I am very honored and very pleased to be awarded the VMware vExpert Award for the ninth time in a row! Thanks to VMware for continuing this award. Also congratulations to all new vExperts 2018 and again welcome to earlier vExperts!
To reset the lost forgotten root password in vCenter Server Appliance 6.5:
More information: VMware
This monitor tracks the vCenter RBD (vSphere Auto Deploy) Health Alarm.
By default, the alarm is triggered by the following event:
For instructions on troubleshooting the Sphere Auto Deploy Waiter, see this VMware KB article.
VMware has released security patches for the VM-Escape Security Bug. http://www.vmware.com/security/advisories/VMSA-2017-0006.html
Products affected is ESXi, Workstation, Player and Fusion.
VMware ESXi 6.5
Downloads:https://my.vmware.com/group/vmware/patch
Documentation: http://kb.vmware.com/kb/2149573
VMware ESXi 6.0 patch on top of ESXi 6.0 U3
Downloads: https://my.vmware.com/group/vmware/patch
Documentation: http://kb.vmware.com/kb/2149569
VMware ESXi 6.0 patch on top of ESXi 6.0 U2
Downloads: https://my.vmware.com/web/vmware/details?productId=491&downloadGroup=ESXI60U2
(Click on the above link and scroll down to ESXi600-201703003 Offline Bundle)
Documentation: http://kb.vmware.com/kb/2149673
VMware ESXi 6.0 patch on top of ESXi 6.0 U1
Downloads: https://my.vmware.com/web/vmware/details?productId=491&downloadGroup=ESXI60U1B
(Click on the above link and scroll down to ESXi600-201703002 Offline Bundle)
Documentation: http://kb.vmware.com/kb/2149672
ESXi 5.5
Downloads: https://my.vmware.com/group/vmware/patch
Documentation: http://kb.vmware.com/kb/2149577
VMware Workstation Pro 12.5.5
Downloads and Documentation:
https://www.vmware.com/go/downloadworkstation
https://www.vmware.com/support/pubs/ws_pubs.html
VMware Workstation Player 12.5.5
Downloads and Documentation:
https://www.vmware.com/go/downloadplayer
https://www.vmware.com/support/pubs/player_pubs.html
VMware Fusion Pro / Fusion 8.5.6
Downloads and Documentation:
This year’s vExperts 2017 were announced! Check it out. I’ve been honored again (2010, 2011, 2012, 2013, 2014, 2015, 2016) as a vExpert this year. Great thanks to VMware and vExpert team behind the program!
It’s Correy Romero who announced the news on the VMTN blog. This year over 700 vExperts (exactly 754 vExperts this year) were named. Here is the full list of lucky people for 2017 – vExperts 2017.
vExpert program allows greater recognition between your coworkers, clients and in the overall professional life.
Running vSphere Client 6.0.0 build 2741530. Sometimes when opening the remote console, during boot virtual machine the resolution is swapping from small to a bigger resolution.
App crash with details:
vmware-remotemks.exe version 8.0.0.33578
Solution
Update the VMware vSphere cliënt, in my case to version: 6.0.0-3562874
XenServer 7 was released in May of 2016. It was available in pre-release form under the project name of Dundee. All new XenServer installations should be made using XenServer 7.
Microsoft Technology integration
Citrix has a long history of integrating with, and supporting Microsoft operating systems and infrastructure products, and XenServer 7 is no exception.
Revolutionary Security
Infrastructure security is always a challenge, and whether it’s protection from viruses, malware or hackers, there are a variety of tools and methods used by security vendors to help businesses protect their IT infrastructures from the variety of tools and methods used by the people with malicious intent. A big challenge is how malware and hackers get around, disable, or hide themselves from existing security solutions.
If someone can leverage a software vulnerability to gain access to a system, they tend to work their way up the security chain, seeking to get the highest level of system privileges from where they can disable security software and do the most damage or gain access to the most sensitive data.
XenServer 7 is different.
Working closely with Bitdefender, Citrix is proud to announce XenServer Direct Inspect APIs, which allow integration from third party security software companies to leverage hypervisor memory introspection (HVMI). This uses a privileged security appliance (SVA), one per-host to inspect the memory of VMs running on the host. As introspection is happening from outside the guest VM, there are no agents required within the VMs, and as such, nothing for a virus, piece of malware or hacker to disable within the VM. Should anyone also hack into a VM OS, they would also only be able to see within the boundaries of that VM container, and be completely unaware that a host-based SVA could be monitoring and blocking their activity; we call this “better than physical” protection.
Security products based on virus or malware signatures protect you from known risks, however what about day-zero attacks? How do you protect yourself against something for which there is no known signature? Bitdefender’s integration goes beyond the standard signature checking, by examining the techniques used by viruses or malware rather than their signatures, enabling protection of systems against day-zero attacks.
This solution isn’t targeted at replacing all disk based scanning protection, as the Direct Inspect APIs feature is a memory based solution, yet it extends protection through either a kernel-mode or user-mode (for specific applications), providing protection against a variety of security threats, including existing security products from being disabled. As such it complements existing disk based protection solutions. Find out more from Bitdefender on this blog and data sheet.
Some papers:
More information: Citrix
Last week I had to change VMX files for 500 XenDesktop machines because the users where able to eject removable devices
To mass disable HotPlug capability by editing the .vmx file via PowerCLI I used the following script:
$key = "devices.hotplug"
$value = "false"
get-cluster "CL02.XD" | get-VM -Name 000-CXD* | foreach {
$vm = Get-View $_.Id
$vmConfigSpec = New-Object VMware.Vim.VirtualMachineConfigSpec
$vmConfigSpec.extraconfig += New-Object VMware.Vim.optionvalue
$vmConfigSpec.extraconfig[0].Key=$key
$vmConfigSpec.extraconfig[0].Value=$value
$vm.ReconfigVM($vmConfigSpec)
}
Optional (manual) options:
You can disable HotPlug capability using the vSphere Client or by editing the .vmx file.
Note: You can disable HotPlug capability for PCI devices such as e1000 or vmxnet3 NICs.
To disable HotPlug capability using the vSphere Client:
devices.hotplug and a value of false.To disable HotPlug capability using the vSphere Web Client:
devices.hotplug and a value of false.To disable HotPlug capability by editing the .vmx file:
.vmx) in a text editor. The default location is:/vmfs/volumes/datastore_name/vm_name/vm_name.vmxdevices.hotplug = "false"
Recent Comments