Avamar VMware image backups fail with error "Insufficient permissions in the host operating system" due to VDDK failure to retrieve licenses for supplied user credentials

           

   Article Number:     481627                                   Article Version: 3     Article Type:    Break Fix 
   

 


Product:

 

Avamar Client for VMware 7.0.102-42,Avamar Client for VMware 7.0.102-43,Avamar Client for VMware 7.0.102-47,Avamar Client for VMware 7.0.103-32,Avamar Client for VMware 7.1.100-302,Avamar Client for VMware 7.1.100-370

 

Issue:

 

 

   

      VMs Image Level Backups fail while opening disk with below errors:   

   
2016-04-05 17:59:03 avvcbimage Info <19718>: Found Disk from Device Key: '2000'.2016-04-05 17:59:03 avvcbimage Info <9674>: virtual disk [DS] VM_Folder/VM_Name.vmdk will be connected readonly2016-04-05 17:59:03 avvcbimage Info <16041>: VDDK:VixDiskLib: VixDiskLib_OpenEx: Open a disk.2016-04-05 17:59:03 avvcbimage Info <16041>: VDDK:VixDiskLibVim: VixDiskLibVim_GetNfcTicket: Get NFC ticket for [DS] VM_Folder/VM_Name.vmdk.2016-04-05 17:59:11 avvcbimage Info <10684>: Setting ctl message version to 3 (from 1)2016-04-05 17:59:11 avvcbimage Info <16136>: Setting ctl max message size to 2684354562016-04-05 17:59:11 avvcbimage Info <16041>: VDDK:VixDiskLibVim: Licenses could not be retrieved for supplied user credentials.2016-04-05 17:59:13 avvcbimage Info <16041>: VDDK:VixDiskLib: Error occurred when obtaining NFC ticket for: [DS] VM_Folder/VM_Name.vmdk Error 3014 at 3707.2016-04-05 17:59:13 avvcbimage Error <0000>: [IMG0008] Failed to connect to virtual disk [DS] VM_Folder/VM_Name.vmdk (3014) (3014) Insufficient permissions in the host operating system2016-04-05 17:59:13 avvcbimage Info <19644>: Connecting virtual disk [DS] VM_Folder/VM_Name.vmdk2016-04-05 17:59:13 avvcbimage Error <0000>: [IMG0008] VixDiskLib_Open([DS] VM_Folder/VM_Name.vmdk) returned (3014) Insufficient permissions in the host operating system2016-04-05 17:59:15 avvcbimage Info <9772>: Starting graceful (staged) termination, VixDiskLib_Open attempt to connect to virtual disk failed (wrap-up stage)2016-04-05 17:59:15 avvcbimage Info <16052>: Terminating backup of all remaining virtual disks2016-04-05 17:59:15 avvcbimage Info <16041>: VDDK:VixDiskLib: VixDiskLib_Disconnect: Disconnect.2016-04-05 17:59:15 avvcbimage Info <16041>: VDDK:VixDiskLib: VixDiskLib_Cleanup: Remove previous mount points and clean up .2016-04-05 17:59:15 avvcbimage Info <16041>: VDDK:VixDiskLib: VixDiskLib_Connect: Establish connection.2016-04-05 17:59:15 avvcbimage Info <16041>: VDDK:VixDiskLib: VixDiskLib_Disconnect: Disconnect.2016-04-05 17:59:15 avvcbimage Info <9672>: Disconnected from VM    
                                                             

 

 

Cause:

 

 

   

      The account used by Avamar to access the vCenter server was created at the Datacenter level not the vCenter one.   

    In the backup logs the VDDK version used by the proxy is 5.5.1   
        
2016-04-05 17:58:39 avvcbimage Info <16041>: VDDK:VMware VixDiskLib (5.5) Release build-1601882    
   
    The VMware Release notes for this VDDK version has the following information   
    https://www.vmware.com/support/developer/vddk/vddk-551-releasenotes.html   
   
    Error message for insufficient Datacenter role was misleading.     
      VDDK 5.1.x and VDDK 5.5 require the backup administrator to have permissions for the vCenter role, instead of just the Datacenter role. If the user has restricted permissions of a lesser role, the misleading message not licensed to use this function would appear. This has been the case since VDDK 5.1. It is fixed in this update by logging the message "Licenses could not be retrieved for supplied user credentials".
   
   
                                                                

 

 

Resolution:

 

 

   

      Create the vCenter account used by Avamar at the vCenter level not the Datacenter one.