
VMware vSphere Replication Administration
VMware, Inc. 61
7Reboot the appliance for the changes to take effect.
# reboot
8Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
9On the VR tab, click Configuration, and click Save and Restart Service.
What to do next
If you want to change the truststore passwords of the vSphere Replication appliance, see Change the
Truststore Passwords of the vSphere Replication Appliance.
Change the Truststore Passwords of the
vSphere Replication Appliance
To increase security, you can change the passwords of the vSphere Replication appliance truststore.
The truststore passwords might be stored in an access restricted configuration file.
Procedure
1To change the password for the hms-truststore.jks keystore, open the remote console of your
vSphere Replication virtual machine and log in as root.
2Obtain the current truststore password.
# /opt/vmware/hms/bin/hms-configtool -cmd list | grep truststore
Example of the output: hms-truststore-password = old_password
3Change the truststore password.
The following command is a long, single command and must be run at once. There are breaks in the
command for better visibility. Verify that the command returns a success message.
# /usr/java/default/bin/keytool -storepasswd -storepass
old_password -new new_password -keystore
/opt/vmware/hms/security/hms-truststore.jks
4Update the configuration with the new password.
/opt/vmware/hms/bin/hms-configtool -cmd reconfig -property 'hms-truststore-password=new_password'
5Restart the vSphere Replication service.
# service hms restart
VMware vSphere Replication Administration
VMware, Inc. 62
What to do next
If you want to change the keystore passwords of the vSphere Replication appliance, see Change the
Keystore Passwords of the vSphere Replication Appliance.
Configure vSphere Replication Network Settings
You can review current network settings and change address and proxy settings for vSphere Replication.
You might make these changes to match network reconfigurations.
Note vSphere Replication can be deployed with either IPv4 or IPv6 address. Mixing IP addresses, for
example having a single appliance with an IPv4 and an IPv6 address, is not supported. To register as an
extension, vSphere Replication relies on the VirtualCenter.FQDN property of the vCenter Server. When
an IPv6 address is used for vSphere Replication, the VirtualCenter.FQDN property must be set to a
fully qualified domain name that can be resolved to an IPv6 address or to a literal address. When
operating with an IPv6 address, vSphere Replication requires that all components in the environment,
such as vCenter Server and ESXi hosts are accessible using the IPv6 address.
Prerequisites
nVerify that the vSphere Replication appliance is powered on.
nVerify that you have administrator privileges to configure the vSphere Replication appliance.
nVerify that the vCenter Server version is upgraded to vCenter Server 6.5.
Procedure
1Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
2Enter the root user name and password for the appliance.
You configured the root password during the OVF deployment of the vSphere Replication appliance.
3Click the Network tab.
4Click Status to review current network settings.
5Click Address to review or modify IPv4 and IPv6 address settings.
IP Address Type Option Description
IPv4 DHCP DHCP is not recommended if the IP address of the appliance might change if it reboots.
IPv4 Static With a static IPv4 address, you can modify the IP settings, DNS settings, net mask, and host
name information.
IPv4 None Disabling IPv4 addresses forces the use of IPv6 addresses only.
IPv6 Auto Automatic assignment of IPv6 addresses is not recommended if the IP address of the appliance
might change if it reboots.
IPv6 DHCP DHCP is not recommended if the IP address of the appliance might change if it reboots.
IPv6 Static With a static IPv6 address, you can modify the IP address and the address prefix.
VMware vSphere Replication Administration
VMware, Inc. 63
6Click Save Settings.
If you do not click Save Settings, changes are discarded.
Note After the IP address of the vSphere Replication server on the target site changes, you must
manually reconfigure replications on the source site to point to the new IP address.
7Click Proxy to review or modify proxy settings.
a Select the Use a proxy server check box to use a proxy server.
b Enter a proxy server name in the HTTP Proxy Server text box.
c Enter a proxy port in the Proxy Port text box.
d (Optional) Enter a proxy server user name and password.
8Click Save Settings.
If you do not click Save Settings, changes are discarded.
What to do next
A network address change might require you to reconnect the source and target sites and might also
require a change of certificate if you have activated verification of certificate validity.
Configure vSphere Replication System Settings
You can view the vSphere Replication system settings to gather information about the
vSphere Replication appliance. You can also set the system time zone, and reboot or shut down the
appliance.
Prerequisites
nVerify that the vSphere Replication appliance is powered on.
nVerify that you have administrator privileges to configure the vSphere Replication appliance.
nVerify that the vCenter Server version is upgraded to vCenter Server 6.5.
Procedure
1Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
2Enter the root user name and password for the server.
3Click the System tab.
VMware vSphere Replication Administration
VMware, Inc. 64
4Click Information.
You can review information about vSphere Replication, and reboot or shutdown the appliance.
Option Description
Vendor Vendor name
Appliance Name vSphere Replication appliance name
Appliance Version vSphere Replication version
Hostname Hostname of the appliance
OS Name Operating system name and version
OVF Environment: View Displays information about the OVF environment
Reboot Reboots the virtual appliance
Shutdown Shuts down the virtual appliance
Shutting down the vSphere Replication appliance stops configured replications and prevents you from
configuring a replication of new virtual machines and modifying existing replication settings.
5Click Time Zone.
Option Description
System Time Zone Time zones are available from the drop-down menu
Save Settings Saves settings
Cancel Changes Discards changes
Update the NTP Server Configuration
Change the NTP server configuration of your vSphere Replication server if you change the NTP servers
that your vSphere Replication server uses.
Prerequisites
nVerify that the remote console of your vSphere Replication virtual machine is open and that you use
root credentials.
nVerify that the status of the NTP service of your vSphere Replication server is running.
Procedure
1Open the /etc/ntp.conf file.
2Update the IP address or name of the NTP server or servers.
3(Optional) To add an additional NTP server add the following line.
server your_NTP_server_IP_address_or_name
4Save the change and close ntp.conf file.
5Run the service ntp reload command to reload the NTP configuration.
VMware vSphere Replication Administration
VMware, Inc. 65
Your vSphere Replication server is synchronized with the new NTP server.
Reconfigure vSphere Replication to Use an External
Database
The vSphere Replication appliance contains an embedded vPostgreSQL database that you can use
immediately after you deploy the appliance, without any additional database configuration. If necessary,
you can reconfigure vSphere Replication to use an external database.
Each vSphere Replication appliance requires its own database. If the database at either site is corrupted,
vSphere Replication does not function. vSphere Replication cannot use the vCenter Server database
because it has different database schema requirements. However, if you do not use the embedded
vSphere Replication database, you can use the vCenter Server database to create and support an
external vSphere Replication database.
You might need to use an external database to improve performance or load balancing, for easier backup,
or to meet your company's database standards.
Note vSphere Replication server inside the vSphere Replication appliance uses its own embedded
database and config files. Configuring VRMS to use external database does not provide protection of
losing the vSphere Replication appliance or any additional vSphere Replication Server appliance.
If you reinitialize the database after you deploy vSphere Replication, you must go to the
vSphere Replication virtual appliance management interface (VAMI) to reconfigure vSphere Replication to
use the new database connection.
Prerequisites
nVerify that the vSphere Replication appliance is powered on.
nVerify that you have administrator privileges to configure the vSphere Replication appliance.
nYou must create and configure the external database before you connect it to vSphere Replication.
See vSphere Replication Supported Databases for the configuration requirements for each supported
type of database.
Procedure
1Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
2(Optional) Review and confirm the browser security exception to proceed to the login page.
3Enter the root user name and password for the appliance.
You configured the root password during the OVF deployment of the vSphere Replication appliance.
4On the VR tab, click Configuration.
5Select Manual configuration to specify a configuration or select Configure from an existing VRM
database to use a previously established configuration.
VMware vSphere Replication Administration
VMware, Inc. 66
6In the DB text boxes, provide information about the database for vSphere Replication to use.
Option Setting
DB Type Select SQL Server or Oracle.
DB Host IP address or fully qualified domain name of the host on which the database server is running.
DB Port Port on which to connect to the database.
DB user name User name for the vSphere Replication database user account that you create on the database server.
DB Password Password for the vSphere Replication database user account that you create on the database server.
DB Name Name of the vSphere Replication database instance.
7(Optional) Select the Show DB URL check box.
Advanced users can fine-tune other database properties by modifying the URL, for example if you
use a named instance of SQL Server.
8Click Save and Restart Service to apply the changes.
You configured vSphere Replication to use an external database instead of the database that is
embedded in the vSphere Replication appliance.
vSphere Replication Supported Databases
The vSphere Replication virtual appliance includes the VMware standard embedded vPostgreSQL
database. You can also configure vSphere Replication to use an external database.
Automated migration between the embedded database and any external databases is not supported in
any direction. If you must configure an external database, you must manually migrate the data or
manually recreate all replications.
You can configure vSphere Replication to use one of the supported external databases.
nMicrosoft SQL
nOracle
External vPostgreSQL databases are not supported. vSphere Replication supports the same database
versions as vCenter Server. For supported database versions, see the VMware Product Interoperability
Matrixes at http://partnerweb.vmware.com/comp_guide2/sim/interop_matrix.php?.
Configure Microsoft SQL Server for vSphere Replication
When you create a Microsoft SQL Server database, you must configure it correctly to support
vSphere Replication.
You use SQL Server Management Studio to create and configure an SQL Server database for
vSphere Replication.
This information provides the general steps that you must perform to configure an SQL Server database
for vSphere Replication. For instructions about how to perform the relevant steps, see the SQL Server
documentation.
VMware vSphere Replication Administration
VMware, Inc. 67
Prerequisites
Verify that the SQL Server Browser service is running.
Procedure
1Select Mixed Mode Authentication when you create the database instance.
The vSphere Replication appliance and the database server run on different hosts, so you must use
mixed mode authentication and not Windows Authentication.
2Use either a named instance or the default instance of SQL Server.
If you intend to use dynamic TCP ports, you must use a named instance of SQL Server.
3Enable TCP on the database instance.
4Set a TCP port.
Option Action
Static TCP port Set the TCP port to the default of 1433.
Dynamic TCP port a Use a named instance of SQL Server. You can only use dynamic ports with a
named instance of SQL Server.
b Select the Show DB URL check box in the virtual appliance management
interface (VAMI) of the vSphere Replication appliance.
c Modify the DB URL value. Replace port=port_number with
instanceName=instance_name in the URL.
d Use the PortQuery command from a remote machine to check that the port
on which the SQL Server Browser service runs is not blocked by a firewall.
The SQL Server Browser runs on port 1434. Enter the PortQuery command
in a terminal window.
PortQry.exe -n Machine_Name -p UDP -e 1434
5Verify that the firewall on the database server permits inbound connections on the TCP port.
6Create the vSphere Replication security login.
7Create the vSphere Replication database and set the vSphere Replication security login as the
database owner.
8Keep the dbo user and dbo schema settings.
Because the vSphere Replication security login is the database owner, it maps to the database user
dbo and uses the dbo schema.
Configure Oracle Server for vSphere Replication
You must configure an Oracle Server database correctly to support vSphere Replication.
You create and configure an Oracle Server database for vSphere Replication by using the tools that
Oracle Server provides.
VMware vSphere Replication Administration
VMware, Inc. 68
This information provides the general steps that you must perform to configure an Oracle Server
database for vSphere Replication. For instructions about how to perform the relevant steps, see the
Oracle documentation.
Procedure
1When creating the database instance, select UTF-8 encoding.
2Create the vSphere Replication database user account.
3If they are not selected already, select the CONNECT and RESOURCE roles.
These roles provide the privileges that vSphere Replication requires.
Use the Embedded vSphere Replication Database
If you configured vSphere Replication to use an external database, you can reconfigure
vSphere Replication to use the embedded database.
The vSphere Replication appliance includes an embedded vPostgreSQL database. The embedded
database is preconfigured for use with vSphere Replication and is enabled if you accept the default
Performs initial configuration of the appliance using an embedded database option when you
deploy the vSphere Replication appliance. If you reconfigured vSphere Replication to use an external
database after deployment, you can switch to the embedded database. After switching databases, you
must manually configure replications again as the replication management data is not migrated to the
database. You can use the reset feature in the embedded database to drop replications, site connections
and external vSphere Replication registrations.
Prerequisites
nVerify that the vSphere Replication appliance is powered on.
nVerify that you have administrator privileges to configure the vSphere Replication appliance.
nYou must have reconfigured vSphere Replication to use an external database.
Procedure
1Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
2(Optional) Review and confirm the browser security exception to proceed to the login page.
3Enter the root user name and password for the appliance.
You configured the root password during the OVF deployment of the vSphere Replication appliance.
4On the VR tab, click Configuration.
5Select Configure using the embedded database.
6(Optional) Click Reset Embedded Database to reset the database.
7Click Save and Restart Service to apply the changes.
VMware vSphere Replication Administration
VMware, Inc. 69
You configured vSphere Replication to use the embedded vSphere Replication database.
VMware vSphere Replication Administration
VMware, Inc. 70
vSphere Replication Roles and
Permissions 9
You can use any predefined roles or clone an existing role, and add or remove privileges from it based on
your needs.
This chapter includes the following topics:
nvSphere Replication Roles Reference
nAssign vSphere Replication Roles to Users
nAssign VRM Replication Viewer Role
nAssign VRM Virtual Machine Replication User Role
nAssign VRM Virtual Machine Recovery User Role and Perform a Recovery Operation
nClone Existing VRM Administrator Role and Modify Privileges
vSphere Replication Roles Reference
vSphere Replication includes a set of roles. Each role includes a set of privileges, which enable users
with those roles to complete different actions.
For information about how to assign roles, see Assigning Roles in the vSphere Web Client in vSphere
Security.
Note When assigning permissions with no propagation, make sure that you have at least Read-only
permission on all parent objects.
VMware, Inc. 71
Table 9‑1. vSphere Replication Roles
Role Actions that this Role Permits Privileges that this Role Includes
Objects in vCenter Server
Inventory that this Role Can
Access
VRM
replication
viewer
nView replications.
nCannot change replication
parameters.
VRM remote.View VR
VRM remote.View VRM
VRM datastore mapper.View
Host.vSphere Replication.Manage
replication
Virtual machine.vSphere
Replication.Monitor replication
vCenter Server root folder with
propagation, at source site
(forward replications) and target
site (reverse replications).
Alternatively, vCenter Server root
folder without propagation on
both sites and virtual machine
without propagation on the
source site.
VRM virtual
machine
replication user
nView replications.
nManage datastores.
nConfigure and unconfigure
replications.
nManage and monitor
replications.
nView defined storage
capabilities and storage
profiles.
Requires a corresponding user
with the same role on the target
site and additionally
vSphere Replication target
datastore user role on the target
datacenter, or datastore folder or
each target datastore.
Datastore.Browse Datastore
VRM remote.View VR
VRM remote.View VRM
VRM datastore mapper.Manage
VRM datastore mapper.View
Host.vSphere Replication.Manage
replication
Virtual machine.vSphere
Replication.Configure replication
Virtual machine.vSphere
Replication.Manage replication
Virtual machine.vSphere
Replication.Monitor replication
Profile-driven storage .Profile-
driven storage view
vCenter Server root folder with
propagation on both sites.
Alternatively, vCenter Server root
folder without propagation on
both sites, virtual machine
without propagation on the
source site, source datastores
without propagation on the
source site.
VMware vSphere Replication Administration
VMware, Inc. 72
Table 9‑1. vSphere Replication Roles (Continued)
Role Actions that this Role Permits Privileges that this Role Includes
Objects in vCenter Server
Inventory that this Role Can
Access
VRM
administrator
Incorporates all
vSphere Replication privileges.
VRM remote.Manage VR
VRM remote.View VR
VRM remote.Manage VRM
VRM remote.View VRM
VRM datastore mapper.Manage
VRM datastore mapper.View
VRM diagnostics .Manage
VRM session .Terminate
Datastore.Browse datastore
Datastore.Low level file operations
Host.vSphere Replication.Manage
replication
Resource.Assign virtual machine to
resource pool
Virtual machine.Configuration.Add
existing disk
Virtual machine.Configuration.Add
or remove device
Virtual machine.Interaction.Power
On
Virtual machine.Interaction.Device
connection
Virtual machine.Inventory.Register
Virtual machine.vSphere
Replication.Configure replication
Virtual machine.vSphere
Replication.Manage replication
Virtual machine.vSphere
Replication.Monitor replication
Profile-driven storage .Profile-
driven storage view
vCenter Server root folder with
propagation on both sites.
Alternatively, vCenter Server root
folder without propagation on
both sites, virtual machine
without propagation on the
source site, target datastore,
target virtual machine folder with
propagation on the target site,
target host or cluster with
propagation on the target site.
VRM
diagnostics
Generate, retrieve, and delete log
bundles.
VRM remote.View VR
VRM remote.View VRM
VRM diagnostics .Manage
vCenter Server root folder on
both sites.
VMware vSphere Replication Administration
VMware, Inc. 73
Table 9‑1. vSphere Replication Roles (Continued)
Role Actions that this Role Permits Privileges that this Role Includes
Objects in vCenter Server
Inventory that this Role Can
Access
VRM target
datastore user
Configure and reconfigure
replications.
Used on target site in combination
with the VRM virtual machine
replication user role on both sites.
Datastore.Browse datastore
Datastore.Low level file operations
Datastore objects on target site,
or datastore folder with
propagation at target site, or
target datacenter with
propagation.
VRM virtual
machine
recovery user
Recover virtual machines. Datastore.Browse datastore
Datastore.Low level file operations
Host.vSphere Replication.Manage
replication
Virtual machine.Configuration.Add
existing disk
Virtual machine.Configuration.Add
or remove device
Virtual machine.Interaction.Power
On
Virtual machine.Interaction.Device
connection
Virtual machine.Inventory.Register
Resource.Assign virtual machine to
resource pool
Secondary vCenter Server root
folder with propagation.
Alternatively, secondary
vCenter Server root folder
without propagation, target
datastore without propagation,
target virtual machine folder with
propagation, target host or
cluster with propagation.
Assign vSphere Replication Roles to Users
You create roles and assign permissions for vSphere Replication in the same way as you do in vCenter.
See vSphere Users and Permissions in vSphere Security.
Assign VRM Replication Viewer Role
In this example, you create a vSphere Replication user that can view replication sites and replications
configured between them, but cannot perform modifications.
Prerequisites
nVerify that you have two sites connected and replication configured between them.
nVerify that you have another user account for each site.
Procedure
1Log in as Administrator on the source site.
2Select vCenter > Permissions and assign the VRM replication viewer role with the propagate
option to this user.
3Assign the same privilege on the target replication site.
VMware vSphere Replication Administration
VMware, Inc. 74
4Log in as the user with the assigned VRM replication viewer role.
The user with the VRM replication viewer role cannot perform modifications on the configured replication,
nor on the replication sites. The following error message appears when this user tries to run an operation:
Permission to perform this operation was denied.
Assign VRM Virtual Machine Replication User Role
In this example, you create a vSphere Replication user who can only configure replication between sites
and use a specific datastore on the target site.
Prerequisites
nVerify that two sites are connected.
nVerify that you have another user account for each site.
Procedure
1Log in as the Administrator user on the source site.
2Select vCenter > Permissions and assign to this user the VRM virtual machine replication user
role with the propagate option.
3Assign the same privilege on the target replication site.
4On the target site, select the datastore to store your replica files, and select Manage > Permissions.
5Edit the assigned permission and assign the VRM target datastore user role.
6Log in as that user on the source site, select the virtual machine, and click Configure Replication to
start the configuration wizard.
7Select the target site and enter the same user credentials.
8Accept the default selections until Target Location.
9For the target location, select the datastore to which you granted permission.
Selecting a datastore for which the user lacks the Target datastore user role results in the error
message Permission to perform this operation was denied.
Assign VRM Virtual Machine Recovery User Role and
Perform a Recovery Operation
You can assign specific permissions to a vSphere Replication user, so that they can perform only
recovery operations.
Prerequisites
nVerify that you have two sites connected and replication configured between them.
nVerify that you have another user account for the target site apart from the Administrator user.
VMware vSphere Replication Administration
VMware, Inc. 75
Procedure
1Log in as the Administrator user on the target site.
2Select vCenter > Permissions and assign to a different user account the VRM virtual machine
recovery user role with the propagate option.
3Log in as that user on the target site.
4On the home page, click Site Recovery and click Open Site Recovery.
5On the Site Recovery home page, select a site pair and click View Details.
6Click the Replications tab and select Reverse replications.
7Select a replication from the list.
8Click the Recover icon and follow the prompts to finish the recovery.
Clone Existing VRM Administrator Role and Modify
Privileges
In this example, you create a vSphere Replication user who cannot modify the replication infrastructure.
The user cannot register additional vSphere Replication servers.
Prerequisites
nVerify that you have a replication site.
nVerify that you have another user account to which you can assign the modified privileges.
Procedure
1Log in to the vSphere Client or vSphere Web Client.
2On the home page, click Administration and click Roles.
3Select the VRM Administrator role and click the Clone role action icon.
4In the cloned role, deselect the VRM Remote > VR Server > Manage VR Server privilege.
5Navigate to the vCenter Server instance.
6On the Permissions tab click the Add permission icon.
7Select the user that must have the privileges defined by the selected role.
8Select the cloned VRM Administrator role from the Assigned Role drop-down menu.
9Select the Propagate to children check box.
Trying to register a vSphere Replication server results in the error message Permission to perform
this operation was denied.
VMware vSphere Replication Administration
VMware, Inc. 76
Replicating Virtual Machines 10
You can replicate virtual machines from a source site to a target site with vSphere Replication.
You can set a recovery point objective (RPO) to a certain time interval depending on your data protection
needs. vSphere Replication applies all changes made to virtual machines configured for a replication at
the source site to their replicas at the target site. This process reoccurs periodically to ensure that the
replicas at the target site are not older than the RPO interval that you set. See How the Recovery Point
Objective Affects Replication Scheduling.
To replicate a virtual machine using vSphere Replication, you must deploy the vSphere Replication
appliance at the source and target sites. A vSphere Replication infrastructure requires one
vSphere Replication appliance at each site.
The source and target sites must be connected if you want to configure replications. You cannot perform
replications if one of the sites is in the Not Connected state. See vSphere Replication Site Connection
States.
vSphere Replication does not support the recovery of multiple virtual machines from the same workflow.
Each recovery workflow is for an individual virtual machine.
You can configure replications for powered-off virtual machines, but the data synchronization begins when
the virtual machine is powered on. While the source virtual machine is powered off, the replication
appears in Not active status.
You cannot use vSphere Replication to replicate virtual machine templates.
This chapter includes the following topics:
nHow the Recovery Point Objective Affects Replication Scheduling
nHow the 5 Minute Recovery Point Objective Works
nHow Retention Policy Works
nReplicating a Virtual Machine and Enabling Multiple Point in Time Instances
nUsing vSphere Replication with vSAN Storage
nUsing vSphere Replication with vSphere Storage DRS
nHow vSphere Replication Synchronizes Data Between vCenter Server Sites During Initial
Configuration
VMware, Inc. 77
nReplicating Virtual Machines Using Replication Seeds
nReplicating a Virtual Machine in a Single vCenter Server Instance
nBest Practices for Using and Configuring vSphere Replication
nConfigure Replication
nMove a Replication to a New vSphere Replication Server
nStop Replicating a Virtual Machine
nReconfiguring Replications
How the Recovery Point Objective Aects Replication
Scheduling
When you set a Recovery Point Objective (RPO) value during replication configuration, you determine the
maximum data loss that you can tolerate.
The RPO value affects replication scheduling, but vSphere Replication does not adhere to a strict
replication schedule. For example, when you set the RPO to 15 minutes, you instruct vSphere Replication
that you can tolerate losing the data for up to 15 minutes. This does not mean that data is replicated
every 15 minutes.
If you set an RPO of x minutes, and the RPO is not violated, the latest available replication instance can
never reflect a state that is older than x minutes. A replication instance reflects the state of a virtual
machine at the time the synchronization starts.
Assume that during replication configuration you set the RPO to 15 minutes. If the synchronization starts
at 12:00 and it takes five minutes to transfer to the target site, the instance becomes available on the
target site at 12:05, but it reflects the state of the virtual machine at 12:00. The next synchronization can
start no later than 12:10. This replication instance is then available at 12:15 when the first replication
instance that started at 12:00 expires.
If you set the RPO to 15 minutes and the replication takes 7.5 minutes to transfer an instance,
vSphere Replication transfers an instance all the time. If the replication takes more than 7.5 minutes, the
replication encounters periodic RPO violations. For example, if the replication starts at 12:00 and takes 10
minutes to transfer an instance, the replication finishes at 12:10. You can start another replication
immediately, but it finishes at 12:20. During the time interval 12:15-12:20, an RPO violation occurs
because the latest available instance started at 12:00 and is too old.
The replication scheduler tries to satisfy these constraints by overlapping replications to optimize
bandwidth use and might start replications for some virtual machines earlier than expected.
To determine the replication transfer time, the replication scheduler uses the duration of the last few
instances to estimate the next one.
How the 5 Minute Recovery Point Objective Works
If the target and the source sites use VMFS 6.0, VMFS 5.x, NFS 4.1, NFS 3, VVOL, or vSAN 6.0 storage
and later, you can use the 5 minute Recovery Point Objective (RPO).
VMware vSphere Replication Administration
VMware, Inc. 78
vSphere Replication 6.5 displays the 5 minute RPO setting when the target and the source site use
VMFS 6.0, VMFS 5.x, NFS 4.1, NFS 3, VVOL, or vSAN 6.0 storage and later.
If you are using different datastore types between the source and the target site, you can use the 5
minute RPO setting .
The 5 minute RPO can be applied to a maximum of 100 VMs on VMFS 6.0, VMFS 5.x, NFS 4.1, NFS 3,
and vSAN 6.0 storage and later. The maximum for VVOL datastore is 50 VMs.
Note RPO lower than 15 minutes is not supported when you select the OS quiescing option.
How Retention Policy Works
When you configure a replication, you can enable the retention of up to 24 VM replica instances from
Multiple Points in Time (MPIT).
For example, you can configure the retention of 3 instances per day for the last 5 days.
After you recover a replicated virtual machine, the retained replicas appear as snapshots of the virtual
machine in the vSphere Web Client. The list of snapshots includes the retained instances according to the
retention policy that you set, and the latest instance. By the example above, the list will contain 15
snapshots and the latest saved instance of the virtual machine, or a total of 16 snapshots. You can use
the snapshots to revert to an earlier state of the recovered virtual machine.
Administrators cannot configure the precise time when replica instances are created, because the
retention policy is not directly related to replication schedule and RPO. As a consequence, replications
with the same retention policy might not result in replicas retained at the same time instants.
RPO Without Retention Policy
By default, vSphere Replication is configured to a 4-hour RPO. This means that the latest available
replica instance can never reflect a state of the virtual machine that is older than 4 hours. You can adjust
the RPO interval when you configure or reconfigure a replication.
When the age of the latest replication instance approaches the RPO interval, vSphere Replication starts a
sync operation to create a new instance on the target site. The replication instance reflects the state of
the virtual machine at the time the synchronization starts. If no retention policy is configured, when the
new instance is created, the previous instance expires and the vSphere Replication Server deletes it.
How RPO and the Retention Policy Combine
To save some of the replica instances that are created during RPO synchronizations, you can configure
vSphere Replication to keep up to 24 instances per replication. The exact instances that
vSphere Replication keeps are determined by applying a specific algorithm. Using this algorithm, the
vSphere Replication Server tries to match each instance to a slot of the retention policy. Instances that do
not match any slot expire and are deleted. If a slot contains more than one instance, the instances that do
not match the retention criteria are also deleted. vSphere Replication always keeps the latest created
instance and it is not taken into account when determining the number of instances to keep.
VMware vSphere Replication Administration
VMware, Inc. 79
When the age of the latest instance approaches the RPO interval, vSphere Replication starts creating a
new replica instance. The start time of the sync operation is the time of the new instance. When the sync
operation completes, vSphere Replication assesses the existing replica instances to determine which
ones to keep:
1 The granularity of the retention policy is determined based on the replication settings. For example, if
you configured vSphere Replication to keep 3 instances for the last 1 day, it means that you want to
keep 3 replica instances that are relatively evenly distributed over 24 hours. This equals
approximately 1 instance in an 8-hour interval, or the granularity of this retention policy is 8 hours.
2 The time of the last saved instance is rounded down to the nearest slot time. If the granularity is 8
hours, the slot times are 0:00, 8:00, and 16:00.
3 The instances that are between the nearest slot time and the last saved instance are traversed. Let
us assume that the time of the last saved instance is 10:55. Following our example, the nearest slot
time is 8:00 o'clock. Let us also assume that the RPO is 1 hour, and each sync operation takes 5
minutes to complete. Between 8:00 o'clock and 10:55, the slot contains an 8:55 instance, and a 9:55
instance.
4 The earliest instance that is newer than the nearest slot time is saved, and the rest of the instances in
this slot are deleted, except for the latest created instance that vSphere Replication always keeps.
Following our example, the 8:55 instance is saved, and the 9:55 instance is deleted. The 10:55
instance is the latest created instance, so it is also saved.
5 The slot time is decremented by the granularity of the retention policy and a check is performed for
the earliest instance between the beginning of the current slot and the beginning of the previous slot.
If the slot contains expiring instances, they are deleted.
6 The number of slots that contain saved instances is analyzed. If the number of slots with saved
instances is higher than the number of slots determined by the retention policy, the oldest saved
instance expires and is deleted. The last saved instance is not included in this count. In our example,
if we had an instance saved for the interval 8:00 - 16:00 o'clock of the previous day, that instance
would be deleted.
The number of replication instances that vSphere Replication keeps depends on the configured retention
policy, but also requires that the RPO period is short enough for these instances to be created. Because
vSphere Replication does not verify whether the RPO settings will create enough instances to keep, and
does not display a warning message if the instances are not enough, you must ensure that you set
vSphere Replication to create the instances that you want to keep. For example, if you set
vSphere Replication to keep 6 replication instances per day, the RPO period must not exceed 4 hours, so
that vSphere Replication can create 6 instances in 24 hours.
Replicating a Virtual Machine and Enabling Multiple Point
in Time Instances
You can recover virtual machines at specific points in time (PIT) such as the last known consistent state.
VMware vSphere Replication Administration
VMware, Inc. 80
When you configure replication of a virtual machine, you can enable multiple point in time (MPIT)
instances in the recovery settings in the Configure Replication wizard. vSphere Replication retains a
number of snapshot instances of the virtual machine on the target site based on the retention policy that
you specify. vSphere Replication supports a maximum of 24 snapshot instances. After you recover a
virtual machine, you can revert it to a specific snapshot.
During replication, vSphere Replication replicates all aspects of the virtual machine to the target site,
including any potential viruses and corrupted applications. If a virtual machine suffers from a virus or
corruption and you have configured vSphere Replication to keep PIT snapshots, you can recover the
virtual machine and then revert it to a snapshot of the virtual machine in its uncorrupted state.
You can also use the PIT instances to recover the last known good state of a database.
Note vSphere Replication does not replicate virtual machine snapshots.
Figure 10‑1. Recovering a Virtual Machine at Points in Time (PIT)
VR Appliance
Source Site Target Site
Replication
t0 t1 t2 t3
VR Appliance
Using vSphere Replication with vSAN Storage
You can use VMware vSAN datastores as target datastores when configuring replications. Follow the
guidelines when using vSphere Replication with vSAN storage.
Note vSAN is a fully supported feature of vSphere 5.5 Update 1 and later.
Because user-friendly names of directories on vSAN datastores might change and cause errors during
replication or recovery operations, vSphere Replication automatically replaces the user-friendly name of a
directory with its UUID, which is constant. Therefore, you may see the UUID displayed in the
Site Recovery user interface instead of a human-readable name.
Limits of Using vSphere Replication with vSAN Storage
For reasons of load and I/O latency, vSAN storage is subject to limits in terms of the numbers of hosts
that you can include in a vSAN cluster and the number of virtual machines that you can run on each host.
See the Limits section in the VMware vSAN Design and Sizing Guide at
https://storagehub.vmware.com/#!/vmware-vsan/vmware-r-vsan-tm-design-and-sizing-guide.
VMware vSphere Replication Administration
VMware, Inc. 81
Using vSphere Replication adds to the load on the storage. Every virtual machine generates regular read
and write operations. Configuring replications on those virtual machines adds another read operation to
the regular read and write operations, which increases the I/O latency on the storage. The precise
number of virtual machines that you can replicate to vSAN storage by using vSphere Replication depends
on your infrastructure. If you notice slower response times when you configure replications for virtual
machines in vSAN storage, monitor the I/O latency of the vSAN infrastructure. Potentially, reduce the
number of virtual machines that you replicate in the vSAN datastore.
Note When you stop a replication, vSphere Replication does not delete the replica directory at the target
datastore. As a result, stale directories remain on VMFS and NFS target datastores, and unused
namespaces remain on vSAN and Virtual Volume target datastores. Because the maximum number of
directories and namespaces on a datastore is limited, you must manually clean them up to free resources
on the datastore. See Clean up the Target Datastore After You Stop a Replication.
Retaining Point-in-Time Snapshots When Using vSAN Storage
vSAN storage stores virtual machine disk files as a set of objects and components. Each disk object in
vSAN storage has mirror and witness objects. In the default vSAN storage policy, a disk object has two
mirrors and one witness. The number of mirror components is determined by the size of the virtual
machine disk and the number of failures to tolerate that you set in your vSAN storage policy. A mirror
object is divided into components of a maximum size of 256 GB each.
nIf a virtual machine has one 256 GB disk and you use the default vSAN storage policy, the disk object
will have 2 mirror components of 256 GB each and 1 witness, to make a total of 3 components.
nIf a virtual machine has one 512 GB disk and you use the default vSAN storage policy, the disk object
will have 4 mirror components of 256 GB each and 1 witness, to make a total of 5 components.
See the VMware vSAN Design and Sizing Guide at https://storagehub.vmware.com/#!/vmware-
vsan/vmware-r-vsan-tm-design-and-sizing-guide for explanations of objects, components, mirrors,
witnesses, and vSAN storage policies.
If you enable multiple point-in-time (MPIT) snapshots, you must make allowances for the additional
components that each snapshot creates in the vSAN storage, based on the number of disks per virtual
machine, the size of the disks, the number of PIT snapshots to retain, and the number of failures to
tolerate. When retaining PIT snapshots and using vSAN storage, you must calculate the number of extra
components that you require for each virtual machine:
Number of disks x number of PIT snapshots x number of mirror and witness components
Examples of using this formula demonstrate that retaining PIT snapshots rapidly increases the number of
components in the vSAN storage for every virtual machine that you configure for vSphere Replication:
nYou have a virtual machine with two 256 GB disks for which you retain 10 MPIT snapshots, and you
set the default vSAN storage policy:
n2 (number of disks) x 10 (number of PIT snapshots) x 3 (2 mirror components + 1 witness) = 60
components for this one virtual machine.
VMware vSphere Replication Administration
VMware, Inc. 82
nYou have a virtual machine with two 512 GB disks for which you retain 10 PIT snapshots, and you set
the default vSAN storage policy:
n2 (number of disks) x 10 (number of PIT snapshots) x 5 (4 mirror components of 256 GB each + 1
witness) = 100 components for this one virtual machine.
The number of PIT snapshots that you retain can increase I/O latency on the vSAN storage.
Using vSphere Replication with vSphere Storage DRS
vSphere Replication can operate with target sites that have VMware vSphere® Storage DRS™ enabled.
Storage DRS can detect the data that vSphere Replication copies on the target site and can move
replications without affecting the replication process.
How vSphere Replication Synchronizes Data Between
vCenter Server Sites During Initial Configuration
When you configure a virtual machine for replication, vSphere Replication starts an initial configuration
task during which a replica virtual machine is created on the target site, and data synchronization occurs
between the source and the target vCenter Server site.
The speed of data synchronization depends on the availability of information about block allocation of the
VMDK files. vSphere Replication uses this information to find empty regions of the disks and accelerate
the sync operations by skipping these regions. The speed of data synchronization also depends on the
site for which block allocation information is available.
nIf the allocation information is available at both sites, data synchronization occurs at the highest
possible speed.
nIf the allocation information is available only at the source or the target site, vSphere Replication skips
the empty regions on the VMDK disks at that site, but processes the entire disk at the site where
allocation information is not available. Therefore, data synchronization is slower.
nIf the allocation information is not available at either site, data synchronization is done by comparing
all blocks between the source site and the target site, even if many of the blocks have not been
allocated on the disk by the guest OS. This is the slowest method for data synchronization.
Note The availability of block allocation information has little effect on the speed of data synchronization
for VMDK disks that are almost full.
VMware vSphere Replication Administration
VMware, Inc. 83
Factors That Aect the Availability of Block Allocation
Information
The availability of allocation information and the degree to which vSphere Replication can use it to
accelerate data synchronization depend on the ESXi versions, the vSphere Replication Management
server versions, the type of VMDK disks, and the type of volumes on which the disks reside.
Product Versions at the
Source and the Target
Site
The acceleration of initial synchronization is supported only on ESXi hosts
6.0.x or later.
If the ESXi and the vSphere Replication Server on the source site are 6.x or
later, but the vSphere Replication Server or the hosts at the target site are
not 6.x or later, the allocation information will be available only on the
source site.
If the vSphere Replication Management servers at the source and at the
target site are both 6.x, but one or more ESXi hosts at the target site are
not 6.0 or later, if the vSphere Replication Management server selects a
target host that is not 6.0 or later, there will be no allocation information
available on the target site.
Note Because vSphere Replication Management server 6.x cannot select
only ESXi 6.0 hosts for the initial synchronization, the acceleration of the
operations might vary depending on the selected host. To achieve
maximum acceleration, all ESXi hosts at the target site that act as storage
servers for vSphere Replication should be ESXi 6.0 or later.
The Type of the
Datastore
Disks on VMFS or VSAN datastores provide full allocation information.
NFS datastores cannot provide allocation information for the disks that are
located on them.
Note Replication disks on the source and the target site can be on
different datastore types. The acceleration of the initial synchronization
depends on whether both sites can provide allocation information, or only
one site. If none of the sites can provide allocation information, no
acceleration occurs.
The Type of Virtual Disk Lazy zeroed thick disks, thin disks, and vSAN sparse disks, Space-Efficient
sparse disks, and VMDK sparse snapshots provide allocation information.
Eager zeroed thick disks do not provide allocation information.
Virtual disks that are based on VVOLs are native to the volume.
vSphere Replication 6.x can get allocation information from them only when
they are on the target site. For this reason, the acceleration of the initial
synchronization will be partial.
VMware vSphere Replication Administration
VMware, Inc. 84
Replicating Virtual Machines Using Replication Seeds
You can reduce the network traffic that data transfer generates during the initial full synchronization.
vSphere Replication allows you to copy virtual disk files or use existing files in the target datastore, and
point the files as replication seeds when you configure a replication.
vSphere Replication compares the differences on the source and target site, and replicates only the
changed blocks.
When, during replication configuration, you select a target datastore for the virtual machine or a specific
disk, vSphere Replication looks for disks with the same filename in the target datastore. If a file with the
same name exists, a warning appears in the wizard. You can review and configure the replication seeds
or choose not to use any replication seeds. If you choose not to use the discovered seeds, then replica
files are placed in a new directory with a unique name. If you choose to configure seeds by selecting the
Select seeds check box, then a new page appears in the wizard where you can configure seeds for each
disk on each virtual machine.
Note If you plan to copy files from the source to the target datastore, the source virtual machine must be
powered off before downloading the VMDK files that will be used as seeds for the replication.
Replicating a Virtual Machine in a Single vCenter Server
Instance
You can use vSphere Replication to replicate a virtual machine in a single vCenter Server even if the
vCenter Server instance has only one host in its inventory.
When you configure replication in a single vCenter Server instance, you can select the source site as the
target site for replication. You then configure replication in the same way as for an infrastructure with a
source and a target site. For example, you can replicate a virtual machine to a different datastore
attached to the same host or another host. vSphere Replication prevents you from using the source or
replicated virtual machine's vmdk files as the target of the replication.
The virtual machine name must be unique in the same folder in the vCenter Server inventory. In the
recovery wizard, vSphere Replication does not allow you to select a folder if there is already a virtual
machine with the same name registered to it. During recovery if there is a virtual machine with the same
name, you might see an error message. See Error Recovering Virtual Machine in a Single vCenter Server
Instance for more information.
Best Practices for Using and Configuring
vSphere Replication
Best practices for using and configuring vSphere Replication can prevent your environment from possible
issues during replication.
VMware vSphere Replication Administration
VMware, Inc. 85
Setting the Optimal Recovering Point Objective (RPO) Time
The replication of several thousand virtual machines (VMs) is a bandwidth consuming process.
vSphere Replication lets you set the RPO to 15 minutes, but you must estimate the optimal RPO time to
save bandwidth for the replication and to cover your business requirements for protection of your VMs.
For example, if your business requires replication of 2,000 VMs with an 8-hour RPO, set the RPO time to
8 hours to meet the business needs and save bandwidth. See Calculate Bandwidth for vSphere
Replication for details.
Using Multiple Point in Time (MPIT) Recovery
Each point in time snapshot consumes storage. The amount consumed depends on the data change rate
in the VM. When you set multiple point in time instances for replication of a VM between two
vCenter Server sites, vSphere Replication presents the retained instances as standard snapshots after
recovery. The time required to consolidate snapshots after recovery, increases with the number of
snapshots.
Although vSphere Replication supports up to 24 recovery points, you must set the MPIT to the lowest
number of recovery points that meets your business requirements. For example, if the business
requirement is for 10 recovery points, you must set up vSphere Replication to save only 10 snapshots.
You can set up two recovery points per day for the last five days. As a result, the consumed storage and
the time needed to consolidate the snapshots after recovery are less than if you use the maximum
number of recovery points.
Configuring Quiescing
For VMs with high levels of storage I/O, quiescing of the file system and applications can take several
minutes and impact the performance of the VM . When quiescing a file system and applications for
Windows VMs, vSphere Replication requires a regular VM snapshot before replication. When you
estimate the RPO time, consider the time and resource consumption for the quiescing and for the
consolidation of the snapshots. For example, if you configure a replication of a Windows VM with an RPO
of 15 minutes and quiescing is enabled, vSphere Replication generates a VM snapshot and consolidates
it every 15 minutes.
Configuring Replication Seeds
You can copy virtual disk files of source VMs to the target location and use these files as replication
seeds. By using replication seeds, vSphere Replication reduces the amount of time and network
bandwidth required for the initial full sync process. The UUID of the source and target VMDK files must
match for the replication to be successful and to prevent unintentional overwrites of disk files that belong
to other VMs at the target location.
VMware vSphere Replication Administration
VMware, Inc. 86
Monitoring a Datastore on the Target Site
vSphere Replication requires enough disk space at the target site to replicate a VM. If the available space
is not enough to save the replication files, the replication might fail. You can create an alarm that alerts
you about insufficient storage capacity at the target site.
Configure Replication
vSphere Replication can protect one or more virtual machines and their virtual disks by replicating them
from one vCenter Server instance to another.
This procedure is for configuring replications to a target vCenter Server. To configure a replication to a
cloud provider, see vSphere Replication for Disaster Recovery to the Cloud.
When you configure a replication, you set a recovery point objective (RPO) to determine the maximum
data loss that you can tolerate. For example, an RPO of 1 hour seeks to ensure that a virtual machine
loses the data for no more than 1 hour during the recovery. For smaller RPO values, less data is lost in a
recovery, but more network bandwidth is consumed keeping the replica up to date. The RPO value affects
replication scheduling, but vSphere Replication does not adhere to a strict replication schedule. See How
the Recovery Point Objective Affects Replication Scheduling and How the 5 Minute Recovery Point
Objective Works.
Every time that a virtual machine reaches its RPO target, vSphere Replication records approximately
3800 bytes of data in the vCenter Server events database. If you set a low RPO period, this can quickly
create a large volume of data in the database. To reduce the volume of data that is kept in the
vCenter Server events database, limit the number of days that vCenter Server retains event data. See
Configure Database Retention Policy in the vCenter Server and Host Management Guide. Alternatively,
set a higher RPO value.
vSphere Replication guarantees crash consistency among all the disks that belong to a virtual machine. If
you use quiescing, you might obtain a higher level of consistency. The available quiescing types are
determined by the operating system of the virtual machine. See Compatibility Matrices for vSphere
Replication 8.1 for quiescing support for Windows and Linux virtual machines.
You can configure virtual machines to replicate from and to vSAN datastores. See Using vSphere
Replication with vSAN Storage for the limitations when using vSphere Replication with vSAN.
Prerequisites
nVerify that the vSphere Replication appliance is deployed at the source and the target sites.
nTo enable the quiescing of virtual machines that run Linux guest OS, install the latest version of
VMware Tools on each Linux machine that you plan to replicate.
Procedure
1Log in to the vSphere Client or vSphere Web Client.
2On the home page, click Site Recovery and click Open Site Recovery.
VMware vSphere Replication Administration
VMware, Inc. 87
3On the Site Recovery home page, select a site pair and click View Details.
4Click the Replications tab, select Forward replications or Reverse replications, and click the
Create new replication icon.
5On the Virtual machines page of the Configure Replication wizard, select the virtual machines you
want to replicate and click Next.
6Accept the automatic assignment of a vSphere Replication server or select a particular server on the
target site and click Next.
7On the Target datastore page, select a datastore on which to replicate files.
When replicating multiple virtual machines, you can configure a different target datastore for each
virtual machine.
8(Optional) Select the Select seeds check box.
Replication seeds can reduce the network traffic during the initial full synchronization, but unintended
use of replication seeds might lead to data loss.
9Click Next.
10 (Optional) On the Select seed page, review the suggested replication seeds and change them if
necessary.
You can select seed files for each virtual machine disk and search for seeds by using the dropdown
menu and clicking Browse.
The replica files for the disk are written in the seeds file directory.
11 Select the The selected seeds are correct check box and click Next.
12 On the Replication settings page, use the RPO slider to set the acceptable period for which data
can be lost if a site failure occurs.
The available RPO range is from 5 minutes to 24 hours.
13 (Optional) To save multiple replication instances that can be converted to snapshots of the source
virtual machine during recovery, select Enable point in time instances and adjust the number of
instances to keep.
Note You can keep up to 24 instances for a virtual machine. For example, if you configure
vSphere Replication to keep 6 replication instances per day, the maximum number of days you can
set is 4 days.
The number of replication instances that vSphere Replication keeps depends on the configured
retention policy, but also requires that the RPO period is short enough for these instances to be
created. Because vSphere Replication does not verify whether the RPO settings will create enough
instances to keep, and does not display a warning message if the instances are not enough, you
must ensure that you set vSphere Replication to create the instances that you want to keep. For
example, if you set vSphere Replication to keep 6 replication instances per day, the RPO period must
not exceed 4 hours, so that vSphere Replication can create 6 instances in 24 hours.
VMware vSphere Replication Administration
VMware, Inc. 88
14 (Optional) Enable quiescing for the guest operating system of the source virtual machine.
Note Quiescing options are available only for virtual machines that support quiescing.
vSphere Replication does not support VSS quiescing on Virtual Volumes.
15 (Optional) Select Enable network compression for VR data.
Compressing the replication data that is transferred through the network saves network bandwidth
and might help reduce the amount of buffer memory used on the vSphere Replication server.
However, compressing and decompressing data requires more CPU resources on both the source
site and the server that manages the target datastore.
16 On the Ready to complete page, review the replication settings, and click Finish.
vSphere Replication starts an initial full synchronization of the virtual machine files to the designated
datastore on the target site.
Move a Replication to a New vSphere Replication Server
After configuring vSphere Replication, you can move replications to other vSphere Replication Server
instances. You might do this to complete maintenance tasks on existing servers or to balance the load on
the servers if one server becomes overloaded with replications.
Prerequisites
You must have an additional vSphere Replication Server deployed and registered, apart from the
embedded vSphere Replication Server.
Procedure
1Log in to the vSphere Client or vSphere Web Client on the source site.
2On the home page, click Site Recovery and click Open Site Recovery.
3On the Site Recovery home page, select a site pair and click View Details.
4Click the Replications tab and select a replication from Forward replications or Reverse
replications.
5Click the Reconfigure icon.
6On the Target site page of the Reconfigure Replication wizard, select Manually select vSphere
Replication Server.
7Select a different vSphere Replication Server instance from the list and click Next until you finish the
wizard.
The newly assigned server is updated in the Replication Server column.
Stop Replicating a Virtual Machine
If you do not need to replicate a virtual machine, you can stop the replication of that virtual machine.
VMware vSphere Replication Administration
VMware, Inc. 89
Take a note of the target datastore and the name of the replication that you are about to stop. You need
this information to clean up your environment after you stop the replication.
Prerequisites
Verify that you are logged in the vSphere Web Client or vSphere Client as a VRM virtual machine
replication user or a VRM administrator user. See vSphere Replication Roles Reference.
Procedure
1Log in to the vSphere Client or vSphere Web Client.
2On the home page, click Site Recovery and click Open Site Recovery.
3On the Site Recovery home page, select a site pair and click View Details.
4Click the Replications tab and select a replication from Forward replications or Reverse
replications.
5Click the Remove icon.
vSphere Replication asks you if you want to stop permanently the replication for the selected virtual
machine.
Note The connection between the vSphere Replication sites must be working to stop a replication
on both sites. Alternatively, you can force stop the replication on the local site by selecting Force
stop replication. If the remote site is available, you must also use the Site Recovery user interface to
force stop the corresponding replication on the remote site. If you force stop a forward replication, the
replication can still be recovered by using the Site Recovery user interface on the remote site.
6Click Remove to confirm that you want to stop replicating this virtual machine.
The virtual machine does not replicate to the target site.
When you stop a replication, the following operations are performed at the replication target site.
nIf the VMDK files were created when the replication was first configured, the VMDK files are deleted
from the target site datastore.
Note When you stop a replication, vSphere Replication does not delete the replica directory at the target
datastore. As a result, stale directories remain on VMFS and NFS target datastores, and unused
namespaces remain on vSAN and Virtual Volume target datastores. Because the maximum number of
directories and namespaces on a datastore is limited, you must manually clean them up to free resources
on the datastore. See Clean up the Target Datastore After You Stop a Replication.
nIf you configured the replication to use existing disks at the target site as seeds, the VMDK files are
not deleted and remain on the target datastore.
Clean up the Target Datastore After You Stop a Replication
When you stop a replication, vSphere Replication does not delete the replica directory at the target
datastore.
VMware vSphere Replication Administration
VMware, Inc. 90
As a result, stale directories remain on VMFS and NFS target datastores, and unused namespaces
remain on vSAN and Virtual Volume target datastores. Because the maximum number of directories and
namespaces on a datastore is limited, you must manually clean them up to free resources on the
datastore.
Prerequisites
Verify that you know the name of the replication that was stopped and its target datastore.
Procedure
1Log in to the vSphere Web Client or vSphere Client as an administrator user and navigate to the
datastore that was the target for the stopped replication.
2Select the files tab, enter the name of the stopped replication in the search text box, and locate the
folder that corresponds to this name.
3Verify that the folder is empty and delete it.
Reconfiguring Replications
You can reconfigure a replication to modify its settings.
For example, you can reconfigure the replication to enable or disable a virtual machine disk file for
replication, modify replication options, such as RPO, MPIT retention policy, or quiescing method. You can
also specify a different target datastore for replica configuration and disk files.
Reconfigure Recovery Point Objectives in Replications
You can modify the settings for already configured replications to specify different recovery point
objectives (RPOs).
Procedure
1Log in to the vSphere Client or vSphere Web Client.
2On the home page, click Site Recovery and click Open Site Recovery.
3On the Site Recovery home page, select a site pair and click View Details.
4Click the Replications tab and select a replication from Forward replications or Reverse
replications.
5Click the Reconfigure icon.
6Click Next until you reach the Replication settings page of the Reconfigure Replication wizard.
7Modify the RPO settings for this replication and click Next.
8Click Finish to save your changes.
VMware vSphere Replication Administration
VMware, Inc. 91
Resize the Virtual Machine Disk Files of a Replication that Uses
Replication Seeds
vSphere Replication prevents you from resizing the virtual machine disk files during replication. If you
used replication seeds for the target disk, you can resize the disk manually.
Procedure
1Stop the replication on the source site.
2Resize the disk of the source virtual machine.
3On the target site, resize the disk that is left over after you stopped the replication.
4Configure the replication on the source virtual machine and use the resized disk on the target site as
seed.
Resize Virtual Machine Disk Files of a Replication That Does Not
Use Replication Seeds
vSphere Replication prevents you from resizing the virtual machine disk files during replication. If you did
not use replication seeds during configuration of the target disk, vSphere Replication deletes the target
disk when you stop the replication.
To resize a virtual machine disk if you did not initially use replication seeds, you must perform a recovery,
resize the disk on source and target site manually, and use the target disk as a replication seed to
configure a new replication.
Procedure
1Recover a virtual machine.
2Stop the replication.
3Resize the disk on the source site.
4Resize the disk of the recovered virtual machine on the target site.
5Unregister the recovered virtual machine on the target site, but do not delete the disks.
6Configure a replication by using the disks of the recovered virtual machine as seeds.
Change the Point in Time Settings of a Replication
You can reconfigure a replication to enable or disable the saving of point in time instances, or to change
the number of instances that vSphere Replication keeps.
vSphere Replication can save replication instances that can be used as snapshots after recovery or
planned migration operations. You can save up to 24 point in time instances per VM.
Procedure
1Log in to the vSphere Client or vSphere Web Client.
VMware vSphere Replication Administration
VMware, Inc. 92
2On the home page, click Site Recovery and click Open Site Recovery.
3On the Site Recovery home page, select a site pair and click View Details.
4Click the Replications tab and select a replication from Forward replications or Reverse
replications.
5Click the Reconfigure icon.
6Click Next until you reach the Replication settings page of the Reconfigure Replication wizard.
7In the Point in time instances pane, make the changes that you want to apply and click Next.
Action Procedure
Enable the saving of point in time
instances
Select the Enable point in time instances check box.
Disable the saving of point in time
instances
Deselect the Enable point in time instances check box.
Adjust the number of instances to keep
and for how long to keep them
Use the spin-boxes to adjust the number of instances to keep per day and the
number of past days for which you want to keep replication instances.
Note You cannot keep more than 24 replication instances per virtual machine.
8Click Finish to save your changes.
If you selected to disable the saving of point in time instances, the instances that exist on the target site
are deleted when the next replication instance appears on the target site. The moment when a new
replication instance is saved on the target site depends on the RPO setting.
Change the Target Datastore Location of a Replication
You can reconfigure a replication to change the datastore where replicated data is saved.
Note The old target datastore from which you want to move the replication data must be online. If the
old datastore is inaccessible, the reconfiguration task fails. To change the target datastore when the old
datastore is inaccessible, you must stop the replication to the old datastore and configure another
replication to the new datastore.
Procedure
1Log in to the vSphere Client or vSphere Web Client.
2On the home page, click Site Recovery and click Open Site Recovery.
3On the Site Recovery home page, select a site pair and click View Details.
4Click the Replications tab and select a replication from Forward replications or Reverse
replications.
5Click the Reconfigure icon.
6Click Next to reach the Target datastore page of the Reconfigure Replication wizard.
VMware vSphere Replication Administration
VMware, Inc. 93
7Select the new target datastore.
8Click Next until you reach the Ready to complete page and click Finish to save your settings.
vSphere Replication moves all replicated instances and configuration files to the new target datastore
according to your settings.
VMware vSphere Replication Administration
VMware, Inc. 94
Monitoring and Managing
Replications in
vSphere Replication 11
vSphere Replication provides a management interface where you can monitor and manage virtual
machine replication and connectivity states for local and remote sites.
On the home page of the Site Recovery user interface, you can see all vSphere Replication site
connections and the number of forward and reverse replications between the sites.
To see details about the status of a connection, replication problems, and to manage and monitor
replications between a site pair, click the View Details button.
This chapter includes the following topics:
nMonitor Replication for Virtual Machines
nView Replication Reports for a Site
nIdentifying Replication Problems
nManage vSphere Replication Connections
nManage vSphere Replication Servers
Monitor Replication for Virtual Machines
You can monitor the replication status and view information for virtual machines configured for replication.
For more information about how to identify replication errors, see Identifying Replication Problems.
Prerequisites
nVerify that vSphere Replication is running.
nVerify that the virtual machines are configured for replication.
Procedure
1Log in to the vSphere Client or vSphere Web Client.
2On the home page, click Site Recovery and click Open Site Recovery.
3On the Site Recovery home page, select a site pair and click View Details.
VMware, Inc. 95
4To see details of the virtual machines replicated from this site, select the Replications tab and click
Forward Replications or Reverse replications.
Table 11‑1. Replication Statuses
Status Description Remediation
OK The replication is running. Not needed.
Not Active The replication is not running at the
moment.
nThe source virtual machine is
powered off.
nA communication problem might
have occurred between the source
ESXi host and the target site.
nPower on the source virtual
machine.
nIf all replications for an ESXi host
are in Not Active state, verify that
the security rule Replication-to-
Cloud Traffic is enabled on the host.
This rule opens TCP ports from
10000 to 10010 for outgoing
communication.
Paused The replication is not running at the
moment. A vSphere Replication user
has paused the replication.
From the list of replications, select the
paused replication and click the Resume
icon.
Error The replication is not running at the
moment.
nA configuration error occurred.
nA replication error occurred. For
example, the target site
infrastructure is not accessible.
nReconfigure the replication.
nVerify whether some problem
occurred on the virtual machine by
clicking the Site Pair tab and
clicking Issues.
Status (RPO violation) For replication status OK, Sync, or Full
Sync, the replication is running, but the
RPO that is set for the replication is not
met and is violated.
For replication status Not Active or
Error, the replication is not running,
and the RPO that is set for the
replication is violated.
nThe network connection between
the source and the target site is
dropping intermittently.
nThe bandwidth of the connection
between the source and the target
site is too low.
nThe replication is not running, so
data cannot be replicated on the
target site.
nImprove the network connection
between the source and target site.
nIncrease the RPO period.
nFor replication status Not Active
or Error, address the cause for the
status and wait for the next sync.
Note If a replication is in the Not Active replication state, you might have connected the source
and target sites using network address translation (NAT). vSphere Replication does not support NAT.
Use credential-based authentication and network routing without NAT when connecting the sites.
Another cause for a Not Active replication state might be that the source virtual machine is powered
off. Automatic replication works only on virtual machines that are powered on.
VMware vSphere Replication Administration
VMware, Inc. 96
View Replication Reports for a Site
If you observe frequent RPO violations, want to learn more about the network usage of
vSphere Replication, or check the status of your forward and reverse replications, you can view
replication statistics for source and target vCenter Server sites.
Prerequisites
Verify that vSphere Replication is running.
Procedure
1Log in to the vSphere Client or vSphere Web Client.
2On the home page, click Site Recovery and click Open Site Recovery.
3On the Site Recovery home page, select a site pair and click View Details.
4Click the Site Pair tab and click vSphere Replication reports.
The Reports page displays historic data for vSphere Replication for a certain time period.
nTransferred Bytes - total bytes transferred for all forward replications
nReplications Count - number of forward replications
nRPO Violation Count - number of RPO violations
nTarget Sites Count - number of vSphere Replication site connections
nVR Sites Count - number of registered replication servers
Note Data is collected in 5 minute intervals and the graphs represent aggregated data for each interval.
Therefore, you cannot see the exact moment when a peak value occurred. The displayed data combines
all site pairs.
What to do next
nYou can use the drop-down menu above the reports to change the time range of the reports.
nYou can zoom in the data.
Interpreting Replication Statistics for a Site
You can use the reports that vSphere Replication compiles to optimize your environment for replication,
identify problems in your environment, and reveal their most probable cause.
Server and site connectivity, number of RPO violations, and other metrics give you, as an administrator,
the information you need to diagnose replication issues.
The following sections contain examples of interpreting the data displayed under vSphere Replication
reports on the Site Pair tab of vSphere Replication.
VMware vSphere Replication Administration
VMware, Inc. 97
RPO Violations
The large number of RPO violations can be caused by various problems in the environment, on both the
protected and the recovery site. With more details on historical replication jobs, you can make educated
decisions on how to manage the replication environment.
Table 11‑2. Analyzing RPO Violations
Probable Cause Solution
nThe network bandwidth cannot accommodate all
replications.
nThe replication traffic might have increased.
nThe initial full sync for a large virtual machine is taking
longer than the configured RPO for the virtual machine.
nTo allow lower change rate virtual machines to meet their
RPO objectives, disable the replication on some virtual
machines with high change rate.
nIncrease the network bandwidth for the selected host.
nCheck if the replication traffic has increased. If the traffic has
increased, investigate possible causes, for example the
usage of an application might have changed without you
being informed.
nCheck the historical data for average of transferred bytes for
a notable and sustained increase. If an increase exists,
contact application owners to identify recent events that
might be related to this increase.
nAdjust to a less aggressive RPO or look at other ways to
increase bandwidth to accommodate the current RPO
requirements.
nA connectivity problem exists between the protected and the
recovery site.
nAn infrastructure change might have occurred on the
recovery site.
nTo verify the connection between the protected and recovery
site, check the site connectivity data.
nCheck if the infrastructure on the recovery site has changed
or is experiencing problems that prevent
vSphere Replication from writing on the recovery datastores.
For example, storage bandwidth management changes
made to recovery hosts might result in storage delays during
the replication process.
nCheck on the vSphere Replication Management Server
appliance and the vSphere Replication Server appliance.
Someone might have shut down the appliance or it might
have lost connection.
Transferred Bytes
Corelating the total number of transferred bytes and the number of RPO violations can help you decide
on how much bandwidth might be required to meet RPO objectives.
VMware vSphere Replication Administration
VMware, Inc. 98
Table 11‑3. Analyzing the Rate of Transferred Bytes and RPO Violations
Graph Values Probable Cause Solution
nHigh rate of transferred bytes and high number of RPO
violations
nLow rate of transferred bytes and high number of RPO
violations
The network bandwidth might
be insufficient to
accommodate all replications.
nMaximize the transferred
bytes graph and use the
drop-down menu to filter
the data by virtual
machine. To allow lower
change rate virtual
machines to meet their
RPO objectives, disable
the replication on some
virtual machines with high
change rate.
nIncrease the network
bandwidth for the selected
host.
nHigh rate of transferred bytes and a few or no RPO
violations
nLow rate of transferred bytes and a few or no RPO violations
The environment operates as
expected.
N/A
Identifying Replication Problems
You can view and troubleshoot possible vSphere Replication problems that might occur during replication.
Under Issues on the Site Pair tab of vSphere Replication, you can view and identify possible replication
problems.
Table 11‑4. Possible Replication Problems
Problem Cause Solution
Not
Active
The replication is not active because the virtual machine is
powered off and a warning icon appears. Replication is not running
for that virtual machine.
Power on the virtual machine to resume the
replication.
Paused If you paused the replication, a warning icon appears. Resume the paused replication from the Issues
tab.
Error If you added a disk on a virtual machine which is already
configured for replication, the replication pauses and goes to an
error state.
Reconfigure the replication and enable or disable
the newly added disk.
Error While configuring replication, the replication fails with the incorrect
UUID. For example, the replication seed found and intended for
use has a different UUID from the original hard disk.
Reconfigure the replication.
RPO
Violation
A replication contains an RPO violation. See Reconfigure Recovery Point Objectives in
Replications.
Manage vSphere Replication Connections
You can reconfigure or break the connections between vSphere Replication sites.
VMware vSphere Replication Administration
VMware, Inc. 99
If you have problems with an existing site pair, you can attempt to reconfigure the site pair with the
Reconfigure Site Pair action. When you provide the required credentials, the reconfiguration operation
attempts to repair the existing site pair.
With the Break Site Pair action, you can disconnect vSphere Replication sites.
Note You cannot use the Reconfigure Site Pair action to add a missing pairing or a pairing that was
manually broken with Break Site Pair. If your site pair is missing a pairing, you must use New Site Pair
to configure it.
Prerequisites
Verify that you have paired your protected site with at least one recovery site. To create a connection to a
new recovery site, see Configure vSphere Replication Connections.
Procedure
1Log in to the vSphere Client or vSphere Web Client.
2On the home page, click Site Recovery and click Open Site Recovery.
3On the Site Recovery home page, select a site pair and click View Details.
4Click the Site Pair tab and click Summary.
5Manage the site pair.
Option Description
Reconfigure a site pair a Click Reconfigure Site Pair.
b Enter the address of the Platform Services Controller for the
vSphere Replication Management Server on the second site, provide the user
name and password, and click Next.
c Select the vCenter Server and the services you want to pair, and click Next.
d On the Ready to complete page, review the pairing settings, and click
Finish.
Break a site pair a Click Break Site Pair.
b Select the services you want to disconnect.
c Click Disconnect.
Manage vSphere Replication Servers
You can view, configure, reconnect, and unregister vSphere Replication Server instances that are
registered in your environment.
Prerequisites
Verify that vSphere Replication is running.
Procedure
1Log in to the vSphere Client or vSphere Web Client.
VMware vSphere Replication Administration
VMware, Inc. 100
2On the home page, click Site Recovery and click Open Site Recovery.
3On the Site Recovery home page, select a site pair and click View Details.
4Click the Site Pair tab, click Replication Servers, and select a server from the list.
5To manage the vSphere Replication servers, select an option.
Option Description
Register a virtual machine as vSphere
Replication Server.
Click to register a virtual machine as a vSphere Replication Server. See Register
an Additional vSphere Replication Server.
Unregister the selected vSphere
Replication Server.
Click to unregister the vSphere Replication Server that you selected from the list.
See Unregister and Remove A vSphere Replication Server.
Reconnect the selected vSphere
Replication Server.
Click if the status of the vSphere Replication Server that you selected from the list
is Disconnected.
Configure the selected vSphere
Replication Server.
Click to access the VAMI of the vSphere Replication Server that you selected
from the list.
VMware vSphere Replication Administration
VMware, Inc. 101
Performing a Recovery with
vSphere Replication 12
With vSphere Replication, you can recover virtual machines that were successfully replicated at the target
site.
vSphere Replication performs a sequence of steps to recover replicated virtual machines.
nvSphere Replication prepares for the recovery operation.
nIf you perform a synchronization of the latest changes, vSphere Replication checks that the
source site is available and source virtual machine is powered off before recovering the virtual
machine on the target site. Then vSphere Replication synchronizes the changes from the source
to the target site.
nIf you skip the synchronization and recover with the latest data available, for example, if the
source site is not available, vSphere Replication uses the latest available data at the target site.
nvSphere Replication rebuilds the replicated .vmdk files.
nvSphere Replication reconfigures the newly replicated virtual machine with the correct disk paths.
nvSphere Replication registers the virtual machine with vCenter Server at the target site.
You can recover one virtual machine at a time in Reverse Replications on the Replications tab at the
target site. Optionally, you can power on the recovered virtual machine. The network devices of the
recovered virtual machine are disconnected. You might need to configure the recovered virtual machine
to render it fully operational.
If you had enabled the saving of point in time instances, those instances are converted to snapshots of
the recovered virtual machine. You can use the vSphere Web Client to revert to a snapshot from the list.
This chapter includes the following topics:
nRecover Virtual Machines with vSphere Replication
nFailback of Virtual Machines in vSphere Replication
Recover Virtual Machines with vSphere Replication
With vSphere Replication, you can recover virtual machines that were successfully replicated at the target
site. You can recover one virtual machine at a time.
VMware, Inc. 102
Prerequisites
Verify that the virtual machine at the source site is powered off. If the virtual machine is powered on, an
error message reminds you to power it off.
Procedure
1Log in to the target site by using the vSphere Web Client or vSphere Client.
2On the home page, click Site Recovery and click Open Site Recovery.
3On the Site Recovery home page, select a site pair and click View Details.
4Click the Replications tab and select a replication from Reverse replications.
5Click the Recover icon.
6Select whether to recover the virtual machine with all the latest data, or to recover the virtual machine
with the most recent data available on the target site.
Option Description
Synchronize recent changes Performs a full synchronization of the virtual machine from the source site to the
target site before recovering the virtual machine. Selecting this option avoids data
loss, but it is only available if the data of the source virtual machine is accessible.
You can only select this option if the virtual machine is powered off.
Use latest available data Recovers the virtual machine by using the data from the most recent replication
on the target site, without performing synchronization. Selecting this option results
in the loss of any data that has changed since the most recent replication. Select
this option if the source virtual machine is inaccessible or if its disks are
corrupted.
7(Optional) Select the Power on the virtual machine after recovery check box.
8Click Next.
9Select the recovery folder and click Next.
10 Select the target compute resource and click Next.
11 (Optional) If the virtual machine contains hard disks for which you have not enabled replication, select
a target destination to attach an existing disk or detach the disk, and click Next.
This page only appears if the virtual machine contains hard disks for which you have not enabled
replication.
nTo select a target destination, click Browse and navigate to a folder on a datastore in which disk
file is placed.
nTo detach the disk and exclude disk files from the recovery, click Detach.
12 Click Finish.
vSphere Replication validates the provided input and recovers the virtual machine. If successful, the
virtual machine status changes to Recovered. The virtual machine appears in the inventory of the target
site.
VMware vSphere Replication Administration
VMware, Inc. 103
If you enabled multiple point in time instances when you configured replication for the virtual machine,
vSphere Replication presents the retained instances as standard snapshots after a successful recovery.
You can select one of these snapshots to revert the virtual machine. vSphere Replication does not
preserve the memory state when you revert to a snapshot.
If the recovery fails, the replication of the virtual machines reverts to the replication state before the
attempted recovery. For more information about the failed recovery attempt, check the last recovery error
message in the replication details pane or check vCenter Server tasks.
The recovery might also fail if you use the same name for the virtual machine in a scenario where you
use vSphere Replication to replicate a virtual machine in a single vCenter Server and the vCenter Server
instance has only one host in its inventory. See Error Recovering Virtual Machine in a Single vCenter
Server Instance for more information.
After a successful recovery, vSphere Replication disables the virtual machine for replication if the source
site is still available. When the virtual machine is powered on again, it does not send replication data to
the recovery site. To unconfigure the replication, click the Remove icon.
When the source virtual machine is no longer in the vCenter Server inventory, the replication is removed
from the Forward Replications tab, but it can still be found in the Reverse Replications tab on the
target site.
If a replicated virtual machine is attached to a distributed virtual switch and you attempt to perform a
recovery in an automated DRS cluster, the recovery operation succeeds but the resulting virtual machine
cannot be powered on. To attach it to the correct network, edit the recovered virtual machine settings.
vSphere Replication disconnects virtual machine network adapters to prevent damage in the production
network. After recovery, you must connect the virtual network adapters to the correct network. A target
host or cluster might lose access to the DVS the virtual machine was configured with at the source site. In
this case, manually connect the virtual machine to a network or other DVS to successfully power on the
virtual machine.
Failback of Virtual Machines in vSphere Replication
Failback of virtual machines between vCenter Server sites is a manual task in vSphere Replication.
Automated failback is not available.
After performing a successful recovery on the target vCenter Server site, you can perform failback. Click
Reverse replications and manually configure a new replication in the reverse direction, from the target
site to the source site. The disks on the source site are used as replication seeds, so that
vSphere Replication only synchronizes the changes made to the disk files on the target site. For more
information on replication seeds, see Replicating Virtual Machines Using Replication Seeds.
Before you configure a reverse replication, you must unregister the virtual machine from the inventory on
the source site.
VMware vSphere Replication Administration
VMware, Inc. 104
Troubleshooting
vSphere Replication 13
Known troubleshooting information can help you diagnose and correct problems that occur while
replicating and recovering virtual machines with vSphere Replication.
If you have problems with deploying vSphere Replication, replicating or recovering virtual machines, or
connecting to databases, you can troubleshoot them. To help identify the problem, you might need to
collect and review vSphere Replication logs and send them to VMware Support.
See Chapter 11 Monitoring and Managing Replications in vSphere Replication to learn about replication
states and how to identify replication issues.
You can also search for solutions to problems in the VMware knowledge base at http://kb.vmware.com.
This chapter includes the following topics:
nGenerate vSphere Replication Support Bundle
nvSphere Replication Events and Alarms
nSolutions for Common vSphere Replication Problems
Generate vSphere Replication Support Bundle
You can use the vSphere Replication virtual appliance management interface (VAMI) to generate a
support bundle for system monitoring and troubleshooting. A VMware support engineer might request the
bundle during a support call.
To access and download the vSphere Replication logs, you need access to the vSphere Replication
VAMI. vSphere Replication rotates its logs when the log file reaches 50 MB and keeps at most 12
compressed log files. For more options on how to collect automatically vSphere Replication logs, see
https://kb.vmware.com/s/article/2013091.
Prerequisites
nVerify that the vSphere Replication appliance is powered on.
nVerify that you have administrator privileges to configure the vSphere Replication appliance.
Procedure
1Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
VMware, Inc. 105
2Click the VR tab and click Support.
3Click Generate to generate a .zip package of the current vSphere Replication logs.
A link to the package containing the replication and system logs appears. Log files from the
vSphere Replication appliance and all connected Additional vSphere Replication Servers are included
in the same package.
4Click the link to download the package.
5(Optional) Click Delete next to existing log packages to delete them individually.
Manually Access the vSphere Replication Logs
You can copy and use the vSphere Replication logs for system monitoring and troubleshooting. A
VMware support engineer might request these logs during a support call.
Use SCP or Win SCP to copy log folders and files from the vSphere Replication appliance and all
Additional vSphere Replication Servers.
n/opt/vmware/hms/logs/
n/opt/vmware/var/log/lighttpd/
n/var/log/vmware/
n/var/log/boot.msg
n/var/opt/apache-tomcat/logs/dr.log
vSphere Replication Events and Alarms
vSphere Replication supports event logging. You can define alarms for each event that can trigger if the
event occurs. This feature provides a way to monitor the health of your system and to resolve potential
problems, ensuring reliable virtual machine replication.
You can define and edit alarms to alert you when a specific vSphere Replication event occurs, such as
after you configure a virtual machine for replication. See View and Edit Alarm Settings in the vSphere
Web Client in the vSphere Web Client documentation.
List of vSphere Replication Events
vSphere Replication Replication monitors replications and the underlying replication infrastructure, and
generates different types of events.
VMware vSphere Replication Administration
VMware, Inc. 106
Table 13‑1. vSphere Replication Events
Event Name Event Description Event Type
Categ
ory Event Target
vSphere Replication
configured
Virtual machine is
configured for
vSphere Replication
com.vmware.vcHms.r
eplicationConfiguredE
vent
Info Virtual Machine
vSphere Replication
unconfigured
Virtual machine was
unconfigured for
vSphere Replication
com.vmware.vcHms.r
eplicationUnconfigure
dEvent
Info Virtual Machine
Host configured for
vSphere Replication
Host is configured for
vSphere Replication
com.vmware.vcHms.h
ostConfiguredForHbr
Event
Info Host System
Host unconfigured for
vSphere Replication
Host with managed
object id <Host Moid>
was unconfigured for
vSphere Replication
com.vmware.vcHms.h
ostUnconfiguredForH
brEvent
Info Folder
Virtual machine is not
configured for vSphere
Replication
Virtual machine is
experiencing
problems with
vSphere Replication
and must be
reconfigured
com.vmware.vcHms.v
mMissingReplication
ConfigurationEvent
Error Virtual Machine
VM cleaned up from
vSphere Replication
Virtual machine
cleaned up from
vSphere Replication
configuration
com.vmware.vcHms.v
mReplicationConfigur
ationRemovedEvent
Info Virtual Machine
RPO violated Virtual machine
vSphere Replication
RPO is violated by
<x> minutes
com.vmware.vcHms.r
poViolatedEvent
Error Virtual Machine
RPO restored Virtual machine
vSphere Replication
RPO is not longer
violated
com.vmware.vcHms.r
poRestoredEvent
Info Virtual Machine
Remote vSphere
Replication site is
disconnected
Connection to the
remote
vSphere Replication
site <siteName> is
down
com.vmware.vcHms.r
emoteSiteDownEvent
Error Folder
Remote vSphere
Replication site is
connected
Connection to the
remote
vSphere Replication
site <siteName> is
established
com.vmware.vcHms.r
emoteSiteUpEvent
Info Folder
VR Server
disconnected
vSphere Replication
server <VR Server>
disconnected
com.vmware.vcHms.h
brDisconnectedEvent
Info Folder
VMware vSphere Replication Administration
VMware, Inc. 107
Table 13‑1. vSphere Replication Events (Continued)
Event Name Event Description Event Type
Categ
ory Event Target
VR Server reconnected vSphere Replication
server <VR Server>
reconnected
com.vmware.vcHms.h
brReconnectedEvent
Info Folder
Invalid vSphere
Replication cleaned up
Virtual machine <VM
name> was removed
from vCenter Server
and its
vSphere Replication
state was cleaned up
com.vmware.vcHms.r
eplicationCleanedUp
Event
Info Folder
Virtual machine
recovered from replica
Recovered virtual
machine <VM Name>
from
vSphere Replication
image
com.vmware.vcHms.v
mRecoveredEvent
Info Virtual Machine
vSphere Replication
cannot access
datastore
Datastore is not
accessible for
vSphere Replication
Server
com.vmware.vcHms.d
atastoreInaccessibleE
vent
Error Datastore
vSphere Replication
handled a disk addition
on a virtual machine
vSphere Replication
detected and handled
the addition of a disk
to virtual machine
<VM name>. Disks
added are <Disk
name>
com.vmware.vcHms.h
andledVmDiskAddEv
ent
Info Virtual Machine
vSphere Replication
handled a disk removal
on a virtual machine
vSphere Replication
detected and handled
the addition of a disk
to virtual machine
<VM name>. Disks
added are <Disk
name>
com.vmware.vcHms.h
andledVmDiskRemov
eEvent
Info Virtual Machine
Failed to resolve
storage policy
Failed to resolve a
specific storage policy
for the provided
storage profile ID
<profile ID> and
datastore with
managed object ID
<Moid>
com.vmware.vcHms.f
ailedResolvingStorag
ePolicyEvent
Error Datastore
VMware vSphere Replication Administration
VMware, Inc. 108
Table 13‑1. vSphere Replication Events (Continued)
Event Name Event Description Event Type
Categ
ory Event Target
vSphere Replication
paused
vSphere Replication
was paused as a
result of a
configuration change,
such as a disk being
added or reverting to
a snapshot where
disk states are
different
hbr.primary.SystemPa
usedReplication
Error Virtual Machine
Invalid vSphere
Replication
configuration
Invalid
vSphere Replication
configuration
hbr.primary.InvalidVm
ReplicationConfigurati
onEvent
Error Virtual Machine
Sync started Sync started hbr.primary.DeltaStart
edEvent
Info Virtual Machine
Application consistent
sync completed
Application consistent
sync completed
hbr.primary.AppQuies
cedDeltaCompletedE
vent
Info Virtual Machine
File-system consistent
sync completed
File-system
consistent sync
completed
hbr.primary.FSQuiesc
edDeltaCompletedEv
ent
Info Virtual Machine
Unquiesced crash
consistent sync
completed
Quiescing failed or
the virtual machine is
powered off.
Unquiesced crash
consistent sync
completed.
hbr.primary.Unquiesc
edDeltaCompletedEv
ent
Warni
ng
Virtual Machine
Crash consistent sync
completed
Crash consistent sync
completed
hbr.primary.DeltaCom
pletedEvent
Info Virtual Machine
Sync failed to start Sync failed to start hbr.primary.FailedToS
tartDeltaEvent
Error Virtual Machine
Full-sync started Full-sync started hbr.primary.SyncStart
edEvent
Info Virtual Machine
Full-sync completed Full-sync completed hbr.primary.SyncCom
pletedEvent
Info Virtual Machine
Full-sync failed to start Full-sync failed to
start
hbr.primary.FailedToS
tartSyncEvent
Error Virtual Machine
Sync aborted Sync aborted hbr.primary.DeltaAbor
tedEvent
Warni
ng
Virtual Machine
No connection to VR
Server
No connection to
vSphere Replication
Server
hbr.primary.NoConne
ctionToHbrServerEve
nt
Warni
ng
Virtual Machine
VMware vSphere Replication Administration
VMware, Inc. 109
Table 13‑1. vSphere Replication Events (Continued)
Event Name Event Description Event Type
Categ
ory Event Target
Connection to VR
Server restored
Connection to VR
Server has been
restored
hbr.primary.Connectio
nRestoredToHbrServ
erEvent
Info Virtual Machine
vSphere Replication
configuration changed
vSphere Replication
configuration has
been changed
hbr.primary.VmReplic
ationConfigurationCh
angedEvent
Info Virtual Machine
Solutions for Common vSphere Replication Problems
Known troubleshooting information can help you diagnose and correct problems with
vSphere Replication.
Error at vService Bindings When Deploying the vSphere
Replication Appliance
When you deploy the vSphere Replication appliance, you get an error at vService bindings in the Deploy
OVF Template wizard.
Problem
When you deploy the vSphere Replication, an error appears at vService bindings in the Deploy OVF
Template wizard.
Unsupported section '{http://www.vmware.com/schema/ovf}vServiceDependencySection'(A vService
dependency)
Cause
This error is typically the result of the vCenter Management Web service being paused or stopped.
Solution
Attempt to start the vCenter Management Web service. If vCenter Server is running as a Linux virtual
appliance, reboot the appliance.
OVF Package is Invalid and Cannot be Deployed
When you attempt to deploy OVF for the vSphere Replication appliance, an OVF package error might
occur.
Problem
The error OVF package is invalid and cannot be deployed might appear while you attempt to
deploy the vSphere Replication appliance.
VMware vSphere Replication Administration
VMware, Inc. 110
Cause
This problem is due to the vCenter Server port being changed from the default of 80.
Solution
If possible, change the vCenter Server port back to 80.
Connection Errors Between vSphere Replication and SQL Server
Cannot Be Resolved
You cannot resolve a connection error between the vSphere Replication appliance and SQL Server.
Problem
vSphere Replication cannot connect to SQL Server, and you have insufficient information to solve this
problem.
Cause
Several issues can cause this problem, and initially available information about the problem is insufficient
to affect a resolution.
Solution
1Use a file management tool to connect to the vSphere Replication appliance.
For example, you might use SCP or WinSCP. Connect using the root account, which is the same
account used to connect to the VAMI.
2Delete any files you find in /opt/vmware/hms/logs.
3Connect to the VAMI and attempt to save the vSphere Replication configuration.
This action recreates the SQL error.
4Connect to the vSphere Replication appliance again and find the hms-configtool.log file which is
in /opt/vmware/hms/logs.
This log file contains information about the error that just occurred. Use this information to
troubleshoot the connection problem, or provide the information to VMware for further assistance.
See Reconfigure vSphere Replication to Use an External Database.
Configuring Replication Fails for Virtual Machines with Two Disks
on Dierent Datastores
If you try to configure vSphere Replication on a virtual machine that includes two disks that are contained
in different datastores, the configuration fails.
VMware vSphere Replication Administration
VMware, Inc. 111
Problem
Configuration of replication fails with the following error:
Multiple source disks with device keys device_keys point to the same destination datastore and file
path disk_path.
Cause
This problem occurs because vSphere Replication does not generate a unique datastore path or file
name for the destination virtual disk.
Solution
If you select different datastores for the VMDK files on the protected site, you must also select different
datastores for the target VMDK files on the secondary site.
Alternatively, you can create a unique datastore path by placing the VMDK files in separate folders on a
single target datastore on the secondary site.
vSphere Replication Service Fails with Unresolved Host Error
If the address of vCenter Server is not set to a fully qualified domain name (FQDN) or to a literal address,
the vSphere Replication service can stop unexpectedly or fail to start after a reboot.
Problem
The vSphere Replication service stops running or does not start after a reboot. The error unable to
resolve host: non-fully-qualified-name appears in the vSphere Replication logs.
Solution
1In the vSphere Web Client or vSphere Client, select the vCenter Server instance and click the
Configure tab.
2Under Settings, click Advanced Settings and verify that the VirtualCenter.FQDN key is set to
either a fully qualified domain name or to a literal address.
3Use a supported browser to log in to the vSphere Replication VAMI.
The URL for the VAMI is https://vr-appliance-address:5480.
4(Optional) Review and confirm the browser security exception to proceed to the login page.
5Enter the root user name and password for the appliance.
You configured the root password during the OVF deployment of the vSphere Replication appliance.
6Click the VR tab and click Configuration.
7Enter the same FQDN or literal address for vCenter Server, as you set for the VirtualCenter.FQDN
key.
8Click Save and Restart Service to apply the changes.
VMware vSphere Replication Administration
VMware, Inc. 112
Error Recovering Virtual Machine in a Single vCenter Server
Instance
You might receive an error message when you are recovering a virtual machine with the same name in a
single vCenter Server instance.
Problem
Unable to register the recovered virtual machine VM_name with configuration file
<path_to_vmx_config_file>.
Cause
You cannot recover virtual machines with the same name in the same source and destination folder in the
vCenter Server inventory.
Solution
Recover the virtual machine in a different VMs and Templates folder in the same data center. Optionally,
after successful recovery, you can remove the old virtual machine from the vCenter inventory and drag
the recovered virtual machine to the required virtual machine folder.
vSphere Replication RPO Violations
You might encounter RPO violations even if vSphere Replication is running successfully at the recovery
site.
Problem
When you replicate virtual machines, you might encounter RPO violations.
Cause
RPO violations might occur for one of the following reasons:
nNetwork connectivity problems between source hosts and vSphere Replication servers at the target
site.
nAs a result of changing the IP address, the vSphere Replication server has a different IP address.
nThe vSphere Replication server cannot access the target datastore.
nSlow bandwidth between the source hosts and the vSphere Replication servers.
To calculate bandwidth requirements, see http://kb.vmware.com/kb/2037268.
Solution
nSearch the vmkernel.log at the source host for the vSphere Replication server IP address to see
any network connectivity problems.
nVerify that the vSphere Replication server IP address is the same. If it is different, reconfigure all the
replications, so that the source hosts use the new IP address.
VMware vSphere Replication Administration
VMware, Inc. 113
nCheck /var/log/vmware/*hbrsrv* at the vSphere Replication appliance at the target site for
problems with the server accessing a target datastore.
nVerify that you have sufficient bandwidth.
vSphere Replication Appliance Extension Cannot Be Deleted
If you delete the vSphere Replication appliance virtual machine, the virtual appliance management
interface (VAMI) is not available to delete the appliance extension that still exists in vCenter Server.
Problem
Deleting the vSphere Replication appliance does not remove the vSphere Replication extension from
vCenter Server.
Solution
1Use the Managed Object Browser (MOB) to delete the vSphere Replication extension manually.
2Redeploy the appliance and reconfigure the replications.
For more information, see Unregister vSphere Replication from vCenter Server If the Appliance Was
Deleted.
vSphere Replication Does Not Start After Moving the Host
If you move the ESXi Server on which the vSphere Replication appliance runs to the inventory of another
vCenter Server instance, vSphere Replication operations are not available. If you reinstall
vCenter Server, vSphere Replication operations are also unavailable.
Problem
If the ESXi Server instance on which vSphere Replication runs is disconnected from vCenter Server and
is connected to another vCenter Server instance, you cannot access vSphere Replication functions. If you
try to restart vSphere Replication, the service does not start.
Cause
The OVF environment for the vSphere Replication appliance is stored in the vCenter Server database.
When the ESXi host is removed from the vCenter Server inventory, the OVF environment for the
vSphere Replication appliance is lost. This action disables the mechanisms that the vSphere Replication
appliance uses to authenticate with vCenter Server.
Solution
1(Optional) If possible, redeploy the vSphere Replication appliance and configure all replications and if
possible, reuse the existing .vmdk files as initial copies.
a Power off the old vSphere Replication appliances.
b Remove any temporary hbr* files from the target datastore folders.
VMware vSphere Replication Administration
VMware, Inc. 114
c Deploy new vSphere Replication appliances and connect the sites.
d Configure all replications, reusing the existing replica .vmdk files as initial copies.
2(Optional) If you cannot redeploy the vSphere Replication appliance, use the VAMI to connect
vSphere Replication to the original vCenter Server instance.
a Reconnect the ESXi host to vCenter Server.
b Connect to the VAMI of the vSphere Replication server at https://vr-server-address:5480 .
c Click the VR tab and click Configuration.
d Enter username:password@vcenter_server_address in vCenter Server Address, where user
name and password are credentials of the vCenter Server administrator.
e Enter the correct managed object id of the appliance VM in Appliance VM MO value. Use the
vCenter Server MOB to obtain the appliance id.
f Click Save and Restart Service.
If you use the VAMI solution, you must repeat the steps each time that you change the
vSphere Replication certificate.
Unexpected vSphere Replication Failure Results in a Generic Error
vSphere Replication includes a generic error message in the logs when certain unexpected failures occur.
Problem
Certain unexpected vSphere Replication failures result in the error message
A generic error occurred in the vSphere Replication Management Server.
In addition to the generic error, the message provides more detailed information about the problem,
similar to the following examples.
nA generic error occurred in the vSphere Replication Management Server. Exception
details: 'org.apache.http.conn.HttpHostConnectException: Connection to
https://vCenter_Server_address refused'. This error relates to problems connecting to
vCenter Server.
nSynchronization monitoring has stopped. Please verify replication traffic
connectivity between the source host and the target vSphere Replication Server.
Synchronization monitoring will resume when connectivity issues are resolved. This
problem relates to a synchronization operation error.
VMware vSphere Replication Administration
VMware, Inc. 115
nError - Unable to reverse replication for the virtual machine 'virtual machine
name'. VRM Server generic error. Please check the documentation for any
troubleshooting information. Exception details:
'org.hibernate.exception.LockAcquisitionException: Transaction (Process ID 57)
was deadlocked on lock resources with another process and has been chosen as the
deadlock victim. Rerun the transaction. This problem relates to a deadlock in Microsoft SQL
Server.
Cause
vSphere Replication sends this message when it encounters configuration or infrastructure errors. For
example, network issues, database connection issues, or host overload.
Solution
Check the Exception details message for information about the problem. Depending on the details of
the message, you can choose to retry the failed operation, restart vSphere Replication, or correct the
infrastructure.
Reconnecting Sites Fails If One of the vCenter Servers Has
Changed Its IP Address
When the vCenter Server address of one site changes, the connection status between two sites is
displayed as Not connected and you cannot reconnect the sites.
Problem
If you have two connected sites, and the vCenter Server address of either site changes, the connection
status Not connected appears and you cannot reconnect the sites.
Solution
1Log in the VAMI for the vSphere Replication appliance that is registered to the vCenter Server whose
address has changed.
2Reconfigure the vSphere Replication appliance with the new vCenter Server address.
3Click Save and Restart.
4In the vSphere Replication user interface, from the list of target sites, select the connection that
indicates Not connected status.
5Click the Reconfigure Site Pair button.
The Reconfigure Site Pair wizard starts.
6Enter the PSC address and the credentials of a user that has the VRM remote.Manage VRM
privilege assigned, and click Next.
You can verify the PSC address in the vSphere Replication VAMI on the target site, on the SSO tab
under VR, in the LookupService Address text box.
VMware vSphere Replication Administration
VMware, Inc. 116
7Select a vCenter Server on the second site, select vSphere Replication from the list of services, and
click Next.
8Review the settings and click Finish.
9Verify that the connection between the two sites is successfully restored and the status is Connected.
Uploading a Valid Certificate to vSphere Replication Results in a
Warning
When you upload a custom certificate to the vSphere Replication appliance, you see a warning even if
the certificate is valid.
Problem
When you use the virtual appliance management interface (VAMI) in Internet Explorer to upload
certificates to the vSphere Replication appliance, you see a certificate error:
The certificate installed with warnings. Remote VRM systems with the 'Accept only SSL certificate
signed by a
trusted CA' option enabled may be unable to connect to this site for the following reason: The
certificate was not issued
for use with the given hostname: vr_appliance_hostname.
Solution
Ignore this error, or connect to the VAMI by using a supported browser other than Internet Explorer.
vSphere Replication Server Registration Takes Several Minutes
vSphere Replication server registration might take a long time depending on the number of hosts in the
vCenter Server inventory.
Problem
If the vCenter Server inventory contains a few hundred or more hosts, the Register VR Server task takes
more than a few minutes to complete.
Cause
vSphere Replication updates the SSL thumbprint registry of each host. The vCenter Server Events pane
displays Host is configured for vSphere Replication for each host as the vSphere Replication
server registration task progresses.
Solution
1Wait for the registration task to complete.
After it finishes, you can use vSphere Replication for incoming replication traffic.
2Alternatively, edit /opt/vmware/hms/conf/hms-configuration.xml and change the hms-config-
host-at-hbr-threadpool-size parameter to a higher value to enable parallel processing of more
hosts at a time and restart the vSphere Replication management server /etc/init.d/hms restart
VMware vSphere Replication Administration
VMware, Inc. 117
Generating Support Bundles Disrupts vSphere Replication
Recovery
If you generate a vSphere Replication log bundle and at the same time attempt to run a recovery, the
recovery might fail.
Problem
In heavily loaded environments, generating log bundles can cause vSphere Replication connection
problems during recovery operations. Recovery fails with the error
A generic error occurred in the vSphere Replication Management Server. Exception details: 'Failed
write-locking object: object_ID'.
Cause
vSphere Replication server is blocked when the log bundle is generated. This situation occurs if the
storage for the vSphere Replication virtual machine is overloaded.
Solution
Rerun the recovery. If the recovery still fails, reevaluate the storage bandwidth requirements of the cluster
on which vSphere Replication is running, and the network bandwidth if the storage is NAS.
vSphere Replication Operations Take a Long Time to Complete
Some vSphere Replication operations might take a long time to complete during a heavy load.
Problem
Operations such as recovering virtual machines fail with the following error:
Object object_GUID is locked by another ongoing operation in vSphere Replication Management Server.
Try again later.
Cause
When running under heavy load, some vSphere Replication operations might take a longer time to
complete and other operations can fail with this error because a background update operation on the
replication group is slow and holds a lock on the replication for a long time.
Solution
Retry the failed operation after a few minutes.
vSphere Replication Operations Fail with Authentication Error
An error message appears when you try to configure a replication between two sites, though the sites are
paired.
VMware vSphere Replication Administration
VMware, Inc. 118
Problem
If two sites are paired, and, while the vSphere Web Client is open on the source site, you restart the
vCenter Server and the vSphere Replication Management Server on the target site, when you try to
configure a replication from the source to the target site, the configuration task fails with the following
error message:
Cannot verify login credentials. The authentication service infrastructure is not
responding..
The following error message appears in the HMS log file on the restarted target site:
The VMOMI call does not contain an HMS session ID.
The following error message appears in the HMS log file on the source site:
Cannot check login credentials. Authentication service infrastructure failed.
Cause
When you establish a connection between two sites, the connection is cached in the user session on both
sites. When you restart the vCenter Server and the vSphere Replication Management Server on the
target site, the information about user sessions is discarded. Because the vSphere Web Client is open
and connected to the source site, the login data remains cached in the vSphere Replication Management
Server. When you configure a replication, the source site tries to connect to the target site using the
cached login data. The target site interprets that data as stale and stops the reconnecting thread.
Solution
nClick the global Refresh button in the vSphere Web Client.
nLog out the vSphere Web Client and log back in.
vSphere Replication Does Not Display Reverse Replications When
the Source Site Is Inaccessible
The list of reverse replications between two remote sites fails to populate when the connection to the local
site is refused.
Problem
When you refresh the reverse replications list on a remote site soon after the connection to the local site
has become unavailable, the replications do not display due to a communication error between the two
sites.
Solution
Refresh the vSphere Web Client or vSphere Client. Alternatively, log out and log in again.
vSphere Replication is Inaccessible After Changing vCenter Server
Certificate
If you change the SSL certificate of vCenter Server, you cannot access vSphere Replication.
VMware vSphere Replication Administration
VMware, Inc. 119
Problem
vSphere Replication uses certificate-based authentication to connect to vCenter Server. If you change the
vCenter Server certificate, vSphere Replication is inaccessible.
Cause
The vSphere Replication database contains the old vCenter Server certificate.
Solution
uLog into the virtual appliance management interface (VAMI) of the vSphere Replication appliance and
click Configuration > Save and Restart Service.
Do not change any configuration information before clicking Save and Restart Service.
vSphere Replication restarts with the new vCenter Server certificate.
vSphere Replication Cannot Establish a Connection to the Hosts
Replications fail because vSphere Replication cannot connect to the hosts.
Problem
vSphere Replication needs access to port 80. You might see forbidden HTTP connections in the
vSphere Replication logs.
Solution
Make sure the vSphere Replication appliance has access to port 80 on the storage hosts.
For a list of ports that must be open for vSphere Replication, see vSphere Replication Network Ports.
Anti-virus Agent in Firewall Terminates Virtual Machine
Replication
If a virtual machine contains virus information, an anti-virus agent in the firewall might detect the virus
data and terminate the connection during replication.
Problem
When you reconfigure the replication and start a full sync, the replication stops in the same data block
with the virus information in it unless the virus data has moved on the disk. Clones of the disk fail, but
other virtual machines of the same size and configuration from the same host replicating to the same
destination datastore replicate successfully.
Solution
Remove the virus information from the replicated guest to avoid replicating virus information.
Make an exception in the anti-virus rules in the firewall to allow the replication to proceed.
VMware vSphere Replication Administration
VMware, Inc. 120
Initial Full Synchronization of Virtual Machine Files to VMware
vSAN Storage Is Slow
When using VMware vSAN storage and configuring vSphere Replication on multiple virtual machines, the
initial full synchronization takes a long time to complete.
Problem
Configuring vSphere Replication on a large number of virtual machines simultaneously when using
vSphere Replication with vSAN storage causes the initial full synchronization of the virtual machine files
to run very slowly.
Cause
Initial full synchronization operations generate heavy I/O traffic. Configuring too many replications at the
same time can overload the vSAN storage.
Solution
Configure vSphere Replication in batches of a maximum of 30 virtual machines at a time.
Configuring Replication Fails Because Another Virtual Machine
has the Same Instance UUID
You cannot configure a replication because another virtual machine already exists at the target site.
Problem
You might see the following error message:
Unable to configure replication for virtual machine VM_name because group group_name cannot be created.
Another virtual machine configured_VM_name}' that has the same instance UUID instance_UUID already
exists on protection site source_site_name.
Cause
This error message might appear on the following occasions.
nIf, due to a connectivity issue or some other problem, an orphaned replication remains on one of the
sites while it is deleted from the other site, the orphaned replication prevents you from configuring a
new replication for the same virtual machine.
nIf you have paired two sites and reinstall the vSphere Replication Management server appliance or
reset its database on one of the sites, the other site contains information about the old appliance and
database, and prevents you from configuring new replications.
VMware vSphere Replication Administration
VMware, Inc. 121
Solution
nIf you have not reinstalled the vSphere Replication Management server, an orphaned replication
exists in your environment, and you know the GID value of that replication, use the Managed Object
Browser (MOB) of the vSphere Replication Management server to delete the replication.
a Navigate to https://vrms_address:8043/mob/?moid=GID-orphaned_replication_GID&vmodl=1
Where vrms_address is the IP address of the vSphere Replication Management server.
b Invoke the destroy method to remove the replication from the site on which the
vSphere Replication Management server runs.
nIf you have not reinstalled the vSphere Replication Management server and orphaned replication
exists in your environment, but you do not know the GID value of that replication, the value can be
retrieved from the log files or the vSphere Replication Management server database. Contact
VMware Global Support Services for assistance.
nIf the vSphere Replication Management server on one of the sites was reinstalled or otherwise reset:
a Reinstall the vSphere Replication Management server at the other site or reset its database.
b Connect the sites and register any additional vSphere Replication server appliances.
c Remove any temporary hbr* files left over from the target datastore folders.
d Configure all replications, reusing the existing replica .vmdk files as replication seeds.
Not Active Replication Status of Virtual Machines
The replication status of a virtual machine might appear as Not active without an obvious reason.
Problem
You use a vSphere Replication Server on the target site to manage replications, and the replication status
for the virtual machines that this vSphere Replication Server manages is Not active though there is no
obvious reason for this status.
Cause
The vSphere Replication appliance does not check the connectivity between vSphere Replication Server
instances that you register and the ESXi host on the primary site. If you deploy vSphere Replication
servers on the target site, but these servers cannot access the ESXi host on the primary site, the
vSphere Replication servers register successfully with the vSphere Replication appliance, but cannot
operate as expected.
Solution
uIf the replication status of a virtual machine is Not active, check the network connectivity between
the host on which the replicated virtual machine is running and the target vSphere Replication Server.
VMware vSphere Replication Administration
VMware, Inc. 122
vSphere Replication Operations Run Slowly as the Number of
Replications Increases
As you increase the number of virtual machines that you replicate, vSphere Replication operations can
run more slowly.
Problem
Response times for vSphere Replication operations can increase as you replicate more virtual machines.
You possibly experience recovery operation timeouts or failures for a few virtual machines, and RPO
violations.
Cause
Every virtual machine in a datastore generates regular read and write operations. Configuring
vSphere Replication on those virtual machines adds another read operation to the regular read and write
operations, which increases the I/O load on the storage. The performance of vSphere Replication
depends on the I/O load of the virtual machines that you replicate and on the capabilities of the storage
hardware. If the load generated by the virtual machines, combined with the extra I/O operations that
vSphere Replication introduces, exceeds the capabilities of your storage hardware, you might experience
slow response times.
Solution
When running vSphere Replication, if response times are greater than 30 ms, reduce the number of
virtual machines that you replicate to the datastore. Alternatively, increase the capabilities of your
hardware. If you suspect that the I/O load on the storage is an issue and you are using VMware vSAN
storage, monitor the I/O latency by using the monitoring tool in the vSAN interface.
Error at Reconfiguring the vSphere Replication Management
Server from the Virtual Appliance Management Interface
When you click Save and Restart in the virtual appliance management interface (VAMI) of
vSphere Replication, the HMS service cannot start, and you can no longer manage replications.
Problem
If you use the virtual appliance management interface (VAMI) to install a new SSL certificate, to change
the IP address of the VRM host, or apply another setting on the VR tab, and you click Save and Restart,
the following error message appears:
Missing command-line argument.
Cause
The OVF environment of the vSphere Replication appliance might be missing or corrupted.
VMware vSphere Replication Administration
VMware, Inc. 123
Solution
1Establish an SSH connection to the vSphere Replication appliance and navigate
to /opt/vmware/etc/vami/.
2Open the ovfEnv.xml.
a If the ovfEnv.xml file is not empty, search for the vServiceEnvironmentSection element. If the
vServiceEnvironmentSection element is missing, there might be a problem with the vCenter
Management Web Services process on the vCenter Server machine. Verify that the vCenter
Management Web Services is running on the vCenter Server machine and then try powering the
vSphere Replication appliance off and on. To power the appliance off and on, use the
vSphere Web Client while you are connected to the vCenter Server, and not directly to the ESXi
host.
b If the ovfEnv.xml file is empty, try to power off and on the vSphere Replication appliance by
using the vSphere Web Client while you are connected to the vCenter Server, and not directly to
the ESXi host.
3If powering the vSphere Replication appliance does not resolve the issue, most certainly the
appliance has been temporarily removed and re-added in the vCenter Server. There is no solution for
restoring the OVF environment in that case. You must re-deploy the vSphere Replication appliance by
using an empty database, and configure all replications from scratch.
Unable to Establish an SSH Connection to the vSphere Replication
Appliance
SSH connections to the vSphere Replication appliance are disabled.
Problem
To apply custom settings to vSphere Replication, you need to establish an SSH connection to the
vSphere Replication appliance, and modify certain configuration files.
To transfer files from and to the vSphere Replication appliance, you use SCP or SFTP protocol.
Because the SSH connections are disabled, you cannot apply the changes that you need, and you
cannot transfer files.
Cause
By default, SSH connections to the vSphere Replication appliance are disabled to strengthen the security
in your environment.
Solution
Prerequisites
Verify that you have the root user credentials to log in to the vSphere Replication appliance.
VMware vSphere Replication Administration
VMware, Inc. 124
Procedure
1In the vSphere Web Client, right-click the vSphere Replication Management (HMS) virtual
machine, and select Open Console.
2Log in as the root user, and run the following script.
/usr/bin/enable-sshd.sh
Procedure
The script configures the vSphere Replication appliance to enable SSH connections.
The Replication Pauses When You Add a New Disk To the Source
VM
You added a new disk to the source VM, which made the replication pause.
Problem
When you add a new disk to the source VM, the replication pauses.
Cause
vSphere Replication detects the addition of a disk to a VM and generates an event such as vSphere
Replication handled a disk addition on a virtual machine.
Solution
Include or exclude the new disk in the replication.
You can set up and view an alarm for the event by using the vSphere Web Client. See the vSphere
Administration with the vSphere Client documentation for details.
The vSphere Replication Appliance Root File System Switches to
Read-only Mode and Login Fails
The vSphere Replication appliance root file system switches to read-only mode, and you cannot log in.
Problem
vSphere Replication server cannot update its database and becomes unresponsive. Login through
vSphere Replication virtual appliance management interface (VAMI) UI, ssh, or console fails. Attempts to
use the appliance console to log in result in the following error message:
Read-only file system.
Cause
To prevent data corruption the vSphere Replication appliance is configured to put its root file system in
read-only mode when it detects a problem with the underlying storage.
VMware vSphere Replication Administration
VMware, Inc. 125
Solution
1Resolve the storage problem or use Storage vMotion to migrate the vSphere Replication appliance to
another storage.
2Reboot the vSphere Replication appliance.
3Verify that you can log in by using the VAMI UI and the appliance console.
VMware vSphere Replication Administration
VMware, Inc. 126