Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

RecoverPoint for VMs: ESXi Splitter vib installation and start-up issues with VMKernel.Boot.execInstalledOnly set to True on ESXi host.

Summary: Kdriver installation or startup fails on ESXi host that has VMkernel.Boot.execInstalledOnly set to true, which may also cause RecoverPoint for VMs installation failure due to missing splitter. ...

This article applies to   This article does not apply to 
Check out resources for

Symptoms

Kdriver vib installation fails with many errors, such as: 
[root@localhost:~] esxcli software vib install -v /scratch/kdriver_RPESX-00.5.3.1.1.0.m.149.000.vib --no-sig-check
 [LiveInstallationError]
 Error in running ['/etc/init.d/rp-splitterd', 'start', 'install']:
 Return code: 1
 Output: Wed Nov 10 18:24:18 UTC 2021: rp_splitterd: Starting rp_splitter
 Wed Nov 10 18:24:18 UTC 2021: rp_splitterd: DEBUG (notice true==0): isKdriverRunning=1, isSplitterRunning=1
 --- /etc/vmware/esx.conf
 +++ /tmp/auto-backup.2100162//etc/vmware/esx.conf
 @@ -1,18 +1,299 @@
 -/adv/UserVars/RP_IP_Discovery_5 = ""
 -/adv/UserVars/RP_IP_Discovery_8 = ""
...
 Saving current state in /bootbank
 Clock updated.
 Time: 18:24:19   Date: 11/10/2021   UTC
 Successfully created /opt/emc/rp/kdriver/mod/esx_splitter
 Creating symbolic link /usr/lib/vmware/vmkmod/esx_splitter ...
 Ready to load ESX splitter
 Cannot load module esx_splitter: Failure
 Cannot load module esx_splitter: Failure

 Failed to launch splitter. For assistance, please run launch_splitter.sh --help

 Wed Nov 10 18:24:20 UTC 2021: rp_splitterd: start_kdriver_from_boot.sh Failed to execute. failing service.

 It is not safe to continue. Please reboot the host immediately to discard the unfinished update.
 Please refer to the log file for more details.

Event in /var/run/log/vmkernel.log: 
2021-11-10T18:24:18.411Z cpu1:2100089)VisorFSTar: 1994: emcrpspl.t00 (797949359604956901) as emcrpspl.t00 for 44144640 bytes
2021-11-10T18:24:20.285Z cpu3:2100373)UserMem: 7388: mmap denied: boot opt execInstalledOnly is set: file not installed

ESXi Splitter fails to start after an ESXi host reboot, with errors in /var/run/log/vmkernel.log: 
2021-11-12T15:53:29.004Z cpu2:525352)UserMem: 7576: mmap denied: boot opt execInstalledOnly is set: file not installed
2021-11-12T15:53:29.029Z cpu0:525042)Jumpstart plugin rp-splitterd activation failed: Method invocation failed
Note: This issue will also cause RecoverPoint for VMs cluster installation to fail due to error deploying ESXi splitter.

Cause

The ESXi host has a setting VMKernel.Boot.execInstalledOnly set to true.
This setting prevents the kdriver vib to install correctly using live installation.

RecoverPoint Splitter cannot function with VMKernel.Boot.execInstalledOnly set to true.

Resolution

Resolution:
1. On the ESXi host, change the VMKernel.Boot.execInstalledOnly setting to false.
  • Run the following ESXCLI command.
esxcli system settings encryption set --require-exec-installed-only=F
  • Verify the change. 
esxcli system settings encryption get
Mode: TPM
Require Executables Only From Installed VIBs: false
Require Secure Boot: true

 
               Confirm that Require Executables Only From Installed VIBs displays false.
  • To save the setting, run the following command.
/sbin/auto-backup.sh
    The TPM no longer enforces the execInstalledOnly boot option. 
 
2. Reboot ESXi host.
3. Run the vib installation again.

VMware document link: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-9047A43D-BB1F-4878-A971-EEFCAC183C86.html This hyperlink is taking you to a website outside of Dell Technologies.

Additional Information

This issue may also impact working RecoverPoint systems, when customers run the STIG Hardening procedure.

The procedure sets the Default STIG Values which change us the parameter "VMKernel.Boot.execInstalledOnly" = True.
The procedure changes the ESXi configuration, but is applied during the next reboot/upgrade, and it may cause VxRail upgrade issues, since the upgraded hosts cannot run RecoverPoint for VMs protected VMs.


While it is possible to install the vib with option --no-live-install - - The splitter does not appear to work even after reboot.

Affected Products

RecoverPoint for Virtual Machines
Article Properties
Article Number: 000193437
Article Type: Solution
Last Modified: 21 Sep 2023
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.
Article Properties
Article Number: 000193437
Article Type: Solution
Last Modified: 21 Sep 2023
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.