Top Posts
What’s New In VMware Cloud Foundation 9.0
Deploying & Configuring the VMware LCM Bundle Utility...
VMware Cloud Foundation: Don’t Forget About SSO Service...
VMware Explore Las Vegas 2025: Illuminating the Path...
Securing Software Updates for VMware Cloud Foundation: What...
VMware Cloud Foundation 5.2: A Guide to Simplified...
VMware Cloud Foundation 5.2: Unlocking Secure Hybrid Cloud...
VMware Cloud Foundation – Memory Tiering: Optimizing Memory...
Decoding VMware Cloud Foundation: Unveiling the numerous amount...
VMware Cloud Director 10.6.1: Taking Cloud Management to...
Virtual Bytes
  • Home
  • Home Data Center 2025
  • VMware
    • Cloud
    • Datacenter & Cloud Infrastructure
      • VMware ESXi
      • VMware vCenter
      • VMware vSAN
    • Networking & Security
    • Desktop & App Virtualization
      • Omnissa Horizon
    • Troubleshooting
    • Ansible
  • Education
  • Hardware
    • Hardware Tips & Tricks
  • Events
  • About
    • About Me
    • Home Lab Archives
      • Home Lab 2020-2022
      • Home Lab 2016-2020
Author

Tommy Grot

Tommy Grot

CloudVMware Cloud Foundation

VMware Cloud Foundation 5.x – SDDC Manager Password Operations Not Allowed

by Tommy Grot March 21, 2024
written by Tommy Grot 2 minutes read

Tonight’s topic – I want to share with you a recent headache I encountered while working with my VMware Cloud Foundation SDDC Manager 5.x and NSX Password Rotation for Audit account! I was in the middle of a routine password rotation service when suddenly, my task got stuck, leaving me scratching my head in frustration. I couldn’t believe how one little hiccup could bring my whole operation to a screeching halt. In this blog post, I will walk you through the issue I faced, how I troubleshooted it, and ultimately resolved it. So grab a cup of your favorite drink, sit back, and let’s dive into this tech challenge together!

Lets Begin!

  • Take Snapshot (Uncheck Memory) of SDDC Manager
  • SSH into SDDC Manager Appliance
  • Elevate to Root ( su – )

Now we will start digging in the Postgres Database, we will try to find the culprit of what is holding up the lifecycle management of VCF.

The command below will display any locked tasks that are running or are stuck

psql --host=localhost -U postgres -d platform -c "select * from lock"

My Issue – NSX Audit Password got stuck rotating and caused a halt in all operations, example below

{“serviceIdentifier”:”LCM”,”operationIdentifier”:”NSX_AUDIT”,”description”:”Resource of type NSX locked by service (ID: LCM) and operation (ID: NSX_AUDIT)”,”pollingInterval”:0,”expirationTime”:0}

Now that we have our locks displayed, for mine there was 2 locks I had to delete – eample below

psql --host=localhost -U postgres -d platform -c "delete from lock where id='ba4e6ff4-689a-4905-92ff-635cb7403698'";
psql --host=localhost -U postgres -d platform -c "delete from lock where id='ID_FROM_RESOURCE_NAME'";

Next, we will remove the second lock from the database:

psql --host=localhost -U postgres -d platform -c "delete from lock where id='6bd393ba-ad8f-4e1a-a6c3-0695c4556c29'";
psql --host=localhost -U postgres -d platform -c "delete from lock where id='ID_FROM_RESOURCE_NAME'";

Now we have a healthy and happy SDDC Manager!

As well our password options are no longer blocked out!

Reboot and remove snapshot after you are done, ensure you have all working services before snapshot is removed or a good backup!

March 21, 2024 0 comments 1.9K views
0 FacebookTwitterLinkedinEmail
CloudVMware Cloud Foundation

VMware Cloud Director 10.5.x Certificate Replacement

by Tommy Grot March 15, 2024
written by Tommy Grot 1 minutes read

Today’s topic is about managing certificates for VMware Cloud Director. Well, you’ve come to the right place! In this blog post, we’ll walk you through the step-by-step process of changing certificates for VMware Cloud Director 10.5.x. Whether you’re a seasoned pro or a newbie in the world of virtualization, we’ve got you covered. Say goodbye to the headaches of dealing with expired or invalid certificates, and say hello to a smoother, more secure experience with VMware Cloud Director. Let’s get started!

This process is much easier! Than the days of Postman and API calls and trying to get the certificate loaded into the web store and many other pain points that were noticeable, but not anymore this processes is super easy!

Login to your provider portal of VCD with your administrator account or a system admin account.

Go to – Administration

Click on Certificates Library – >

Click on Import -> Then fill our a friendly name and upload the .pem format of your cert and as well the private.key with the passphrase.

Once your certificate has been imported, also ensure to have your CA Signed Certs Trusted (Root and Subordinate) in your trusted certs library.

Then go back to Resources -> Cloud Cells -> Click on the Cell you want to change the certificate first in.

Then click on Edit

The pop up will come up to select the certificate we just imported earlier in the walk through, select that one.

Now you will “Use Certificate” and it will run the API Calls and certificate tasks behind the scenes.

Select your certificate and then click edit and use certificate, few seconds later you should see a successful message in the recent tasks!

March 15, 2024 8 comments 3.1K views
2 FacebookTwitterLinkedinEmail
VMware Cloud FoundationVMware vCenter

How To Apply Async Patch to VMware Cloud Foundation 5.1+

by Tommy Grot March 2, 2024
written by Tommy Grot 3 minutes read

The VMware SDDC Manager async patch tool allows you to upgrade individual products outside of the standard VMware Cloud Foundation (VCF) baseline. This tool can be used to upgrade products such as vCenter, NSX, and ESXi to newer versions without affecting the overall VCF deployment.

To use the async patch tool, you will need to download the patch or upgrade package for the specific product you want to update. You can then upload the package to the SDDC Manager and initiate the upgrade process. The async patch tool will automatically handle the upgrade process for the individual product, ensuring that it is seamlessly integrated into your VCF environment.

Overall, the async patch tool provides a convenient way to keep your VMware products up to date without disrupting your VCF deployment.

VMware Docs for Async Patch Tool


Async Patch Tool Walkthrough

Lets begin! – Open WinSCP or/ SCP upload the vcf-async-patch-tool-1.1.0.2.tar.gz,

Then, take a snapshot of your vCenter and as well SDDC Manager for safety!

Once snapshots are done and verified then, SSH into your SDDC Manager with vcf user, but ensure to enable the SSH Time out. ( Example Below)

  • 300 Second is five minutes
  • Putty -> Change Settings -> Connection -> Seconds between keepalives (0 to turn off) > set to 300 > Apply

Then we will need to make the directory for async patch tool

mkdir /home/vcf/asyncPatchTool

Copy the vcf-async-patch-tool-1.1.0.2.tar.gz, (or latest version) into /home/vcf/asyncPatchTool

tar -xvf vcf-async-patch-tool-1.1.0.2.tar.gz
Set the permissions for the asyncPatchTool directory
cd /home/vcf/
chmod -R 755 asyncPatchTool
chown -R vcf:vcf asyncPatchTool

Next, you will execute the command below to enable async to pull patches.

./vcf-async-patch-tool --listAsyncPatch --du < Your E-Mail for Customer Connect >

Next the Patch Tool will ask you if your running the latest version ( Y ) or ( N ) and CEIP as well.

  • Enter Y to confirm that you are running the latest version of the Async Patch Tool.
  • Read the information and enter Y to acknowledge the pre-requisites.
  • Enter Y or N to choose whether or not to participate in the VMware Customer Experience Improvement Program (CEIP).
  • Enter the password for the super user (vcf) account.
  • Enter the password for the root user account.
  • Enter the password for the management domain SSO user account.
  • Enter your VMware Customer Connect (Depot) password.

So, for my patch I select the latest vCenter Server 8U2b and I repeated the same setups for gaining my ESXi Patch as well.

./vcf-async-patch-tool -e --patch VCENTER:8.0.2.00200-23319993 --du <E Mail Customer Connect> --sddcSSOUser <SSOuser> --sddcSSHUser vcf --it ONLINE

Status of Async Progress shown in these snips

Now you will see Bundles showing up within Bundle Management!

Snippet Below Shows Running Async patch tool

After the bundles have been uploaded, we may go back to SDDC UI and go to the specific workload domain, for my environment it is the Management Workload domain. Upgrade progress snippet below of vCenter Server

Once all patches are completed, SSH back into VCF SDDC Manager and execute the following command to disable patches.

  • Navigate to /home/vcf/asyncPatchTool/bin.
  • Run the following command:
./vcf-async-patch-tool --disableAllPatches --sddcSSOUser SSOuser --sddcSSHUser vcf
March 2, 2024 2 comments 2.5K views
2 FacebookTwitterLinkedinEmail
VMware TroubleshootingVMware vCenter

vCenter 8.0 U2 Storage Policies Go Missing – Due to Service Account (SPS) VMware vSphere Profile-Driven Storage Service

by Tommy Grot February 29, 2024
written by Tommy Grot 2 minutes read

Tonight’s blog post goes in-depth on Service Accounts especially the SPS account which the VMware vSphere Profile-Driven Storage Service relies on that lives within the Administrators group. Well, imagine the panic when the SPS service account goes missing, leaving your vSAN and storage policies in limbo.

In this blog post, we’ll dive into the nightmare scenario of losing these vital components and explore how to troubleshoot and recover from such a disaster. So grab a cup of coffee and get ready to learn how to tackle this challenging situation head-on. Let’s get started!

So Below – I logged into my vCenter Server 8 today, and I was like why are my policies missing and my vSAN Performance complaining ?? Well I started to dig in and found some evidence of the SPS service account gone.

Storage Providers are missing ?! What is happening?!

vSAN Performance complaining about its policy not being there, and your can see that the Storage Policy drop down is broken / not loading the vSAN policies I have for vSAN Performance

So – First thing is take a snapshot of what your current vCenter is, yeah we know its broken and SPS is missing but safety first!

First, what I did – is, I checked the logs where the VMware vSphere Profile-Driven Storage Service

/var/log/vmware/vmware-sps/sps.log

You will see lots of different spring frame work events and processes, but what you are really looking for is your specific SPS Service Account, for me, mine was

sps-71587023-8efd-4f7e-b094-ede500183201

Once you have your account copied – open your favorite text editor. You will want to structure your command below in the same way. As an example you may copy i provided mine from the screen shot – But replace my SPS account with yours.

/usr/lib/vmware-vmafd/bin/dir-cli group modify --name Administrators --add sps-71587023-8efd-4f7e-b094-ede500183201

After you hit enter, you will see that it will ask you for the [email protected] password, if you are running VCF, you will need to pull your password from the SDDC Manager if you have Auto Rotate passwords enabled.

Once Password has been entered you shall see the same following prompt where the SPS account has been added to the Administrators group.

Enter password for [email protected]:
Account [sps-71587023-8efd-4f7e-b094-ede500183201] added to group [Administrators]
Group member [sps-71587023-8efd-4f7e-b094-ede500183201] added successfully

Woohoo! vSAN and vCenter are all up and running with working VM Storage Policies

And Finally – We see our SPS account back in the Administrators Group!

February 29, 2024 0 comments 2.2K views
1 FacebookTwitterLinkedinEmail
CloudVMware Cloud Foundation

New VMware Cloud Foundation & vSphere Foundation Offerings and Licensing model

by Tommy Grot January 8, 2024
written by Tommy Grot 4 minutes read

Official Announcement about the new offerings from VMware

VMware is here to shake things up with their latest offerings, VMware Cloud Foundation and VMware vSphere Foundation!

With VMware Cloud Foundation, managing your cloud infrastructure has never been easier, providing a unified platform for seamless deployment and management of applications across private, public, and hybrid clouds. And that’s not all! VMware vSphere Foundation takes virtualization to the next level for smaller businesses and their needs, delivering enhanced scalability, reliability, and security for your business-critical applications.

Announcement of VMware Cloud Foundation and vSphere Foundation Products and Support Services offerings, same information where @ William Lam has shared on his blog.

VMware Cloud Foundation (VCF)

Products & Support Services includes:

  • SDDC Manager
  • vSphere Enterprise Plus
    • vCenter Server Standard
    • vSphere with Tanzu (includes TKG Runtime)
    • vSphere ESXi
  • vSAN Enterprise (includes 1TiB per CPU Core)
  • NSX Enterprise Plus
  • Aria Suite Enterprise
    • Aria Automation
    • Aria Operations
    • Aria Operations for Logs
  • Aria Operations for Networks Enterprise
  • HCX Enterprise
  • VMware Data Service Manager (COMING SOON)
  • Activation & Upgrade Support Service
  • Select Support Service (recommended)

Available Add-Ons for purchase for VCF:

  • VMware Cloud Disaster Recovery (VCDR)
    • Sold as protected TiB and Per Protected VM
  • VMware Ransomware Recovery (RWR)
    • Sold as Per Protected VM
  • VMware Site Recovery (SRM)
    • Sold as pack of 25 VMs
  • vSAN Enterprise
    • Sold as 8TiB per CPU socket
  • VMware Load Balancer (NSX Advanced Load Balancer)
    • Sold as per service unit
  • VMware Firewall
    • Sold as per CPU Core
    • Distributed Firewall
    • Gateway Firewall
    • Security Intelligence
    • Container Security with Antrea
  • VMware Firewall + Advanced Threat Protection (ATP)
    • Sold as per CPU Core
    • Distributed Firewall
    • Gateway Firewall
    • Security Intelligence
    • Container Security with Antrea
    • Distributed and Gateway Intrusion Detection and Prevention Service (IDS/IPS)
    • Malware Prevention
    • Network Traffic Analysis (NTA) and Network Detection and Response (NDR)
  • Tanzu Mission Control (TMC)
    • Sold as per CPU Core
    • TMC SaaS
    • TMC (Self-Managed)
  • Tanzu Application Platform (TAP)
    • TAP
      • Sold as per vCPU
    • Tanzu Spring Runtime
      • Sold as per CPU Core
  • Tanzu Spring Runtime (TSR)
    • Sold as per CPU Core
  • Tanzu Guardrails Enterprise (TGE)
    • Sold as per resource
    • Tanzu Hub
    • Tanzu Guardrails
    • Aria Automation Config (formally Saltstack)
    • Automation for Secure Clouds
    • Automation for Secure Host
  • Tanzu Guardrails Advanced (TGA)
    • Sold as per resource
    • Tanzu Hub
    • Tanzu Guardrails
    • Automation for Secure Clouds
  • Tanzu Cloudhealth Enterprise (TCE)
    • Sold as percentage of monthly cloud spend
  • Tanzu Application Catalog (TAC)
    • Sold as active artifact
  • Tanzu Ops for Apps (formally Wavefront)
    • Sold as packets per second (PPS)
  • Tanzu Insights (TI)
    • Sold as event per month
  • CSP Entitlement
    • Partner must be signed up to Broadcom Expert Advantage program
    • Cloud Director
    • Cloud Director Availability
    • Cloud Director Plugins and Extension
    • Chargeback
    • Usage Meter
  • VMware Private AI Foundation  (COMING SOON)
  • Support Account Manager (SAM) Support Services
  • Dedicated Technical Support Engineer (DTSE) Support Services

VMware vSphere Foundation (VVF)

Products & Support Services includes:

  • vSphere Enterprise Plus
    • vCenter Server Standard
    • vSphere with Tanzu (includes TKG Runtime)
    • vSphere ESXi
  • vSAN Enterprise (*includes 100GiB per CPU Core per host)
  • Aria Suite Standard
    • Aria Suite Lifecycle
    • Aria Operations
    • Aria Operations for Logs
  • Production Support Service

Available Add-Ons for purchase for VVF:

  • VMware Cloud Disaster Recovery (VCDR)
    • Sold as protected TiB and Per Protected VM
  • VMware Ransomware Recovery (RWR)
    • Sold as Per Protected VM
  • VMware Site Recovery (SRM)
    • Sold as pack of 25 VMs
  • vSAN Enterprise
    • Sold as 8TiB per CPU socket
  • VMware Load Balancer (NSX Advanced Load Balancer)
    • Sold as per service unit
  • Tanzu Mission Control (TMC)
    • Sold as per CPU Core
    • TMC SaaS
    • TMC (Self-Managed)
  • Tanzu Application Platform (TAP)
    • TAP
      • Sold as per vCPU
    • Tanzu Spring Runtime
      • Sold as per CPU Core
  • Tanzu Spring Runtime (TSR)
    • Sold as per CPU Core
  • Tanzu Guardrails Enterprise (TGE)
    • Sold as per resource
    • Tanzu Hub
    • Tanzu Guardrails
    • Aria Automation Config (formally Saltstack)
    • Automation for Secure Clouds
    • Automation for Secure Host
  • Tanzu Guardrails Advanced (TGA)
    • Sold as per resource
    • Tanzu Hub
    • Tanzu Guardrails
    • Automation for Secure Clouds
  • Tanzu Cloudhealth Enterprise (TCE)
    • Sold as percentage of monthly cloud spend
  • Tanzu Application Catalog (TAC)
    • Sold as active artifact
  • Tanzu Ops for Apps (formally Wavefront)
    • Sold as packets per second (PPS)
  • Tanzu Insights (TI)
    • Sold as event per month
  • Note: The included 100GiB of vSAN Storage per CPU core will be available in a future vSphere patch update.

Also additional offers for customers:

  • VMware vSphere Standard (VVS)
  • VMware vSphere Essentials Plus Kit (VVEP)

Products & Support Services includes:

  • vSphere Standard
    • vCenter Server Standard
    • vSphere ESXi
  • Production Support Service

Available Add-Ons for purchase for VSS:

  • VMware Cloud Disaster Recovery (VCDR)
    • Sold as protected TiB and Per Protected VM
  • VMware Ransomware Recovery (RWR)
    • Sold as Per Protected VM
  • VMware Site Recovery (SRM)
    • Sold as pack of 25 VMs

VMware vSphere Essentials Plus Kit (VVEP)

Products & Support Services includes:

  • vSphere Essentials Plus (Maximum of 3 host w/up to 96 Cores)
    • vCenter Server Essentials
    • vSphere ESXi
  • Production Support Service

Available Add-Ons for purchase for VVEP:

  • VMware Cloud Disaster Recovery (VCDR)
    • Sold as protected TiB and Per Protected VM
  • VMware Ransomware Recovery (RWR)
    • Sold as Per Protected VM
  • VMware Site Recovery (SRM)
    • Sold as pack of 25 VMs

VMware Validated Solutions (VVS) for VCF

Available VVS for VCF:

  • Private Cloud Automation for VCF
  • Intelligent Operations Management for VCF
  • Intelligent Logging and Analytics for VCF
  • Cloud-Based Network Visibility for VCF
  • Developer Ready Infrastructure for VCF
  • Cross Cloud Mobility for VCF
  • Cloud-Based Workload Protection for VCF
  • Cloud-Based Ransomware Recovery for VCF
  • Site Protection and Disaster Recovery for VCF
  • Advanced Load Balancing for VCF
January 8, 2024 0 comments 3K views
0 FacebookTwitterLinkedinEmail
NetworkingVMware vSAN

VMware vSAN and Remote Direct Memory Access

by Tommy Grot January 5, 2024
written by Tommy Grot 3 minutes read

Welcome to the first blog post of 2024! We are thrilled to kick off the year with a topic that is bound to ignite your vSAN Cluster. Get ready to dive into the world of RDMA (Remote Direct Memory Access) and vSAN (Virtual Storage Area Network) implementation. These cutting-edge technologies are revolutionizing the way data is transferred and stored, promising lightning-fast speeds and unparalleled efficiency. Whether you are a tech enthusiast, a system administrator, or simply someone intrigued by the latest advancements in the tech universe, this blog post will unravel the mysteries of RDMA and vSAN, leaving you with a newfound understanding and enthusiasm for these game-changing innovations. So, buckle up and lets get ready!

Lets configured your ESXi Host to be ready for RDMA for vSAN

First thing you will want your Core Networking Switches to have Data Center bridging configured for all interfaces that are connected to your vSAN Cluster. Link to Arista

Example Syntax From my Arista DCS-7050QX-32S-F
   description ESX01-VDS01-1-VMNIC4
   mtu 9214
   dcbx mode ieee
   speed forced 40gfull
   switchport mode trunk
   priority-flow-control on
   priority-flow-control priority 3 no-drop

Sample Config

So, now that the networking is prepared next we will need to SSH into each ESXi Host and you will need configure the settings below:

Example of vSAN Cluster Health regarding RDMA not configured

While in SSH – you will need to configured each host with the parameters’ below in each code block

dcbx int Set DCBX operational mode
Values : 0 – Disabled, 1 – Enabled Hardware Mode, 2 – Enabled Software Mode, 3 – If Hardware Mode is supported Enable Hardware Mode, else Enable Software

esxcli system module parameters set -m nmlx5_core -p dcbx=3

pfctx int 0x08 Priority based Flow Control policy on TX.
Values : 0-255
It’s 8 bits bit mask, each bit indicates priority [0-7]. Bit value:
1 – generate pause frames according to the RX buffer threshold on the specified priority.
0 – never generate pause frames on the specified priority.
Notes: Must be equal to pfcrx.
Default: 0

pfcrx int 0x08 Priority based Flow Control policy on RX.
Values : 0-255
It’s 8 bits bit mask, each bit indicates priority [0-7]. Bit value:
1 – respect incoming pause frames on the specified priority.
0 – ignore incoming pause frames on the specified priority.
Notes: Must be equal to pfctx.
Default: 0

trust_state int Port policy to calculate the switch priority and packet color based on incoming packet
Values : 1 – TRUST_PCP, 2 – TRUST_DSCP
Default: 1

esxcli system module parameters set -m nmlx5_core -p "pfctx=0x08 pfcrx=0x08 trust_state=2 max_vfs=0"

pcp_force int PCP value to force on outgoing RoCE traffic.
Cannot be active when dscp_to_pcp is enabled.
Values : -1 – Disabled, 0-7 – PCP value to force
Default: -1

dscp_force int DSCP value to force on outgoing RoCE traffic.

Values : -1 – Disabled, 0-63 – DSCP value to force
Default: -1

esxcli system module parameters set -m nmlx5_rdma -p "pcp_force=-1 dscp_force=26"

Now, that your have configured all the ESXi hosts, you will need to repeat the syntax above to each host you have. Once updated you will need to put each host in maintenance mode and reboot each host.

Once all ESXi hosts are configured and rebooted, vSAN Health should report back RDMA Configuration Healthy.

Below are some Network Backbone tests over RDMA!

January 5, 2024 2 comments 1.8K views
1 FacebookTwitterLinkedinEmail
VMware vCenter

How To Upgrade to vSphere 8 Update 2

by Tommy Grot September 21, 2023
written by Tommy Grot 2 minutes read

Tonight’s blog post is about – VMware vSphere 8 Update 2 and its upgrade process! If you’re an avid virtualization enthusiast or a tech wizard looking to stay ahead of the game, you’ve come to the right place. VMware vSphere 8 Update 2 brings a plethora of new features, enhancements, and performance improvement!

What you will need, if you do not utilize vSphere Image Lifecycle then you will need to download these:

VMware-VCSA-all-8.0.2-22385739.iso
VMware-VMvisor-Installer-8.0U2-22380479.x86_64.iso

Below is some information from VMware’s website on vSphere 8 Update 2!

Reduced Downtime Upgrade

First, let’s talk about patching and updating. We’ve all patched vCenter instances and we know that task can often take a long time to complete, and during that time, vCenter services are offline. We introduced Reduced Downtime Upgrade as a new method to update vCenter instances with vSphere+. We’re bringing that same functionality to on-premises vCenter instances that are not connected to vSphere+.

vCenter reduced downtime upgrade is supported for single self-managed vCenter instances initially. It does not support vCenter instances enabled with vCenter HA or vCenter instances participating in Enhanced Linked Mode (ELM). vCenter reduced downtime upgrade is supported to update vCenter instances running version 8.0 or 8.0 U1 to 8.0 U2 and will support updating 8.0 U2 to future versions.

Non-disruptive Certificate Management

vSphere 8 Update 2 introduces non-disruptive certificate management. This means vSphere administrators can renew and replace the vCenter SSL/TLS certificate without requiring service restarts. External solutions, like VMware NSX, may require re-authentication to vCenter after a certificate is changed. With industry best practice encouraging the reduction in the maximum validity of TLS certificates, vSphere administrators can adhere to these best practices and perform annual certificate renewals without impacting vCenter productivity.

Let’s take a deeper look at each of the 5 steps during a reduced downtime upgrade.

Before you upgrade! Ensure you have backups configured have successful backups.

Login to VAMI – Update – Stage and Install

Lets Accept the EULA!

Good ole Prechecks prior to update!

Right here, make sure you have solid backups – For my deployment this is a lab so i can rebuild without any issues but for production. STOP and Go back to Backup page and ensure you have good backups if not, take one!

Backup Section

The upgrade process was very quick!

Now, that we have upgraded VCSA, lets login and lets stage our ESXi upgrade process. Utilizing the Image Managment

Select 8.0 U2 22380479 Image

Then hit Remediate all, if you have all pre-checks successfully staged and ready to upgrade lets upgrade our ESXi hosts!

There we go! One of the 3 hosts has upgraded!

September 21, 2023 0 comments 5K views
0 FacebookTwitterLinkedinEmail
VMware NSX

NSX 4.x Certificate Replacement

by Tommy Grot August 31, 2023
written by Tommy Grot 2 minutes read

Tonight’s topic is on replacing NSX Certificate for each NSX Manager appliance and also the VIP. If you’re tired of battling with certificate issues and are looking for a straightforward solution, you’ve come to the right place! In this blog post, we will guide you through the process of replacing NSX certificates for each manager and the VIP in a hassle-free manner. We will break down the steps and provide you with expert tips to ensure a smooth transition. Let’s get started!

What you will need:

  • Postman client
  • Certificate CSR
  • Certificate Generated by your Enterprise CA (I use Microsoft CA)
  • Your Enterprise Root CA Cert
  • Your newly generated Private Key
  1. With your admin account, log in to NSX Manager.
  2. Select System > Certificates.

Import your Certificate and Private Key Into your NSX Manager via Web UI

Service Certificate – No

Certificate Contents

  • (Cert)
  • (Intermediate – if exists)
  • (Root Cert)

Once you have all pre-requisites ready lets open up postman client and what you will need to do is prepare the authentication portion of your postman to authenticate successfully to the NSX Managers. Once you will then you can start getting the API calls ready.

First lets validate the certificate we imported –

  • GET https://<nsx-mgr>/api/v1/trust-management/certificates/<cert-id>?action=validate
https://nsx01a.prd.virtualbytes.io/api/v1/trust-management/certificates/6d78f17d-f58c-4c27-99fd-31b572dfb1e8?action=validate

Once, you see Status OK then proceed to the next step below.

POST https://<FQDN>/api/v1/trust-management/certificates/<cert-id>?action=apply_certificate&service_type=API&node_id=<node-id>

https://nsx01a.prd.virtualbytes.io/api/v1/trust-management/certificates/6d78f17d-f58c-4c27-99fd-31b572dfb1e8?action=apply_certificate&service_type=API&node_id=7cbf2942-086e-9316-b277-95beed9d91b1

Repeat the follow for the additional NSX Managers – Below you can grab the UUID from System – Appliances – UUID (Copy to Clipboard)

https://nsx01.prd.virtualbytes.io/api/v1/trust-management/certificates/6d78f17d-f58c-4c27-99fd-31b572dfb1e8?action=apply_certificate&service_type=MGMT_CLUSTER

There we go, the VIP of my NSX cluster has a enterprise CA signed certificate!

August 31, 2023 2 comments 2K views
1 FacebookTwitterLinkedinEmail
Events

VMware Explore 2023 – Recap!

by Tommy Grot August 24, 2023
written by Tommy Grot 3 minutes read

Well That’s a Wrap…

Lets Recap! VMware Explore event was an absolute blast! We immersed ourselves in the fun-filled adventures of a multi cloud universe, diving headfirst into tons of Artificial Intelligence content and exploring the endless possibilities of multi-cloud technology. From mind-boggling demos to thought-provoking sessions, this event truly ignited our excitement for the future. With the incredible innovations and breakthroughs showcased, we can’t wait to see where this journey takes us next. The world of technology is evolving at lightning speed, and VMware Explore has undoubtedly left us buzzing with anticipation for what lies ahead in this exhilarating multi cloud universe. Stay Tuned for next VMware Explore 2024 in Las Vegas.

Previous Post of VMware Explore’s General Session here


Celebrating VMware’s 25 Years of Innovation

Introducing VMware Private AI Foundation

During the general session VMware CEO, Raghu Raghuram, and NVIDIA CEO, Jensen Huang, announced a new partnership to offer the next generation of Artificial Intelligence and VMware together, with this innovation with Generative AI and Large Language Models, this will allow organizations to embark the new era of computing and assisted computing to optimize their business’ needs and requirements. With NVIDIA AI Enterprise and VMware Cloud Foundation together, these two solutions will expand the VMware portfolio tremendously.


The Hub

The Hub! Fun filled adventures of: VMware Communities, VMTN Theater, Broadcast Booth, VMware {code} and VMware Rewards and so much more, cant forgot the cozy relaxing area with bean bags! This was the best place to kick back and relax with your fellow Explorer’s before attending your next session!


Incredible Friendships

My time spent with these incredible VMware VCDX’s (Mark Gabryjelski #023 – left and right – John Arrasjid #001) been nothing short of exhilarating! Getting to dive deep into the world of virtualization and cloud computing with the best in the field has been an absolute dream come true. I’ve gained invaluable insights, learned new techniques, and made lasting friendships that will undoubtedly propel my career forward. I am truly grateful for the opportunity to spend quality time with these masters of their craft, and I cannot wait to apply all that I’ve learned. The future is looking brighter than ever, and I’m thrilled to continue this exciting journey in the world of VMware!

My Favorite Sessions!

  • Keep the Attacker Out: Infrastructure Security Hardening and Auditing
  • Why and How to Apply the DISA vSphere STIGs and Other Hardening
  • Elevate Your Application Modernization Journey with Developer-Ready Cloud

VMware Communities

I want to thank the VMware Communities especially Corey Romero, for allowing me to be apart of the vExpert Team as well coming to VMware Explore 2023 as a Blogger! This year’s explore was beyond amazing, meeting many different executives and being able to meet engineers. architects and creating long lasting connections and friendships!

Highlights of VMware Explore 2023 – Las Vegas (Gallery)

VMware Explore 2023 has been filled with tons of joy and laughter and connections, from meeting Raghu Raghuram, CEO of VMware and Sumit Dhawan, President of VMware it was awesome moment. From exploring Las Vegas and The Venetian Resort. I am excited for VMware Explore 2024, here again in Las Vegas next year!

August 24, 2023 1 comment 515 views
0 FacebookTwitterLinkedinEmail
Events

VMware Explore 2023 – General Session

by Tommy Grot August 22, 2023
written by Tommy Grot 2 minutes read

VMware Explore 2023 General Session News and Releases!


Welcome to the future of virtualization and cloud computing! Get ready to embark on an exhilarating journey as we dive into the incredible world of VMware Explore 2023. Brace yourselves for an electrifying experience filled with groundbreaking innovations, cutting-edge technologies, and mind-blowing possibilities that will leave you in awe. This blog post will be your ultimate guide to discovering the latest advancements and trends shaping the future of VMware. From immersive virtual environments to intelligent automation and beyond, we’ll explore the limitless potential that lies ahead. So, fasten your seatbelts, tech enthusiasts, because VMware Explore 2023 is about to take you on a thrilling ride into the unknown. Get ready to witness the future unfold before your eyes!

New Releases of Products and Features!

  • vSAN MAX
  • NSX+
  • VMware Cloud Foundation
  • Ransomware and Disaster Recovery
  • Tanzu Application Engine
  • VMware Edge Cloud Orchestrator – Police Interceptor Truck
  • VMware Private AI Foundation with NVIDIA

NVIDIA CEO Jensen Huang on stage at VMware Explore 2023!

vSAN MAX

The introduction of the vSAN Express Storage Architectureâ„¢ (ESA) in VMware vSAN 8 just one year ago marked a monumental advance in VMware’s hyperconverged solution.  For the past year, we have highlighted just how extraordinary it is in its ability to process and store data faster and more efficiently than ever before.  As impressive as that is, perhaps the most powerful aspect of the ESA is its ability to unlock new capabilities for our customers.

  • VMware is announcing the upcoming release of vSAN 8 Update 2 as well as an exciting new offering, VMware vSAN MaxTM
  • vSAN Max enables a new, optional disaggregated storage deployment model built on vSAN Express Storage Architecture
  • Performance improvements of up to 30% can be expected in vSAN 8 U2, through multiple platform enhancements

It is the power of the Express Storage Architecture that leads us to the introduction of vSAN Maxâ„¢:  VMware’s new disaggregated storage offering that provides Petabyte-scale centralized shared storage for your vSphere clusters.  Let’s look at what vSAN Max is, and how it will deliver new capabilities, cost savings, and flexibility to your workloads running on VMware vSphere.

VMware Explore 2023 General Session is booming with thousands of Explorer’s and amazing news releases!

In conclusion, the VMware Explore 2023 General Session is an absolute thrill for tech enthusiasts and professionals alike! Packed with mind-blowing advancements in AI and LLM, cutting-edge apps, groundbreaking VDI technology, and the limitless possibilities of the cloud, this event is sure to leave you awestruck. Prepare to be captivated by the boundless potential of these incredible innovations as they shape the future of technology. Get ready to soar to new heights with VMware, because the possibilities are truly endless!

August 22, 2023 0 comments 718 views
0 FacebookTwitterLinkedinEmail
Newer Posts
Older Posts




Recent Posts

  • What’s New In VMware Cloud Foundation 9.0
  • Deploying & Configuring the VMware LCM Bundle Utility on Photon OS: A Step-by-Step Guide
  • VMware Cloud Foundation: Don’t Forget About SSO Service Accounts
  • VMware Explore Las Vegas 2025: Illuminating the Path to Cloud Excellence!
  • Securing Software Updates for VMware Cloud Foundation: What You Need to Know

AI AVI Vantage cloud Cloud Computing cloud director computing configure cyber security director dns domain controller ESXi How To las vegas llm llms multi-cloud multicloud NSx NSX-T 3.2.0 private AI servers ssh storage tenant upgrade vcd vcda VCDX vcenter VCF VDC vexpert Virtual Machines VMs vmware vmware.com vmware aria VMware Cloud Foundation VMware cluster VMware Explore VMware NSX vrslcm vsan walkthrough

  • Twitter
  • Instagram
  • Linkedin
  • Youtube

@2023 - All Right Reserved. Designed and Developed by Virtual Bytes

Virtual Bytes
  • Home
  • Home Data Center 2025
  • VMware
    • Cloud
    • Datacenter & Cloud Infrastructure
      • VMware ESXi
      • VMware vCenter
      • VMware vSAN
    • Networking & Security
    • Desktop & App Virtualization
      • Omnissa Horizon
    • Troubleshooting
    • Ansible
  • Education
  • Hardware
    • Hardware Tips & Tricks
  • Events
  • About
    • About Me
    • Home Lab Archives
      • Home Lab 2020-2022
      • Home Lab 2016-2020