You can use the TLS Configuration utility to revert configuration changes. When you revert the changes, the system enables protocols that you disabled using TLS Configurator utility.
You can only perform a recovery if you previously backed up the configuration.
Perform recovery in this order.- vSphere Update Manager.
If your environment runs a separate vSphere Update Manager instance on a Windows system, you must update vSphere Update Manager first.
- vCenter Server.
- Platform Services Controller.
Prerequisites
Before reverting changes, use the vCenter Server Appliance interface to perform a backup of the Windows machine or appliance.
Procedure
- Connect to the Windows machine or the appliance.
- Log in to the system where you want to revert changes.
Option Description Windows - Log in as a user with Administrator privileges.
- Go to the VcTlsReconfigurator directory.
cd %VMWARE_CIS_HOME%\TlsReconfigurator\VcTlsReconfigurator
Linux - Connect to the appliance using SSH and log in as a user who has privileges to run scripts.
- If the Bash shell is not currently enabled, run the following commands.
shell.set --enabled true shell
- Go to the VcTlsReconfigurator directory.
cd /usr/lib/vmware-TlsReconfigurator/VcTlsReconfigurator
- Review the previous backup.
Option Description Windows C:\ProgramData\VMware\vCenterServer\logs\vmware\vSphere-TlsReconfigurator\VcTlsReconfigurator.log
The output looks like the following example.
c:\users\username\appdata\local\temp\20161108T161539 c:\users\username\appdata\local\temp\20161108T171539
Linux grep "backup directory" /var/log/vmware/vSphere-TlsReconfigurator/VcTlsReconfigurator.log
The output looks like the following example.
2016-11-17T17:29:20.950Z INFO Using backup directory: /tmp/20161117T172920 2016-11-17T17:32:59.019Z INFO Using backup directory: /tmp/20161117T173259
- Run one of the following commands to perform a restore.
Option Description Windows reconfigureVc restore -d Directory_path_from_previous_step
For example:
reconfigureVc restore -d c:\users\username\appdata\local\temp\20161108T171539
Linux reconfigureVc restore -d Directory_path_from_previous_step
For example:
reconfigureVc restore -d /tmp/20161117T172920
- Repeat the procedure on any other vCenter Server instances.
- Repeat the procedure on any other Platform Services Controller instances.