Machine Creation Fails When Creating Remote PowerShell Session

Machine Creation Fails When Creating Remote PowerShell Session

book

Article ID: CTX137465

calendar_today

Updated On:

Description

  • The “Resources” environment test Check hypervisor storage fails with the following error:

    “While testing access to storage with ID MyStorageID, an error occurred while attempting to create a remote PowerShell session to host MyHostName.”

  • The “Resources” environment test Check hypervisor infrastructure gives the following warning:

    “While testing access to storage with ID MyStorageID, an error occurred while attempting to create a remote PowerShell session to host MyHostName.”

  • Creating Machine Creation Service (MCS) catalog fails with the following error:

    "Failed to create a remote PowerShell session"

Resolution

To resolve the issue, follow the below steps:

1. On the Hyper-V host to be managed, open a Windows PowerShell session as Administrator and enable CredSSP with the server role.
     
     Enable-WSManCredSSP -Role server


2. On each Delivery Controller (computer you'll use to manage the Hyper-V host) Open a Windows PowerShell session as Administrator and enable CreddSSP with the client role.
 
   Enable-WSManCredSSP -Role client -DelegateComputer "fqdn-of-hyper-v-host"


3. On Each Delivery Controller, to enable CredSSP for client role for all HyperV hosts in mydomain

   Enable-WSManCredSSP -Role Client -DelegateComputer “*.mydomain.net”


4. On Each Delivery Controller, to enable CredSSP for client role for each HyperV host explicitly.

   Enable-wsmancredssp -Role Client -DelegateComputer “host1.mydomain.net”

   Enable-wsmancredssp -Role Client -DelegateComputer “host2.mydomain.net”
   
   Enable-wsmancredssp -Role Client -DelegateComputer “host3.mydomain.net”


Note: Enable-WSManCredSPP cmdlet enables CredSSP authentication on a client or on a server computer. Refer to the Microsoft TechNet page for more information -  Enable-WSManCredSPP cmdlet

Note :  Please verify that Port 5985 is open between the  Citrix Cloud connectors and the Hypervisor(s) 


Problem Cause

When performing disk operations on Server Message Block (SMB) storage, the MCS access the SMB storage locations through one of the HyperV hosts. As this is a “double-hop” scenario, a remote PowerShell session is opened to the HyperV host and disk operations are performed using this session.

To create the remote PowerShell session, enable the CredSSP server role on each HyperV host and enable the CredSSP client role on each Controller.

If this is not set up correctly, then the MCS cannot delegate the appropriate credentials required to access the SMB storage location to the HyperV server.

Issue/Introduction

This article describes the remote PowerShell issue encountered when attempting to create a machine catalog using Microsoft SCVMM 2012sp1 with Server Message Block (SMB) storage, and the steps required to resolve the issue.

Additional Information

Microsoft knowledge base article for CredSSP: Description of the Credential Security Support Provider (CredSSP) in Windows XP Service Pack 3