Tag:

vmware

VMware Cloud Foundation

Offline VMware Cloud Foundation 9 Depot: Your Path to Air-Gapped Deployments

by Tommy Grot
written by Tommy Grot 8 minutes read

Deploying VMware Cloud Foundation (VCF) in environments with limited or no external network access – whether for security or logistical reasons – requires a little planning. One key piece is having a local depot for software packages. In this post, we’ll walk through setting up an offline depot web server for VCF 9, allowing you to keep your deployments running smoothly even when disconnected from the internet. We’ll cover the necessary components, configuration steps, and best practices to ensure a reliable and accessible offline repository. Let’s dive in!

What is Required

  • Generate download token on Broadcom Support Portal.
  • The offline depot must have:
    • The latest version of the VCF Download Tool, which you can download from the Broadcom Support Portal.
    • Virtual machine with Internet connectivity
    • Configure TCP keepalive in your SSH client to prevent socket connection timeouts.

Error: “Unable to connect to the Proxy Server” – VCF Download Tool is failing with proxy configured.

VMware is working on the solution for Proxy enabled downloads – KB Article

Upload the VCF Bundle Utility to the VM and extract it into a directory.

tar -xzvf vcf-download-tool-9.0.0.0.24703747.tar.gz

After extracting the VCF download tool, create a text document with your authentication token for downloading the binaries.

Executing the VCF Bundle Tool example:

./vcf-download-tool
Description:
Download all the necessary files. The command supports filtering to narrow down the selection of binaries based on the customer intent. At least one filter is required. In addition to the
binaries, it also downloads all of the needed metadata. However, UMDS binaries are excluded from the download. When executed multiple times with the same output directory, the command’s
behavior is cumulative, adding to previously downloaded binaries without overwriting them.

      --ceip=<ENABLE|DISABLE>
                            Enable or disable the Customer Experience Improvement Program (CEIP) within the VCF Download Tool. When the tool is used for the first time, if not provided, the
                              user will be prompted to make a choice about whether to participate in CEIP. After the initial selection, the value will be stored, making the parameter optional
                              in future runs. To change the persisted value pass the parameter with the new value. Valid values: ENABLE, DISABLE
* -d, --depot-store=<depotStore>
                            Directory where all binaries and metadata downloaded by the VCF Download Tool will be stored. This directory serves as the local repository for all downloaded
                              artifacts, maintaining the necessary structure for easy access and management.
  -h, --help                Displays a help message that provides information about the command and its available options, and then exits the tool.

[DEPOT] Depot authentication settings:
*     --depot-download-token-file=<depotDownloadTokenFile>
                            Path to text file containing single line with depot download token. Download token can be generated at Broadcom download portal and used for authentication instead
                              of --depot-user and --depot-user-password-file.
      --depot-user-password-file=<depotUserPasswordFile>
                            Path to a text file that contains the password for the provided --depot-user. The file should have the password on a single line. If this parameter is not provided,
                              the user will be prompted to manually enter the password.
* -u, --depot-user=<depotUser>
                            Username used for authentication when accessing the depot from which binaries and metadata are downloaded.

[PROXY] Proxy configuration settings:
      --proxy-https         Specifies whether the proxy server is configured to be used with HTTPS connections.
      --proxy-user-password-file=<proxyServerPasswordFile>
                            Path to a text file containing the password for the provided --proxy-user. The file should contain the password on a single line. If this parameter is not provided,
                              the user will be prompted to enter the password manually.
* -r, --proxy-user=<proxyServerUserName>
                            Username required to authenticate to the proxy server. If the proxy server enforces authentication, this parameter allows you to provide the necessary credentials
                              for accessing the proxy.
* -s, --proxy-server=<proxyServerHostName>
                            Host name of the proxy server that the VCF Download Tool will use for internet access. The required format is <FQDN:Port>. The proxy server must be reachable from
                              the machine where the tool is running.

[VCF VERSION] VCF Version filter parameters:
      --automated-install   Download binaries needed by VCF Installer.
      --component=<component>
                            Component type for which to download binaries. Possible values [VCENTER, SDDC_MANAGER_VCF, NSX_T_MANAGER, ESX_HOST, VRSLCM, VRA, VROPS, VRLI, VRNI, VSAN_OSA_WITNESS,
                              VSAN_ESA_WITNESS, VSAN_FILE_SERVICES, VMTOOLS, VCFDT, VCF_OPS_CLOUD_PROXY, VIDB, HCX, VMRC, VRO].
      --lifecycle-managed-by=<SDDC_MANAGER_VCF|VRSLCM|SELF>
                            Download binaries whose lifecycle is managed by the provided component. Possible values [SDDC_MANAGER_VCF, VRSLCM, SELF].
      --patches-only        Download binaries for patch versions of components.
      --sku=<VCF|VVF>       Offering type for which binaries to be downloaded. Possible values [VCF, VVF].
  -t, --type=<INSTALL|UPGRADE>
                            Type of binary to be downloaded. Possible values [INSTALL, UPGRADE].
*     --vcf-version=<vcf version[..[end version]]>
                            Version of VMware Cloud Foundation (VCF) for which binaries to be downloaded. Provided version should be of format a.b, a.b.c or a.b.c.d. For example, if 9.0 is
                              provided, 9.0.0.0 major release and all the maintenance release for 9.0.x is returned. If 9.0.1 is provided only 9.0.1.x release is returned. If 9.0.1.0 is
                              provided, exact release version is matched. Version range is also supported with format start_version..end_version. When version range option is used all binaries
                              from start version inclusive till end version inclusive will be downloaded. If end version is not provided (e.g. 9.0..) binaries for all released versions higher
                              than 9.0 will be downloaded.

[BUNDLE ID] Bundle ID filter parameters:
      --id=<bundleIds>[,<bundleIds>...]
                            Accepts one or multiple binary IDs, which can be provided as a comma-separated list or by repeating the option.

[DOWNLOAD SPEC] Download spec filter parameters:
      --download-spec-file=<downloadSpecFile>
                            Path to the download specification file generated by the create download spec command. This file contains the details of the binaries required for the planned
                              upgrades in your environment.

Examples:
1. Download install binaries needed by VCF Installer for deploying VCF instance for a specific VCF version using depot username:
  vcf-download-tool binaries download --depot-store=<binaries_dir> --depot-user=<username> --depot-user-password-file=<password_file_path> --vcf-version=<VCF_version> --sku=VCF
--automated-install --type=INSTALL
2. Download upgrade binaries whose lifecycle is managed by SDDC Manager for specific VCF version using depot token:
  vcf-download-tool binaries download --depot-store=<binaries_dir> --depot-download-token-file=<token_file_path> --vcf-version=<VCF_version> --lifecycle-managed-by=SDDC_MANAGER_VCF
--type=UPGRADE
3. Download binaries based on download specification file using depot token through proxy:
  vcf-download-tool binaries download --depot-store=<binaries_dir> --depot-download-token-file=<token_file_path> --download-spec-file=<download_spec_file_path> --proxy-server=<FQDN:Port>
--proxy-https --proxy-user=<username> --proxy-user-password-file=<password_file_path>

Commands:

  • binaries Management of the binaries files within the system.
  • metadata Management of the metadata files within the system.
  • releases Operations related to the VCF releases.
  • umds Manage the installation and execution of the UMDS (Update Manager Download Service) tool.

NOTE: The following command is for installation binaries ( –type=install ), specify upgrade parameters for upgrade binaries for VCF.

./vcf-download-tool binaries download --vcf-version 9.0.0 --automated-install -d /var/www/offline-bundles --depot-download-token-file /root/token.txt --type=install

Binaries are downloading! They are now available in OVA or ISO format, depending on whether you are installing or upgrading.

The binaries have been downloaded, and an example of the tree structure for the offline VCF Depot is shown below.

root@photon-69a92c0feee [ /var/www/offline-bundles/PROD ]# tree
.
├── COMP
│   ├── NSX_T_MANAGER
│   │   └── nsx-unified-appliance-9.0.0.0.24733065.ova
│   ├── SDDC_MANAGER_VCF
│   │   ├── Compatibility
│   │   │   └── VmwareCompatibilityData.json
│   │   └── VCF-SDDC-Manager-Appliance-9.0.0.0.24703748.ova
│   ├── VCENTER
│   │   └── VMware-VCSA-all-9.0.0.0.24755230.iso
│   ├── VCF_OPS_CLOUD_PROXY
│   │   └── Operations-Cloud-Proxy-9.0.0.0.24695833.ova
│   ├── VRA
│   │   └── vmsp-vcfa-combined-9.0.0.0.24701403.tar
│   ├── VROPS
│   │   └── Operations-Appliance-9.0.0.0.24695812.ova
│   └── VRSLCM
│       └── VCF-OPS-Lifecycle-Manager-Appliance-9.0.0.0.24695816.ova
├── metadata
│   ├── manifest
│   │   └── v1
│   │       └── vcfManifest.json
│   └── productVersionCatalog
│       └── v1
│           ├── productVersionCatalog.json
│           └── productVersionCatalog.sig
└── vsan
    └── hcl
        ├── all.json
        └── lastupdatedtime.json

16 directories, 13 files

0 comments 287 views
0 FacebookTwitterLinkedinThreadsBlueskyEmail
VMware Cloud Foundation

VMware Cloud Foundation 9: Simplifying Identity with a Unified SSO Experience

by Tommy Grot
written by Tommy Grot 1 minutes read

In this blog post, we’ll configure VCF 9 Single Sign-On (SSO) and integrate it with VCF Network Insight.

No more juggling multiple passwords or struggling with inconsistent access policies. VCF 9 leverages VMware Identity Manager to deliver a seamless and secure experience across your entire VMware-powered cloud, including vSphere, vSAN, and NSX. This blog post will explore how VCF 9’s unified identity solution benefits your organization, reducing administrative overhead, improving compliance, and accelerating your cloud journey. We’ll discuss the key features, integration options, and how to get started with a streamlined, secure access experience for your entire team.

How To Integrate VCF 9 Single Sign On :

First, log in to the VCF Operations console. Then, select Fleet Management from the menu, and click on Identity and Access.

Next, go to VCF Other Components and click Configure for SSO.

Specify a name for the SSO Component

Click Generate to create unique credentials. A Client ID and Secret will then be generated.

Note: Save the Client ID, Secret, and URL in a secure location.

Save your changes, then proceed with integrating VCF SSO and VCF Network Insight. You will see a certificate message pop up during the integration.

Now, we have completed the SSO enablement now we can continue on enabling it on VCF Network Insight

Fill in the information you have been provided from when you generated the token for SSO integration.

0 comments 156 views
0 FacebookTwitterLinkedinThreadsBlueskyEmail
VMware Cloud Foundation

What’s New In VMware Cloud Foundation 9.0

by Tommy Grot
written by Tommy Grot 5 minutes read

In today’s rapidly evolving digital landscape, businesses need the agility and scalability of the cloud, without sacrificing the control and security of on-premises infrastructure. VMware Cloud Foundation (VCF) has long been a leader in bridging that gap, and the latest release, VCF 9.0, represents a significant leap forward.

VCF 9.0 isn’t just a platform; it’s the most trusted private cloud foundation for running all your applications – from mission-critical databases and enterprise applications to modern, cloud-native workloads. It delivers a consistent, simplified cloud experience, empowering cloud administrators to automate and streamline operations, developers to rapidly innovate, and ultimately, your business to thrive. In this post, we’ll dive into what makes VCF 9.0 a game-changer, exploring the key new features and how they benefit everyone from the data center to the developer desktop.

One Interface for Consumption & Administration: The core of this unification is a dramatically simplified and consistent management experience. VCF 9.0 leverages the VCF Operations/Automation family (formerly Aria) deeply integrated into the platform. This means developers and administrators alike access a single interface – VCF Operations/Automation – to provision and manage both traditional VMs and container-based applications running on vSphere Kubernetes Services (VKS).

This eliminates the need to switch between different consoles, learn multiple workflows, and reconcile inconsistencies across environments. Self-service capabilities within VCF Operations/Automation empower developers to rapidly deploy applications, while administrators maintain centralized control and governance. The introduction of Aria Universal simplifies lifecycle management across multi-cloud deployments.

Run VMs and Containers/K8s: VCF 9.0 natively integrates vSphere Kubernetes Services (VKS), allowing organizations to run modern, cloud-native applications alongside existing VM-based workloads on the same infrastructure. This isn’t simply running Kubernetes alongside vSphere, it’s a fully integrated experience. Administrators can deploy, scale, and manage Kubernetes clusters as easily as they manage VMs. The platform supports a range of Kubernetes deployment options, from single-node development clusters to highly available, production-grade deployments. This flexibility enables organizations to adopt a multi-cloud strategy and benefit from the agility of containers without sacrificing the stability and reliability of their established virtualization infrastructure. Furthermore, the integration extends to application lifecycle management with Aria Automation, providing consistent automation for both VM and containerized apps.

Controlling Costs:

Traditionally, managing separate infrastructure silos has led to resource fragmentation and wasted spend. VCF 9.0 addresses this by optimizing resource utilization across both VM and container workloads. Centralized management and automation capabilities reduce manual effort and improve operational efficiency. In essence, VCF 9.0 is a platform designed for the modern data center, offering a simplified, unified, and cost-effective way to build and operate a truly sovereign and secure cloud environment capable of supporting a diverse range of applications and workloads.

VMware Cloud Foundation 9.0 introduces significant advancements in storage management, fundamentally changing how organizations consume and optimize their storage infrastructure. These features aren’t merely incremental improvements; they represent a strategic shift towards maximizing storage efficiency and unlocking new levels of application performance.

vSAN Global Deduplication

A core feature is the introduction of global deduplication for vSAN. Historically, deduplication in virtualized environments has been limited by the scope of individual datastores or VMs. vSAN global deduplication operates across the entire vSAN cluster, identifying and eliminating redundant data blocks regardless of which VM or datastore they reside in. This dramatically reduces the amount of storage capacity required, resulting in significant cost savings. The benefits extend beyond simply reducing storage footprint; deduplication also improves data protection efficiency, as only unique data blocks need to be backed up and replicated. Importantly, VCF 9.0 manages the complexity of deduplication, ensuring it’s transparent to applications and administrators.

VMware Cloud Foundation 9.0 introduces a novel approach to storage optimization by dynamically repurposing unused system resources. Instead of simply allocating unused RAM as a general cache tier, VCF 9.0 focuses on efficiently managing memory bitmaps associated with inactive workloads.

Understanding Memory Bitmaps

Memory bitmaps are essentially metadata structures that track which blocks of memory are currently in use and which are available. When a virtual machine or workload becomes inactive, its memory pages may still be allocated but are not actively being used. However, those allocations still consume valuable memory resources.

How it Works: Offloading Inactive Workloads

VCF 9.0 intelligently identifies these inactive workloads represented by memory bitmaps. Instead of keeping those bitmap allocations tied up in RAM, the platform transparently offloads them to high-performance NVMe PCIe disks. This process effectively frees up valuable RAM for active workloads, improving overall system performance and responsiveness.

VMware Cloud Foundation 9.0 introduces a dramatically simplified deployment experience with its new VCF Installer, marking a significant leap forward from the complexities of previous versions. While VCF 5.2.x administrators faced a cumbersome process requiring detailed spreadsheet configuration followed by uploading to Cloud Builder – a method prone to errors and time-consuming – the VCF 9.0 Installer streamlines the entire process.

Simplified Deployment Options

VCF 9.0 supports both online and offline deployment models. Online deployment leverages a direct connection to VMware Lifecycle Manager (LCM) for automated component downloads and configuration. This offers the fastest and most streamlined experience. Offline deployment caters to environments with limited or no internet connectivity. Administrators pre-stage the necessary components on a local depot, ensuring deployment remains possible even in air-gapped environments.

The New Installer Experience

The VCF 9.0 Installer replaces the complex spreadsheet-driven approach with a guided interface which has the capabilities to export to JSON-based configuration. Administrators define their desired environment parameters in a human-readable JSON file, specifying details like ESXi versions, network settings, and storage configurations, DNS records and type of deployment single or redundant. This declarative approach ensures consistency and reduces the risk of errors.

To ensure a smooth and successful VCF 9.0 adoption, organizations should leverage the comprehensive Customer Readiness Matrix, proactively completing pre-deployment checklists and assessments, and engaging VMware Professional Services for expert guidance and support.

VCF 9.0 isn’t just the latest iteration of a platform; it’s a foundational stepping stone towards a future where on-premise private clouds are as agile, scalable, and cost-effective as their public cloud counterparts. It’s a compelling vision for the future of hybrid cloud, and VMware Cloud Foundation 9.0 is laying the groundwork to make that vision a reality.

0 comments 231 views
0 FacebookTwitterLinkedinThreadsBlueskyEmail
VMware Cloud Foundation

Deploying & Configuring the VMware LCM Bundle Utility on Photon OS: A Step-by-Step Guide

by Tommy Grot
written by Tommy Grot 4 minutes read

The need for streamlined VMware appliance updates is undeniable. Managing a VMware Cloud Foundation environment and its appliances can quickly become a complex and time-consuming task, especially in an offline, disconnected VCF environment. This post provides a detailed, step-by-step guide to deploying and configuring the VMware Lifecycle Manager (LCM) Bundle Utility on Photon OS, offering a significant improvement in update management efficiency. We’ll cover everything from initial setup to verifying successful configuration, providing clear instructions and practical advice for administrators comfortable with Photon OS command-line interfaces. Let’s get started!

If you’re interested in creating an offline depot for VCF, check out Aaron Rombaut; he wrote an excellent blog post tailored for VCF offline depots.

Update 07/03/2025 – VCF Download Utility Blog Post – Here

What is Required:

** The LCM Bundle Utility is currently not supported on other Linux distributions or Windows, particularly due to the new Broadcom Token Implementation

You will need to obtain the full ISO x86_64 image.

DownloadSizesha512 checksum
Full ISO x86_644.4G6a7a258399a258da742032987c043ab25503698d35edafaf1ae000f12127da1a161d8b84caa17fd8f23d129e81e1faa7ab087c20ab9229772a643f8f9475305f

Create New Virtual Machine ->

Virtual Machine name ->

Select the compute resource ->

Select your Storage ->

Select Default ->

Select VMware Photon OS (64-bit)

Configure the virtual machine with the following specifications: 2 vCPUs, 4GB of memory, a 1TB disk, and network access. The number of CPUs and memory can be increased later if required.

Deploy!

Now, that you have deployed the virtual machine, lets connect to it via VMRC and mount the Photon OS ISO.

Install ->

EULA ->

Select the 1TB disk. I kept the partitioning on Auto, but you can manually partition it if you prefer.

Select, Photon Real Time ->

Since my Photon LCM VM is deploying on an NSX segment with DHCP, I left it on automatic, but the configuration will vary depending on your implementation.

Set Host name ->

Password ->

Start Install ->

Installing…

Lets boot up to the new Photon VM!

Connect to the Photon OS VM via Remote Console and log in.

Let’s edit the sshd_config file to allow root to connect via SSH.

vi /etc/ssh/sshd_config

Update the following config and uncomment

  • Port 22
  • AddressFamily any
  • ListenAddress 0.0.0.0

Change PermitRootLogin to yes from no

Restart SSH Service

systemctl restart sshd.service

Now that we have completed deploying Photon OS and preparing the virtual machine so that we can SSH into it, we needed to update the SSH configurations within the sshd_config file to allow root to SSH and allow port 22 to listen. Next, we will upload the LCM Bundle Utility via WinSCP

Connect via PuTTY, and then we will untar the lcm-tools-prod.tar.gz.

We will need to make the bin directory with lcm-bundle-transfer-util executable

chmod u+x -R bin/

Change directory to conf. Next, we will use vi to edit the application-prod.properties file and update the required fields below.”

You will need to tailor the Depot Properties to accommodate the Broadcom Download Token. More information is available here.

################### Depot properties ########################
lcm.depot.adapter.certificateCheckEnabled=false
lcm.depot.adapter.port=443
lcm.depot.adapter.host=dl.broadcom.com
lcm.depot.adapter.remote.rootDir=/<Token Here>/PROD
lcm.depot.adapter.remote.repoDir=/COMP/SDDC_MANAGER_VCF
lcm.depot.adapter.remote.index.filename=index.v3
lcm.depot.adapter.remote.offline.index.filename=index.offline
lcm.depot.adapter.local.baseDir=${lcm.bundle.download.default.dir}/tmp
lcm.depot.adapter.local.input.spec.dirname=asyncPatchSpecs
lcm.depot.adapter.local.compatibility.path=v1/products/bundles/type/vcf-lcm-bundle
lcm.depot.adapter.enableBundleSignatureValidation=true
lcm.bundle.manifest.dirname=manifests
lcm.bundle.dirname=bundles

lcm.depot.adapter.lcmManifestFile=lcmManifest.json
lcm.depot.adapter.remote.productVersionCatalog.filename=productVersionCatalog.json
lcm.depot.adapter.remote.lcmManifestDir=/COMP/SDDC_MANAGER_VCF/lcm/manifest
lcm.depot.adapter.enableBundleChecksumValidation=true

lcm.depot.adapter.enableLatestToolVersionCheck=true
lcm.depot.adapter.remote.bundletransferconfig.repoDir:/COMP/SDDC_MANAGER_VCF/obtu

Now that we have updated the applications-prod.properties file, let’s run it. I have extracted my PlannerFile and uploaded it to /root/plannerFile.json.

UPDATE: The VCF Download Tool now accepts Token authentication! You can now use your Token ID (linked to your Site ID) instead of your email.

Token Method (Recommended)

./lcm-bundle-transfer-util --download --plannerFile /root/plannerFile.json --depotDownloadToken <TOKEN ID>

User Account (Old Method)

./lcm-bundle-transfer-util --download --plannerFile /root/plannerFile.json --depotUser <Email-Here>

It is working on Photon OS! The download process has begun.

Deploying the VMware Lifecycle Manager Bundle Utility on Photon OS is a worthwhile investment for any administrator responsible for a VMware Cloud Foundation environment. This guide has provided the foundation for simplifying your appliance updates, reducing operational overhead, and ensuring a more stable and efficient infrastructure. Embrace this approach and take control of your VCF updates!

0 comments 552 views
0 FacebookTwitterLinkedinThreadsBlueskyEmail
Events

VMware Explore Las Vegas 2025: Illuminating the Path to Cloud Excellence!

by Tommy Grot
written by Tommy Grot 15 minutes read

In the vibrant city of Las Vegas, where lights illuminate the night sky, technology enthusiasts and visionaries will gather for VMware Explore 2025 – an event that promises to be a beacon of innovation. This year’s conference will not only showcase the latest advancements in cloud computing and VMware Cloud Foundation, but also inspire attendees to embrace the transformative power of digital technologies.

As we prepare for this remarkable gathering, expect to witness a fusion of cutting-edge solutions and entertainment. VMware Explore Las Vegas 2025 aims to provide a platform where industry experts share their insights on shaping the future of cloud infrastructure. From cloud security strategies to the latest developments in edge computing, every presentation is tailored to equip businesses with the tools needed for sustainable growth.

Be part of this illuminating experience and discover how VMware’s vision aligns with your own digital aspirations. Network with peers, learn from industry leaders, and explore the city that never sleeps during the day—all while gaining valuable insights into cloud technologies.

Welcome to a journey where knowledge meets excitement at VMware Explore Las Vegas 2025!

Explore 2025 Registration

Pricing Options:

Attending the highly anticipated VMware Explore Las Vegas 2025 doesn’t have to break the bank. The event offers a range of pricing options to cater to various budgets and levels of participation:

  • Full Event: Secure your spot early and enjoy a discounted rate. These tickets are ideal for those who want to maximize savings while ensuring their place at the conference. (Price: $1795, onsite rate $2,195)
  • Essentials: $1,195 – Get almost everything from what the Full Event pass has minus, Sessions & Labs Scheduling, Certification Exam, The Party, Events Meals, Explore Backpack and T-Shirt.
  • Meetings+: $695 This pass is meant for customers that are only interested in the General Session, The Meeting Center, The Hub.

Registration Benefits:

  • Access to world-class keynote speakers and industry thought leaders.
  • In-depth workshops and technical sessions covering cloud management, security, and more.
  • Networking opportunities with peers and potential business partners.
  • Exclusive event merchandise and digital resources post-event.

Don’t miss out on this opportunity to invest in your professional development while exploring the vibrant city of Las Vegas. Register now and secure your place at VMware Explore 2025!

Hands-On Labs (HOL) and Their Impact & Experience’s

One of the most exciting aspects of attending VMware Explore Las Vegas 2025 is the opportunity to engage in hands-on labs (HOL), which offer a practical, immersive learning experience. These labs are designed to empower end users and administrators by providing them with a chance to experiment with new VMware solutions in a controlled environment.

Why Hands-On Labs Matter:

  • Practical Application: HOL allows attendees to apply theoretical knowledge gained from presentations and discussions. By actively working with VMware technologies, participants gain a deeper understanding of their capabilities and limitations.
  • Risk-Free Experimentation: In a controlled lab setting, administrators can test new configurations, deploy virtual machines, or explore advanced features without impacting production environments. This risk-free environment encourages experimentation and innovation.
  • Skill Enhancement: These labs are tailored to cover various skill levels, from beginner to advanced. Beginners can grasp fundamental concepts, while experienced professionals can delve into complex scenarios, ensuring everyone benefits.
  • Realistic Scenarios: VMware Explore often recreates real-world use cases, enabling administrators to simulate enterprise environments. This helps them understand how to apply VMware solutions in practical situations, enhancing their problem-solving skills.

Benefits for End Users and Administrators:

  • Enhanced Learning Experience: Hands-on labs provide an interactive learning curve, making it easier for attendees to retain information. By doing, they learn more effectively than through passive listening.
  • Productivity Boost: Administrators can gain hands-on experience with the latest VMware products, enabling them to implement new solutions faster and more efficiently upon returning to their organizations.
  • Community Engagement: HOL sessions often foster discussions among attendees, allowing them to share insights, ask questions, and learn from peers. This collaborative environment expands their network and knowledge base.
  • Staying Ahead of the Curve: VMware Explore introduces new technologies and best practices. By participating in these labs, administrators stay informed about industry trends and can offer innovative solutions to their organizations.

What to Expect at VMware Explore 2025 HOL:

  • Diverse Topics: Labs will cover a wide range of subjects, including VMware Cloud Foundation 5.x, vSphere Foundation, NSX networking, vSAN, and more. Each lab will provide step-by-step guidance and practical exercises.
  • Expert Mentors: VMware’s subject matter experts (SMEs) will be on hand to assist participants, answer questions, and offer valuable insights during the hands-on sessions.
  • Interactive Workshops: Some HOL sessions might include interactive workshops where attendees work in pairs or small groups, fostering collaboration and knowledge sharing.
  • Post-Lab Support: After completing a lab, participants can access online resources, documentation, and forums for further learning and troubleshooting.

Attending VMware Explore Las Vegas 2025 and actively participating in the hands-on labs is an investment in your professional growth as an end user or administrator. It offers a unique opportunity to learn, experiment, and connect with industry experts, ultimately benefiting both personal development and organizational success.

Certifications: Maximizing Your Investment

Attending VMware Explore Las Vegas 2025 offers not only valuable learning experiences but also provides an excellent opportunity to enhance your credentials through certifications. Let’s dive into how this event can benefit you financially and professionally, especially regarding exam preparation and retakes.

Certifications at Your Fingertips:

  • Convenient Exam Opportunities: During VMware Explore, there are dedicated certification exam sessions where you can sit for various VMware exams right after completing relevant training on hands-on labs. This streamlined process saves time and minimizes the hassle of scheduling exams separately.
  • Wide Range of Certifications: From VMware Cloud Foundation (VCP-VCF), VMware vSphere Foundation (VCP-VVF), to VCP and VCAP’s ranging from NSX networking and Cloud on VMware solutions, a variety of certifications are available, catering to different career paths and skill levels. You can choose the most relevant credential for your goals.

Benefits of Passing Exams at VMware Explore:

  • Cost Savings: By passing exams during the event, you avoid the expense of taking them separately elsewhere. Also a benefit of the Full Event Pass you get a complimentary exam voucher and during the event certifications are half off, discounted price. The cost of attending VMware Explore includes access to certification exams, making it a cost-effective way to gain qualifications.
  • Retake Privileges: In many cases, if you don’t pass an exam on your first attempt, you have the advantage of retaking it during the event. This flexibility is valuable as it allows you to strengthen your understanding and improve your chances of success without additional fees.
  • Instant Feedback: After taking the exam, you often receive immediate results, feedback, and score breakdowns. This instant feedback helps identify areas for improvement, allowing you to focus on specific topics before retaking the exam.

Long-Term Advantages:

  • Enhanced Career Prospects: VMware certifications hold significant weight in the industry and are recognized globally. Obtaining these credentials can boost your employability, open doors to new career opportunities, and potentially lead to higher salaries.
  • Continuous Learning: VMware Explore encourages a culture of continuous learning. By attending regular events and updating your certifications, you stay current with the latest technologies, ensuring your skills remain market-relevant.
  • Community Engagement: The certification process often involves interacting with peers and industry experts. Building these connections can lead to valuable collaborations, mentorships, or even job opportunities.

Strategizing Your Success:

  • Preparation is Key: Before attending VMware Explore, ensure you have a solid foundation in the relevant areas. Review study materials, participate in HOL sessions, and consider joining preparation groups or forums to share insights.
  • Time Management: Plan your schedule during the event to allocate sufficient time for exam preparation and retakes if needed. Prioritize exams based on your career goals and the time required to study for each.
  • Post-Exam Support: After passing (or retaking) an exam, take advantage of post-exam resources, such as review materials and support forums, to reinforce your understanding and knowledge retention.

By strategically approaching VMware Explore 2025 with a certification focus, you can maximize the event’s benefits, save costs, and advance your career prospects simultaneously. It’s a win-win situation that demonstrates VMware’s commitment to empowering professionals through continuous learning and development.

Product Related Information / Broadcom’s Vision:

Hock Tan began by highlighting VMware by Broadcom’s rich history and its role in revolutionizing virtualization and cloud computing.

At VMware Explore 2024, the company’s CEO, Hock Tan, took the stage to present a vision for the future of the company and reassure customers about its commitment to innovation and their success.

He acknowledged the company’s impressive track record of innovation, including recent innovations like VMware Cloud Foundation 9 and many other updates within Private AI and business operations, which have expanded VMware’s capabilities in areas like cloud management and multi-cloud.

Tan’s key messages from the general session and explore how VMware is positioning itself for the future while maintaining a strong focus on its customers’ needs. Along with announcing the large community that backs VMware – VMUG and VMware vExperts.

Meeting that One Person:

Attending an event like VMware Explore can be a fantastic opportunity to meet like-minded professionals from various sectors, all united by their passion for cloud computing and virtualization.

VMware Explore 2024 was an absolute blast. It was great to connect with many outstanding individuals, just interacting and sharing experiences with fellow tech enthusiasts is always an inspiring time, filled with passion and energy

Connecting with fellow tech enthusiasts offers several benefits:

  • Knowledge Exchange: Engaging with people from various backgrounds and experiences provides opportunities to learn different perspectives, best practices, and innovative ideas related to cloud computing, virtualization, and beyond.
  • Networking Opportunities: Building relationships with like-minded professionals can lead to future collaborations, mentorships, or even business partnerships. These connections often become valuable resources throughout your career.
  • Inspiration and Motivation: Interacting with individuals who are passionate about technology can be incredibly inspiring. Their enthusiasm and dedication can ignite your own passion, motivate you to explore new possibilities, and push the boundaries of what you thought was achievable.
  • Community Building: Events like VMware Explore contribute to a global tech community. These gatherings strengthen this community by fostering dialogue, sharing knowledge, and encouraging collaboration. It’s a reminder that we’re all part of something bigger, working together to shape the future of technology.
  • Personal Growth: Stepping out of your comfort zone and engaging in conversations with strangers can boost your confidence, improve communication skills, and enhance your ability to connect with people from diverse backgrounds.

Remember, building connections is a two-way street. Being genuine, show interest in others, and offer value wherever possible. The right person could be anyone, and by putting yourself out there, you increase your chances of meeting that one individual who will make a significant impact on your career or personal growth.

So, it’s no wonder that VMware Explore 2024 left a lasting impression and inspired many. Keep nurturing these connections, stay open to new ideas, and let the energy and passion continue to drive your tech journey!

The Most Valuable Session(s):

The most valuable sessions for me were ‘Shaping the Future of Cloud and AI Innovation’ and learning how to leverage VMware Cloud Foundation (VCF) and Private AI Foundation to enable organizations to implement a private AI ecosystem. This includes utilizing CPUs to run AI language model (LLM) workloads, not just relying on GPUs.

This knowledge has empowered me to make strategic decisions for my organization and the customers I support, and it has provided me with a deep understanding of what is involved in hosting and providing your own private AI solution on VCF.

Shaping The Future Of Cloud And AI Innovation [GEN2495LV]

As we navigate the rapidly evolving landscape of cloud and artificial intelligence (AI), it’s crucial to stay ahead of the curve. In this thought-provoking session, you’ll have the opportunity to explore the latest advancements in cloud and AI innovation, and discuss how they will shape the future of our industry.

What’s This General Session All About?

Join us as we delve into the exciting world of cloud and AI, exploring topics such as:

  • Cloud-Native Applications: Learn about the latest trends and best practices for building cloud-native applications that are scalable, secure, and highly available.
  • AI-Driven Innovation: Discover how AI is transforming industries and driving innovation, from natural language processing to computer vision and beyond.
  • Edge Computing: Understand the importance of edge computing in today’s IoT-enabled world and learn about the latest advancements in this rapidly evolving space.

AI Without GPUs: Using Your Existing CPU Resources To Run AI Workloads [INVB2189LV]

As AI adoption continues to grow, the need for powerful processing capabilities becomes increasingly important. Traditionally, this has meant relying on Graphics Processing Units (GPUs) or specialized hardware like TPUs or FPGAs. However, what if you could harness your existing Central Processing Unit (CPU) resources to run AI workloads? In this session, we’ll explore the possibilities and limitations of running AI without GPUs.

What’s This Session All About?

Join us as we delve into the world of CPU-based AI processing. You’ll learn about:

  • CPU-Accelerated AI: Discover how CPUs can be used to accelerate AI workloads, such as machine learning, computer vision, and natural language processing.
  • Best Practices for Optimizing CPU-Based AI: Learn strategies for optimizing your CPU-based AI workloads, including data type selection, kernel optimization, and memory management.

Community Events:

Community events and leadership receptions like the one from VMware Explore 2024, play a pivotal role in shaping one’s journey within the tech industry. These gatherings offer a myriad of benefits, fostering connections, sharing knowledge, and inspiring growth. Here’s why:

  1. Networking Opportunities: Such events bring together professionals from various sectors and backgrounds. They provide a unique platform for individuals to expand their network, meet potential mentors, collaborators, or even future employers. Face-to-face interactions often leave a lasting impression, leading to meaningful relationships that can open doors to new opportunities.
  2. Knowledge Transfer: Tech events are hotspots for knowledge sharing. Presentations, workshops, and panel discussions offer insights into the latest technologies, best practices, and industry trends. Attendees gain access to expertise from leaders in the field, enabling them to stay ahead of the curve or solve complex problems they encounter in their work.
  3. Career Growth: For early-stage professionals or those seeking a career shift, community events can be instrumental. They offer exposure to diverse roles and opportunities within the tech industry. Mentorships initiated at such events can guide individuals through their career paths, provide advice on skill development, and open doors to new possibilities.
  4. Building a Support System: The tech journey can be isolating, especially for remote workers or those in niche fields. Community events create a sense of belonging by bringing together people who share similar passions. This support system can offer encouragement, challenge one another’s ideas, and provide a safe space for open dialogue.
  5. Inspiring Innovation: Interacting with peers from different organizations sparks creativity and innovation. It allows you to see how others are tackling challenges, leading to new perspectives and potential solutions. These exchanges can inspire individuals to think outside the box and approach their work from fresh angles.
  6. Learning from Peers: Sometimes, the best learning occurs when professionals share their experiences and struggles. Community events provide a safe environment for peer-to-peer learning, where individuals can discuss challenges, exchange war stories, and gain insights into how others have navigated similar situations.
  7. Brand and Company Exposure: For tech companies, these events serve as a platform to showcase their products, services, and company culture. They attract potential talent, foster brand awareness, and build a positive employer reputation. Leadership receptions in particular can facilitate direct interactions between company representatives and interested individuals.

In essence, community events and leadership receptions are vital for personal and professional growth within the tech realm. They bridge the gap between learning, networking, and applying knowledge to real-world challenges, ultimately contributing to a thriving tech ecosystem.

Why VMware Explore 2025 in Las Vegas is a Must-Attend Event

VMware Explore 2025, taking place in the vibrant city of Las Vegas, promises to be an extraordinary gathering of tech enthusiasts, innovators, and industry leaders. Here’s why you should consider making it a priority:

  • Tech Innovation Hub: Las Vegas serves as a global hub for innovation, and VMware Explore leverages this by showcasing cutting-edge technologies, trends, and advancements in cloud computing, AI, security, and more.
  • Networking Paradise: The event brings together a diverse range of professionals from around the world, offering unparalleled networking opportunities. You’ll connect with peers, mentors, and potential partners, fostering relationships that can shape your tech journey.
  • Knowledge Exchange: With insightful keynotes, workshops, and panel discussions, VMware Explore 2025 is a knowledge hub. You’ll gain access to industry experts sharing their insights, best practices, and real-world experiences, empowering you with valuable takeaways.
  • Inspirational Stories: Hear from influential speakers who have navigated the tech landscape successfully. Their inspiring journeys and visionary ideas can ignite your creativity and motivate you to push boundaries in your own career.
  • Fun and Engagement: Beyond learning, VMware Explore offers a unique blend of social activities, entertainment, and networking events and not to forget but The Party, last year Jimmy Eats World played at Explore. Las Vegas provides an energetic backdrop for building connections while enjoying the city’s vibrant culture.

In summary, VMware Explore 2025 is not just an event; it’s an immersive experience that combines learning, networking, and inspiration. Attending will equip you with valuable insights, expand your professional network, and leave you energized and ready to tackle tech challenges head-on.

0 comments 346 views
0 FacebookTwitterLinkedinThreadsBlueskyEmail
VMware Cloud Foundation

Securing Software Updates for VMware Cloud Foundation: What You Need to Know

by Tommy Grot
written by Tommy Grot 2 minutes read

Starting March 24, 2025, Broadcom will implement a significant change in the distribution of VMware software binaries for key products. This update aims to enhance security and ensure compliance with industry standards for all our VMware Cloud Service Providers (VCSPs).

From this date onwards, downloading updates and patches for VMware Cloud Foundation, vCenter, ESXi, and vSAN File Services will be handled through a secure new process. This change is crucial for maintaining the integrity and confidentiality of software components, protecting against potential vulnerabilities, and ensuring reliable access to the latest features and bug fixes.

Stay tuned for more details on the implementation and any necessary steps to ensure a smooth transition. Your trusted cloud services are about to get even stronger!

Prepare for VMware Utility

Links for PowerShell Gallery

You will need to download and install PowerCLI addons for PowerVCF and VMware.Powercli for your desktop or virtual machine. As shown in the example below I needed to download both.

VMware Depot How To:

Log into Broadcom Support Portal, in the main dash board toward the bottom right you will see Quick Links -> Generate Download Token ->

Select your Site ID and click Generate Token

Once you have generated a token, you will need to download the VMwareDepotChange Script from VMware KB

Now that you have the script downloaded, you will want to execute the command below, before running the script.

The SSL connection could not be established, see inner exception.

Set-PowerCLIConfiguration -InvalidCertificateAction Ignore -Confirm:$false
  • The SSL connection could not be established, see inner exception.
  • See pre-requisites. Ensure you have set the PowerCLI to ignore invalid certificates or have established SSL trust.

First we will select 1. Choose deployment type and connect:

Now, the interactive prompt will ask you if it is a VCF Deployment? (Y)

After you have connected to your SDDC Manager and vCenter, next we will select Option 2. Enter your token. Below is an example of the output. (My Token is masked out)

Next we will select Option 4 Update, this will connect to the SDDC Manager and vCenter and update the depot from the old vmware depot to dl.broadcom.com/etc/…

After you have updated the depot, log back into VCF/SDDC Manager and go to Administration -> Depot Settings and Authenticate, once you have finished wait 5 minutes and you will be able to download again!

0 comments 546 views
0 FacebookTwitterLinkedinThreadsBlueskyEmail
VMware Cloud Foundation

VMware Cloud Foundation 5.2: A Guide to Simplified Upgrade with Flexible BOM

by Tommy Grot
written by Tommy Grot 5 minutes read

VMware Cloud Foundation (VCF) has revolutionized the way organizations deploy, manage, and secure their on-premises infrastructure. With the recent release of VCF 5.2, VMware continues to push the boundaries of hybrid-cloud innovation, offering enhanced features, improved scalability, and streamlined management capabilities.

One of the most significant enhancements in VCF 5.2 is the introduction of Flexible Bill of Materials (BOM), a game-changing approach to infrastructure upgrades. Gone are the days of rigid, one-size-fits-all upgrade paths; with Flexible BOM, administrators can now customize their upgrade process to meet the unique needs of their organization.

In this blog post, we’ll delve into the world of VCF 5.2 and Flexible BOM, exploring the benefits, best practices, and step-by-step procedures for a successful upgrade. Whether you’re a seasoned VCF administrator or just starting your hybrid-cloud journey, this guide will provide you with the insights and expertise needed to elevate your infrastructure to the next level

Flexible BOM Process

Downloading The Bits:

The files will be downloaded with a internet connected laptop/desktop or virtual machine.

Note: I am using “03102025” as the directory structure for this process, you can use any name you like for the folder.

First, let’s open up the Offline Bundle Utility Tool (LCM) and start preparing commands to enter, you may copy below and replace to fit your system and your credentials.

(Since, I am using windows for downloading the bundles you will want to run the LCM with out the ./lcm-bundle… as executable, so it would just be “lcm-bundle… for windows” )

lcm-bundle-transfer-util --download --manifestDownload --depotUser <email> --outputDirectory C:\03102025
lcm-bundle-transfer-util --download --bundleManifests --depotUser <email> --bundleManifestsDir C:\03102025
lcm-bundle-transfer-util --download --compatibilityMatrix --depotUser <email> --outputDirectory C:\03102025

Note: If you do not have a VXRAIL Platform, you and disregard the –pdu dell_depot_email, remove it from the syntax as below in the screenshot.

lcm-bundle-transfer-util --depotUser <email> --download productVersionCatalog --outputDirectory C:\03102025

Uploading The Bits:

Once you have downloaded all the updates and manifest files, upload them to the SDDC manager appliance. Keep all the files extracted in the /home/vcf/ directory.

For actual bundles those will be uploaded to the /nfs/vmware/vcf/nfs-mount/ due to the large size and /home/vcf/ is limited on space.

File Structure Table

Note: This will provide simplified way of uploading and ingesting the VCF files and updates following the table below.

--bundleManifests/home/vcf/bundleManifestsUpload the bundleManifests directory into /home/vcf/
--compatibilityMatrix/home/vcf/Compatibility/Upload the Compatibility directory into /home/vcf/
productVersionCatalog/home/vcf/Upload the productVersionCatalog.json in /home/vcf/ directory
--sourceManifestDirectory/home/vcf/lcm/Upload the lcm directory into /home/vcf/
bundleManifests
./lcm-bundle-transfer-util --update --sourceManifestDirectory /home/vcf --sddcMgrFqdn FQDN --sddcMgrUser [email protected]
./lcm-bundle-transfer-util --upload --bundleManifests --bundleManifestsDir /home/vcf/
./lcm-bundle-transfer-util --update --compatibilityMatrix --inputDirectory /home/vcf --sddcMgrFqdn FQDN --sddcMgrUser [email protected]
./lcm-bundle-transfer-util --upload productVersionCatalog --inputDirectory /home/vcf --sddcMgrFqdn FQDN --sddcMgrUser [email protected]

After you have completed the above steps for updating the BOM and Products, Manifests. Next we will go to the workload domain you want to patch. Select Plan Patching -> Select the Products you want to upgrade/patch.

./lcm-bundle-transfer-util –generatePlannerFile –sddcMgrFqdn <your FQDN> –sddcMgrUser [email protected] –outputDirectory /home/vcf –domainNames vcf-m01 -p 5.2.1.0

An Example of the plannerFile.json below:

[{"id":"f486b010-2441-4ee3-93a3-1cae8d375e1e","type":"VMWARE_SOFTWARE","description":"This VMware Software Upgrade bundle contains vSphere ESXI 80U3d, for more information, refer https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/release-notes/esxi-update-and-patch-release-notes/vsphere-esxi-80u3d-release-notes.html","version":"608.169.14-83637536","severity":null,"vendor":"VMware","releasedDate":"2025-02-24T12:00:00Z","isCumulative":false,"isCompliant":null,"sizeMB":606.376953125,"downloadStatus":"PENDING","components":[{"description":"ESXI bundle element","vendor":"VMware","releasedDate":"2025-02-24T12:00:00Z","toVersion":"8.0.3-24585383","fromVersion":"1.1.1-1","imageType":"PATCH","id":"54bf5dce-40e1-408b-9a1d-6ebb63b3dabe","type":"HOST"}],"applicabilityStatus":"PENDING","applicabilityOrder":2,"isPartiallyUpgraded":false},{"id":"d70ed6b4-26b7-4e40-a516-57492b7ddb72","type":"VMWARE_SOFTWARE","description":"This VMware Software Upgrade bundle contains NSX 4.2.1.3, For more information, refer https://techdocs.broadcom.com/us/en/vmware-cis/nsx/vmware-nsx/4-2/release-notes/vmware-nsx-4213-release-notes.html","version":"310.71.51-83059794","severity":null,"vendor":"VMware","releasedDate":"2025-02-03T12:00:00Z","isCumulative":false,"isCompliant":null,"sizeMB":9070.224609375,"downloadStatus":"PENDING","components":[{"description":"NSX-T Manager patch bundle element","vendor":"VMware","releasedDate":"2025-02-03T12:00:00Z","toVersion":"4.2.1.3.0-24533884","fromVersion":"1.1.1-1","imageType":"PATCH","id":"2b89cce2-b0e9-4595-964e-0df5711b0a9d","type":"NSX_T_MANAGER"}],"applicabilityStatus":"AVAILABLE","applicabilityOrder":1,"isPartiallyUpgraded":false}]

Once you have generated the file, copy it from the SDDC Manager onto your internet connected machine.

lcm-bundle-transfer-util --download --plannerFile C:\03102025\plannerFile.json --depotUser <your username for VMware Depot>

Once your bundles have been downloaded, you will want to transfer them to the system that will be upgraded. After everything is uploaded into the NFS Directory on SDDC Manager, you will want to make sure that you elevate to root by su for ingesting bundles.

Now we will go back to the SDDC Manager, upload the actual bundles into the /nfs/… share and ingest them with command below.

./lcm-bundle-transfer-util --upload --bundleDirectory /nfs/vmware/vcf/nfs-mount/03102025/

If you have a VXRAIL VCF Deployment you will want to upload the Partner Bundles with the command below:

./lcm-bundle-transfer-util --upload "uploadPartnerBundle" --bundleDirectory directory-path

Once all update bundles have been uploaded, go back to the SDDC Manager User Interface, and you should see that the Update Now button shows up and lets you proceed with the upgrade!

0 comments 803 views
0 FacebookTwitterLinkedinThreadsBlueskyEmail
VMware Cloud Foundation

VMware Cloud Foundation 5.2: Unlocking Secure Hybrid Cloud Capabilities with Microsoft Certificate Authority

by Tommy Grot
written by Tommy Grot 5 minutes read

In the ever-evolving landscape of cloud computing, security remains paramount, especially as organizations strive to build robust hybrid cloud environments. VMware, a pioneer in virtualization and cloud infrastructure, has released an update that strengthens its portfolio—VMware Cloud Foundation 5.2. This new version brings a plethora of enhancements, focusing on improved security features, and integration is with Microsoft Certificate Authority or also OpenSSL but we will utilize Microsoft Certificate Authority.

The Power of Secure Certificates

Certificates play a pivotal role in establishing secure connections within cloud environments. They ensure data encryption, authenticate users and devices, and prevent man-in-the-middle attacks. With this latest release, VMware Cloud Foundation 5.2 leverages the power of MCA to provide organizations with a centralized, automated, and scalable certificate management system.

Integrating Microsoft Certificate Authority

Microsoft Certificate Authority (MCA) is a robust solution for managing digital certificates, offering advanced security features and seamless integration with various cloud platforms. By integrating MCA into VMware Cloud Foundation 5.2, organizations can:

  • Automate Certificate Deployment: Streamline the process of issuing and deploying certificates across multiple clouds and on-premises data centers.
  • Centralized Management: Gain a unified view and control over all certificates from a single location, simplifying administration.
  • Enhanced Security: Benefit from MCA’s advanced security features, including long-term key protection and certificate revocation, to safeguard cloud infrastructure.
  • Cost Efficiency: Reduce the overhead of managing certificates independently in different environments.

What’s Ahead for Hybrid Cloud Security

VMware Cloud Foundation 5.2 marks a significant step towards simplifying and strengthening security in hybrid cloud deployments. By embracing this update, organizations can future-proof their infrastructure, ensuring data and user privacy. Stay tuned for more insights into this exciting release and its impact on the cloud computing landscape.

Procedure

This walk through assumes that you have already configured a Certificate Authority server, if you did not, ensure to get that created first but in the mean time lets get started!

First, we will go connect via RDP to the Microsoft CA Server

Ensure to install the Following:

  • Certificate Authority
  • Certificate Enrollment Policy Web Service
  • Certificate Enrollment Web Service
  • Certification Authority Web Enrollment

Once all the Roles are installed, give the CA Server a reboot. Next we will Configure a Role for IIS to do the Enrollment via Web Service using Basic Authentication.

Open up server manager, add the required feature under IIS.

Basic Authentication

After you have installed all the required roles above, next we will enable Basic Authentication under IIS

  1. Navigate to Sites -> Default Web Site -> CertSrv
  2. Under IIS, double-click Authentication.
  3. On the Authentication page, right-click Basic Authentication and click Enable.
  4. In the navigation pane, select Default Web Site.
  5. In the Actions pane, under Manage Website, click Restart for the changes to take effect.

After you have enabled the Basic Authentication, we will need to ensure that the CA Server Web Enrollment has a CA Signed Certificate with the FQDN, IP in its SANs (Subject Alternative Name). The SDDC Manager requires a secure connection between the appliance and the certificate authority.

This walk through will not cover how to create a Web Server Certificate for your CA IIS Site Binding, assuming you already have it configured.

Right Click -> Default Web Site -> https 443 Binding -> Attach the new certificate for the CA Server Web Enrollment.

After all the perquisites are done we will configure a Template for SDDC Manager to utilize.

Clone the Web Server Template and we will configure it:

Configure name for the template, I used VMware SDDC

  1. Click Start Run, enter certtmpl.msc, and click OK.
  2. In the Certificate Template window, under Template Display Name, right-click Web Server and select Duplicate Template.
  3. In the Properties of New Template dialog box, click the Compatibility tab and configure the following values.

For the VMware SDDC Template – I configured 2 years, and the Template Display Name – VMware SDDC

SettingValue
Certification AuthorityWindows Server 2008 R2
Certificate recipientWindows 7 / Server 2008 R2

In the Properties of VMware SDDC Template dialog box, click Extensions tab and configure the option below:

  1. Click Application Policies and click Edit
  2. Click Server Authentication, click Remove, and click OK.
  3. Click Basic Constraints and click Edit.
  4. Click the Enable this extension check box and click OK.
  5. Click Key Usage and click Edit.
  6. Click the Signature is proof of origin / nonrepudiation check box, leave the defaults for other options and OK.
  1. Start up Run, enter certsrv.msc, and click OK
  2. In the Certification Authority, in the left pane, right-click Certificate Templates, and select New Certificate Template to Issue.
  3. In the Enable Certificate Templates dialog box, select VMware SDDC, and click OK.

Permissions

Before you can start using your new template that you created, next we will need to add permissions to the following VMware SDDC Template for the service account to utilize, my service account is [email protected]

SettingValue
Full ControlDeselected
ReadDeselected
WriteSelected
EnrollSelected
Autoenro;;Deselected

Below we will configure the Microsoft CA and provide your FQDN that is for your Certificate Authority. I created a A record in my DNS for certs.virtualbytes.io and created a CA signed certificate for it for SDDC to accept it.

Once you have configure everything your SDDC Manager is now able to create CSRs, Certs and assign them to the products within VCF!

0 comments 375 views
0 FacebookTwitterLinkedinThreadsBlueskyEmail
VMware Cloud Foundation

VMware Cloud Foundation – Memory Tiering: Optimizing Memory Utilization for Enhanced Performance

by Tommy Grot
written by Tommy Grot 4 minutes read

In the ever-evolving landscape of virtualization, efficient memory management is crucial to ensuring optimal performance and resource utilization. VMware ESXi, a powerful hypervisor, introduces an innovative feature called Memory Tiering that revolutionizes how virtual machines (VMs) interact with system memory. This blog post delves into the intricacies of ESXi Memory Tiering, exploring its benefits, implementation, and real-world impact on data center operations.

NVMe PCIe Storage and Memory Tiering

  • High-Speed Interface: NVMe PCIe is a high-speed, low-latency storage interface designed for SSDs (Solid-State Drives). It provides significantly faster data transfer rates compared to traditional SATA-based SSDs.
  • Direct Access to Memory: When combined with Memory Tiering, NVMe storage allows direct access to the host’s system memory (RAM) over the PCIe bus. This bypasses the traditional storage controller, resulting in even lower latency and higher throughput for memory operations.
  • Performance Benefits: With NVMe, the slower tier of memory (e.g., SSDs or persistent memory) can still offer decent performance. This is because NVMe SSDs have much faster read/write speeds, enabling quicker movement of pages between tiers.

Why NVMe Matters for Memory Tiering

  1. Reduced Latency: Lower latency access to storage means faster page movement and improved overall system responsiveness, which are crucial for time-sensitive applications.
  2. High Throughput: NVMe SSDs offer higher data transfer rates, enabling efficient handling of large memory pages and bulk data transfers during VM operations.
  3. Cost-Effectiveness: By utilizing NVMe storage in the slower tiers, organizations can achieve cost savings while maintaining high performance for critical workloads.

Best Practices

  • Storage Configuration: Ensure that the ESXi host has the necessary PCIe slots and support for NVMe devices. Properly configure the storage to align with memory tier requirements.
  • Performance Monitoring: Continuously monitor VM performance and memory utilization to fine-tune Memory Tiering policies and ensure optimal page placement.
  • Hardware Compatibility: Verify that all hardware components, including memory modules, storage drives, and PCIe cards, are compatible with NVMe to avoid performance bottlenecks.

The integration of NVMe PCIe storage enhances VMware ESXi Memory Tiering’s capabilities, making it a powerful solution for data centers seeking to maximize memory utilization and application performance.

How To Configure Memory Tiering:

SSH into Each ESXi Host, If you ESXi Hosts are managed by VCF/SDDC Manager, you will need to lookup the password in SDDC Manager.

Enable Memory Tiering with the command below, if you want to revert and disable it set it back to FALSE and put it in maintenance mode / reboot the host.

esxcli system settings kernel set -s MemoryTiering -v TRUE

Choose the NVMe device to use as tiered memory and note the NVMe device path (i.e. /vmfs/devices/disks/).

Locate the NVMe Disk which mine is below as an example

esxcli system tierdevice create -d /vmfs/devices/disks/t10.NVMe____INTEL_SSDPED1D280GAH____________________000142FC3BE4D25C

Create the tier partition on the NVMe device. esxcli system tierdevice create -d /vmfs/devices/disks/

esxcli system settings advanced set -o /Mem/TierNvmePct -i 200

Go to -> Configure under the host -> Advanced System Settings – Filter For Mem.TierNvmePct

This is where you will set the percentage of NVMe will be set for its ratio configure that specific host

Configuring the DRAM to NVMe Ratio


As noted in the NVMe Device Recommendations section, by default, hosts are configured to
use a DRAM to NVMe ratio of 4:1. This can be configured per host to evaluate performance
when using different ratios.
The host advanced setting for Mem.TierNvmePct sets the amount of NVMe to be used as
tiered memory using a percentage equivalent of the total amount of DRAM. A host reboot is
required for any changes to this setting to take effect.
For example, setting a value to 25 would configure using an amount of NVMe as tiered memory
that is equivalent to 25% of the total amount of DRAM. This is known as the DRAM to NVMe
ratio of 4:1. A host with 1 TB of DRAM would use 256 GB of NVMe as tiered memory.
Another example, setting this value to 50 would configure using an amount of NVMe as tiered
memory that is equivalent to 50% of the total amount of DRAM. This is known as the DRAM to
NVMe ratio of 2:1. A host with 1 TB of DRAM would use 512 GB of NVMe as tiered memory.
One last example, setting this value to 100 would configure using an amount of NVMe as tiered
memory that is equivalent to 100% of the total amount of DRAM. This is known as the DRAM to
NVMe ratio of 1:1. A host with 1 TB of DRAM would use 1 TB of NVMe as tiered memory.
It is recommended that the amount of NVMe configured as tiered memory does not exceed the
total amount of DRAM.

Reference – https://knowledge.broadcom.com/external/article/311934/using-the-memory-tiering-over-nvme-featu.html

0 comments 518 views
0 FacebookTwitterLinkedinThreadsBlueskyEmail
Newer Posts
Older Posts