"503 Service Unavailable" error on the vSphere Web Client when logging in or accessing the vCenter Server

Symptoms

Logging in to the vCenter Server or vCenter Server appliance (VCSA) using the vSphere Web Client fails.
Accessing the vCenter Server or vCenter Server appliance using the vSphere Web Client fails.
You see these errors similar to:

503 Service Unavailable.
503 Service Unavailable (Failed to connect to endpoint: [N7Vmacore4Http20NamedPipeServiceSpecE:0x00007fb7d00200a0] _serverNamespace = / action = Allow _pipeName =/var/run/vmware/vpxd-webserver-pipe)

Note: vCenter STS Certificate may expire soon in certain configuration and you will observe the symptoms mentioned in this KB if STS certificate is expired, please refer following KBs to verify the validity of STS / Signing Certificate and replace it if already expired:

Purpose

This article provides insights and troubleshooting steps when you encountered this error while logging in and accessing the vCenter Server using your vSphere Web Client.

Cause

This issue may occur due to a number of reasons such as:

The vCenter Server currently down because of maintenance.
The reverse Proxy service on vCenter Server is down.
The vSphere web client service is down.
Mis-configured Firewall settings.

Notes:
This mis-configuration can only occur on a Windows installation of vCenter Server.
A VCSA installation can only have this problem if deliberate changes were made to firewall settings.

Impact / Risks

Managing the vCenter Server or vCenter Server appliance fails.

Resolution

Before troubleshooting, it is critical to understand what a "503 Service Unavailable" error is.
For more insights, see

List of HTTP Status Codes

503 Service Unavailable Flow Chart

Disclaimer: VMware is not responsible for the reliability of any data, opinions, advice, or statements made on third-party websites. Inclusion of such links does not imply that VMware endorses, recommends, or accepts any responsibility for the content of such sites.

A 503 Service Unavailable error is an HTTP response status code that indicates that the server is temporarily unable to handle your request. This can be due to a number of reasons already mentioned in the cause section.

There are also different looking 503 pages on other websites:

For example:

503 Service Unavailable (Failed to connect to endpoint: [N7Vmacore4Http20NamedPipeServiceSpecE:0x00007fb7d00200a0] _serverNamespace = / action = Allow _pipeName =/var/run/vmware/vpxd-webserver-pipe)
503 Error
Service Unavailable – DNS Failure
HTTP Error 503
HTTP 503
503 Service Temporarily Available

An important thing to remember is that a 503 error is a server-side error. This means that the problem exists within the vCenter Server or website (server) you are trying to access, and not your computer (client).

Troubleshooting HTTP response status code "503" on the vSphere Web Client when connecting to the vCenter Server.

Try again in a few minutes.

Note: it is most likely that the vCenter Server is just busy acknowledging your request. The vCenter server was able to process your request and was able to respond back with the "503 Service Unavailable" error. It is just not able to acknowledge your request either because it is busy with other tasks at the moment or it currently down with very limited services due to maintenance.
Try again in a few minutes on a different client. Confirm if you are still get the same error.
Confirm the status of the VMware vCenter Services. Ensure all required vCenter Server and vCenter Server appliance services are up, running and functional. For more insights, see:

vCenter Server Component and Services
Firstboot Failed during Install/Deployment, Upgrade or Migration in vCenter Server and vCenter Server Appliance 6.7 (55746)
vCenter Services on Windows vCenter Server might fail to start due to insufficient permissions for service accounts, refer to KB Error "Logon failure: the user has not been granted the requested logon type at this computer" in vCenter Server for more information
How to stop, start, or restart vCenter Server 6.x services (2109881)
Stopping, starting, or restarting VMware vCenter Server Appliance 6.x services (2109887)

Check if there are an disk space issues on the vCenter Server or the vCenter Server Appliance.

Notes:

Disk space issues can cause more than one service to shutdown which can result in the HTTP 503 Error Response Code.
Disk space issues do not directly cause a 503 Error Response Code, but the services being down due to a failure causes the error. For relevant articles, see:

From the vCenter Server, investigate the vsphere_client_virgo.log file located at:
- Windows vCenter Server - C:\ProgamData\VMware\vCenterServer\logs\vsphere-client\logs\
- vCenter Server Appliance - /var/log/vmware/vsphere-client/logs/
  
  Also, look at the vpxd.log file located at:
  - Windows vCenter Server: C:\ProgramData\VMware\vCenterServer\logs\vmware-vpx
  - vCenter Server Appliance: /var/log/vmware/vpxd

For more information see, "503 service unavailable" error when connecting to the vCenter Server using the vSphere Web Client.

VMware strongly recommends on following Performance Best Practices on VMware vSphere 6.x/7.x

For more insights on Troubleshooting VMware vCenter Server, the vSphere Web Client, Storage and Networking, see the VMware vSphere Troubleshooting Guide.

For Troubleshooting Work Flow , see:

Related Information

Was this article helpful?

Additional Resources

Related Versions:

VMware vCenter Server 7.0.x
VMware vCenter Server Appliance 6.5.x
VMware vCenter Server 6.7.x
VMware vCenter Server Appliance 6.7.x
VMware vCenter Server Appliance 5.5.x
VMware vCenter Server Appliance 6.0.x
VMware vCenter Server 5.5.x
VMware vCenter Server 6.0.x

view all

Actions

Copy link to clipboard

Language:

Info

Last Updated: Jun 11 2020

Error [403] The maximum number of sessions has been exceeded in the H5 client during login or logout

Symptoms In virgo log, you see messages similar to: [2020-05-19T07:25:45.285Z] [ERROR] http-nio-5090-exec-130 72026859 142953 501051 com.vmware.vise.security.spring.DefaultAuthenticationProvider logout failed for sessionId 142953, clientId 501051 java.lang.IllegalStateException: The specified cardinality of 1..1 for osgi:reference implementing com.vmware.vcenter.apigw.api.ApiGatewaySessionManager in bundle com.vmware.h5ngc requires that exactly one OSGI service satisfies the filtering criteria but no such service was found. at com.vmware.o6jia.context.ExternalServiceTargetSource.getTarget(ExternalServiceTargetSource.java:99) at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:192) at com.sun.proxy.$Proxy159.logout(Unknown Source) at com.vmware.vise.security.spring.DefaultAuthenticationProvider.logoutInternal(DefaultAuthenticationProvider.java:548) at c

thatwaskube

Search This Blog