Having recently installed two new ESXi 6.0 with Update 1 servers we began to receive the below type errors from our Veeam backup infrastructure –
Error: NFC storage connection is unavailable. Failed to create NFC download stream.
It of course had a whole bunch of references to the specific server IPs and storage datastores but I’ve removed just for tidiness sake. Having assessed the Veeam logs we saw the below problem –
[20.09.2015 19:00:53] < 13320> ERR |Failed to initiate NFC session. Target host: [10.20.30.14]. VI connection ID: [10.20.30.50]. Storage MOID: [local-esx14-ln2].
[20.09.2015 19:00:53] < 13320> ERR |SSL error, code: .error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure
[20.09.2015 19:00:53] < 13320> >> |SSL_connect() function call has failed.
[20.09.2015 19:00:53] < 13320> >> |Failed to establish connection with the SSL server.
[20.09.2015 19:00:53] < 13320> >> |Cannot initialize new SSL connection.
[20.09.2015 19:00:53] < 13320> >> |Authd handshake has failed.
SSLv3 is now disabled by default for ESXi 6.0u1 so until anything comes down the Veeam pipeline we simply had to re-enable it for port 902. This is a pretty simple process that didn’t invoke any downtime or reboots to the host server.
Simply follow the VMware KB article HERE
Typically reading the release notes it’s one of the first bits mentioned under What’s New, Doh! Check them HERE