vRA installation failure caused by .NET trust levels in IIS

I’ve been meaning to post this for about a year. I’m doing it now just in case it’s still relevant and useful for anyone.

I was working with a customer getting a vRA (7.3.1) PoC environment deployed for them so that they could run some penetration tests against it. For those tests to be fully representative, they understandably wanted to use their standard VM templates for the Windows-based IaaS components of vRA.

One of these templates configured IIS as part of the standard installation. Going through the vRA deployment process (not with LCM, but manually) a problem was encountered that took some time to get past. The pre-requisite checker ran through ok and the configuration (including certificates) were configured correctly, but when it came to the actual installation it failed at the Model Manager.

The output from the installation process was as follows:

Looking at the MetaModel service with a browser:

Several retries later (make sure to take snapshots) I discovered that there was an IIS setting that the customer was setting that was preventing the Model Manager from running correctly. In the IIS Manager, it’s called “.NET Trust Levels”.

The default setting if you install IIS from the Windows Server Manager dashboard is “Full (Internal)”. The customer’s IIS build set this as Minimal or Low (I’ve forgotten which).

The thing to note though was that the vRA installation pre-requisite checker didn’t pick it up. So if you hit a similar issue, check the IIS settings carefully.


Leave a Reply

Your email address will not be published. Required fields are marked *