VCF 9.1: Fixing “Hot migration is disabled in vmkernel” and Making It Stick
This one caught me in the lab while I was moving VMs off a management domain host ahead of some maintenance. vMotion failed almost instantly, and vCenter gave…
Fixing a VCF Services Runtime etcd That Can’t Start: 5.4 Million Keys and a Runaway Support Bundle
All of this was done in my home lab. A few of the steps (deleting keys directly from etcd, suspending Flux, running etcd outside of its StatefulSet) are…
Automating Let’s Encrypt Certificates on VMware Avi Load Balancer with Cloudflare DNS
This is a community script, not something Broadcom supports. Run it against the Let's Encrypt staging environment first and make sure you understand what it does before you…
VMSP Toolkit 3.0.1 for VCF 9.1: Rollouts, Topology and Infrastructure Checks
VMSP Toolkit is an independent project built for lab and proof of concept environments. It is not a Broadcom product and Broadcom does not support it.The Broadcom resize…
SDDC Manager 9.1 Stuck in a Login Loop? Check the Clock, Then the Root Password
I went to log into SDDC Manager in the lab and never made it to the dashboard. The browser went to the vCenter SSO page, came back to…
VCF 9.1.1: One Host, One NFS Cluster, and a Validator That Wouldn’t Budge
Changing the host minimum for an SDDC Manager cluster is not supported by Broadcom. Everything in this post modifies SDDC Manager bytecode to get around a check the…
Clearing the “Virtual Machine UEFI Secure Boot Platform Key is out of date” Alarm After VCF 9.1.1
Tested on VCF 9.1.1.0, September 2026 After upgrading to VCF 9.1.1, a new warning showed up on a handful of my VMs and rolled up to the cluster…
VCF 9.1.1: Scaling VCF Management Services from HA back to Simple
Scaling VCF Management Services down from HA to Simple is not supported by Broadcom. The VCF Operations UI only scales up, and everything in this post goes around…
VCF 9.1.1 worker rightsizing: PodDisruptionBudgets, and why it does not stick
Everything here was done in my own home lab. The rightsizing script itself comes from a Broadcom KB and is supported, but several steps in this post go…
VCF 9.1.1 – Operations flagged an expired certificate that did not exist
The certificate dashboard in VCF Operations told me one of my workload domains, running vCenter 9.1.1, had an expired certificate. Eight total, one expired, seven active. The row…