2V0-621 · Question #109
After deploying a vSphere Platform Services Controller (PSC), an administrator is unable to install vCenter Server. The error displayed is: Could not contact Lookup Service. Please check…
The correct answer is A. Verify that the clocks on the host machines running the PSC, vCenter Server, and the vSphere C. Ensure that there is no firewall blocking port 7444 between the PSC and vCenter Server. The 'Could not contact Lookup Service' error during vCenter installation is caused by clock skew between hosts or a firewall blocking the Lookup Service port 7444.
Question
After deploying a vSphere Platform Services Controller (PSC), an administrator is unable to install vCenter Server. The error displayed is:
Could not contact Lookup Service. Please check VM_ssoreg.log. Which two actions can be taken to correct this problem? (Choose two.)
Options
- AVerify that the clocks on the host machines running the PSC, vCenter Server, and the vSphere
- BConfigure a valid Identity Source for the Platform Services Controller in the vSphere Web Client.
- CEnsure that there is no firewall blocking port 7444 between the PSC and vCenter Server.
- DUninstall and reinstall the Platform Services Controller software.
How the community answered
(44 responses)- A70% (31)
- B18% (8)
- D11% (5)
Why each option
The 'Could not contact Lookup Service' error during vCenter installation is caused by clock skew between hosts or a firewall blocking the Lookup Service port 7444.
VMware SSO and the Lookup Service rely on Kerberos-based authentication, which requires clocks to be synchronized within 5 minutes. A time skew between the PSC, vCenter, and host machines causes SSL and authentication failures that produce this specific error.
Configuring an Identity Source is a post-installation task performed in the vSphere Web Client and has no effect on Lookup Service connectivity during the installation process.
Port 7444 TCP is the dedicated port for the VMware Lookup Service hosted on the PSC. If a firewall blocks this port, vCenter cannot register with or contact the Lookup Service during installation, directly causing this error.
Reinstalling the PSC does not address the actual root causes of time skew or firewall rules and is an unnecessary action before investigating those conditions.
Concept tested: PSC Lookup Service connectivity troubleshooting
Source: https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-05D5F84A-84EC-4EFD-B59B-0E65C58AE1B3.html
Topics
Community Discussion
No community discussion yet for this question.