WilliamLam.com

  • About
    • About
    • Privacy
  • VMware Cloud Foundation
  • VKS
  • Homelab
    • Resources
    • Nested Virtualization
  • VMware Nostalgia
  • Apple
You are here: Home / Automation / Updating handshakeTimeoutMs setting for ESXi 7.x & 8.x using configstorecli

Updating handshakeTimeoutMs setting for ESXi 7.x & 8.x using configstorecli

05.14.2024 by William Lam // 3 Comments

With the introduction of the ESXi Configuration Store back in vSphere 7.0 Update 1, all ESXi configuration changes should be managed using either the configstorecli for an individual ESXi host or leveraging the new vSphere Configuration Profiles (VCP) for scale with vCenter Server.

For certain ESXi hostd configurations such as configuring the handshakeTimeoutUs property, which has changed locations from several locations including /etc/vmware/hostd/config.xml and /etc/vmware/vpxa/vpxa.cfg to now /etc/vmware/rhttpproxy/config.xml in the latest ESXi 8.x release, it can be challenging to figure out the correct configstorecli syntax.

Having spent some time playing with the configstorecli, I was able to quickly help a customer recently who was looking to update the handshakeTimeoutUs property for ESXi 7.x and I wanted to make it easy for folks to find the syntax for both ESXi 7.x and 8.x.

ESXi 8.x

The handshakeTimeoutUs in ESXi 8.x has moved to rhttpproxy configurations and you can confirm this and other settings by using the schema operation (configstorecli schema get set -c esx -g services -k rhttpproxy)

Step 1 - To add or update the handshakeTimeoutUs property, create an input JSON file that contains the following:

[root@localhost:~] cat /tmp/input.json
{
   "rhttpproxy": {
      "ssl": {
         "vmacore": {
            "handshake_timeout_ms": 120000
         }
      }
   }
}

Step 2 - Run the following command to apply the changes:

configstorecli config current set -c esx -g services -k rhttpproxy -infile /tmp/input.json

Step 3 - There should be no errors from the previous command and we can now retrieve the configuration by running the following:

configstorecli config current get -c esx -g services -k rhttpproxy

Note: Make sure to restart the vpxa service on the ESXi host for the changes to go into effect.

ESXi 7.x

The handshakeTimeoutUs in ESXi 8.x has moved to vpxa configurations and you can confirm this and other settings by using the schema operation (configstorecli schema get set -c esx -g services -k vpxa)

Step 1 - To add or update the handshakeTimeoutUs property, create an input JSON file that contains the following:

[root@localhost:~] cat /tmp/input.json
{
   "vmacore": {
      "ssl": {
         "handshake_timeout_ms": 120000
      }
   }
}

Step 2 - Run the following command to apply the changes:

configstorecli config current set -c esx -g services -k vpxa -infile /tmp/input.json

Step 3 - There should be no errors from the previous command and we can now retrieve the configuration by running the following:

configstorecli config current get -c esx -g services -k vpxa

Note: Make sure to restart the vpxa service on the ESXi host for the changes to go into effect.

More from my site

  • Quick Tip - vCenter Server Advanced Settings Reference
  • Downgrading new VMware vSphere Foundation (VVF) or VMware Cloud Foundation (VCF) licenses to 7.x
  • Identifying vSphere with Tanzu Managed VMs
  • Quick Tip - New remote version of ESXCLI 8.x
  • Quick Tip - Automating allowed and not allowed Datastores for use with vSphere Cluster Services (vCLS)

Categories // Automation, ESXi, vSphere 7.0, vSphere 8.0 Tags // configstorecli, vSphere 7.0, vSphere 8.0

Comments

  1. *protectedSatan023 says

    05/21/2024 at 7:45 pm

    If someone don't know why need to modify the value of handshakeTimeoutMs, please check this:

    https://www.dell.com/support/kbdoc/en-pa/000195758/dell-emc-vxrail-hci-over-mpls

    Reply
  2. *protectedGK says

    07/02/2024 at 6:25 am

    Hi, on ESXi 8.0u2 when I run this command configstorecli config current set -c esx -g services -k rhttpproxy -infile /tmp/input.json I've got an error:

    proxy -infile /tmp/input.json
    Error Code: 1208
    Message: Failed to validate Set
    Details:
    /rhttpproxy: Additional property not allowed: rhttpproxy

    Reply
  3. *protectedAustin B says

    08/14/2024 at 7:14 am

    I also could not get the commands in this article to work for ESXi 8. But I was able to get the following to work (2 different commands, unsure which is correct).

    vi /tmp/input.json
    {
    "vmacore": {
    "ssl": {
    "handshake_timeout_ms": 600000
    },
    "http": {
    "read_timeout_ms": 600000
    }
    }
    }
    /bin/configstorecli config current set -c esx -g services -k rhttpproxy -infile /tmp/input.json
    /bin/configstorecli config current set -c esx -g services -k vpxa -infile /tmp/input.json
    /etc/init.d/vpxa restart

    Reply

Thanks for the comment!Cancel reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Search

Thank Author

Author

William is Distinguished Platform Engineering Architect in the VMware Cloud Foundation (VCF) Division at Broadcom. His primary focus is helping customers and partners build, run and operate a modern Private Cloud using the VMware Cloud Foundation (VCF) platform.

Connect

  • Bluesky
  • Email
  • GitHub
  • LinkedIn
  • Mastodon
  • Reddit
  • RSS
  • Twitter
  • Vimeo

Recent

  • Programmatically accessing the Broadcom Compatibility Guide (BCG) 05/06/2025
  • Quick Tip - Validating Broadcom Download Token  05/01/2025
  • Supported chipsets for the USB Network Native Driver for ESXi Fling 04/23/2025
  • vCenter Identity Federation with Authelia 04/16/2025
  • vCenter Server Identity Federation with Kanidm 04/10/2025

Advertisment

Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy

Copyright WilliamLam.com © 2025