Workaround for the Cannot contact the specified host” error
” Cannot contact the specified host. The host may not be available on the network, a network configuration problem may exist, or the management service on this host is not responding “
This error comes about due to SSLv3 and its associated POODLE vulnerability being disabled in the latest update – 5.5 U3b. The vCenter tries to talk SSL v3 to the host which is dropped straight away with a FIN return packet from the host.
The ideal solution is to upgrade your vCenter to 5.5 U3b. Should this not be an option for whatever reason, you can enable SSL v3 on your ESXi host – be aware of the security implications though!
There are two parts where you need to enable SSLv3:
1. Enabling SSLv3 for Hostd – Port 443
2. Browse to this location using the below command:
# cd /etc/vmware/rhttpproxy
3. Backup the config file:
# cp config.xml config.xml.bak
4. Edit the file using the below command (Press i to begin edit)
# vi config.xml
Locate the <vmacore>, then locate the <ssl> Under <ssl> add the following entry:
<sslOptions>16924672</sslOptions>
5.Save the file by pressing Esc and then typing :wq!
2. Enabling SSLv3 for Port 902 (Required to connect to vCenter)
# esxcli system settings advanced set -o /UserVars/VMAuthdDisabledProtocols -s ""
Restart the rhhtpproxy using the below command:
# /etc/init.d/rhttpproxy restart