vmware

Troubleshooting CIM on ESXi

Recently I’ve updated from to the latest 6.7 ESXi release . Afterthat , I have detected the following error messages flooding vmkernel.log

2021-10-30T06:49:17.261Z cpu9:2103791)User: 3173: sfcb-intelcim: wantCoreDump:sfcb-intelcim signal:11 exitCode:0 coredump:enabled
2021-10-30T06:49:17.472Z cpu9:2103791)UserDump: 3110: sfcb-intelcim: Dumping cartel 2103782 (from world 2103791) to file /var/core/sfcb-intelcim-zdump.001 ...

Before I manage to find a solution I have to verify a few things. Just a small background. sfcbd stands for “Small Footprint CIM Broker (SFCB) daemon”. For performance and health monitoring ESXi enables an agent less approach using industry standards like CIM (Common Information Model) and WBEM (Web-Based Enterprise Management). At the ESXi side, there is the CIM agent, represented by the sfcbd. CIM providers are the counter part, often supplied by 3rd parties like hardware vendors. CIM providers come as .VIB files. After detecting 3rd party CIM provider, the sfcbd (with that the WBEM services) is automatically started by ESXi.

To get an overview of the CIM providers installed, log in to the ESXi host as user root and run the commands:

# get CIM status 
esxcli system wbem get
   Authorization Model: password
   CIMObject Manager PID: 2101998
   Enabled: true
   Enabled Running SSLProtocols: tlsv1.2
   Enabled SSLProtocols:
   Enabled System SSLProtocols: tlsv1.2
   Loglevel: warning
   Port: 5989
   Service Location Protocol PID: 0
   WSManagement PID: 2101662
   WSManagement Service: true

#get CIM provider list with status  
esxcli system  wbem  provider list
Name              Enabled  Loaded
----------------  -------  ------
sfcb_base            true    true
vmw_base             true    true
vmw_hdr              true    true
vmw_iodmProvider     true    true
vmw_kmodule          true    true
vmw_omc              true    true
vmw_pci              true    true
vmw_smx-provider     true    true 

Since sfcb was crashing and the crash was caused by sfcb-intelcim provider I’ve decided to remove that module but alternatively you can disable it.

# uninstall package intelcim-provider that was causing issues 
/etc/init.d/sfcbd-watchdog stop
esxcli software vib list | grep -i intel
esxcli software vib remove -n intelcim-provider 
/etc/init.d/sfcbd-watchdog start
#ref https://support.hpe.com/hpesc/public/docDisplay?docId=a00048925en_us&docLocale=en_US

# alternatively provider can be disabled 
sxcli system  wbem  provider set --enable false --name="intelcim-provider"


Once intelcim-provider has been removed dump file was created anymore.  I hope this was useful.

Leave a comment