Ray,
I do have the EnforeceSSLCertificateValidation set as you described. The information that I gave you was gathered EnforeceSSLCertificateValidation set to 0.
Re: Inconsistent and slow logins with any version of Appvolumes
↧
↧
Re: UDLR with multiple default routes using locale ID
No, I have 2 vcenters joined together in enhanced link mode. With a primary and secondary NSX manager. It looks very much like this diagram:
VMware NSX for vSphere 6.2 Documentation Center
But I don't have Universal Logical Router appliances (aka Universal Control VMs) because I'm trying to use static routing.
↧
Embedded to External Platform Service Controller Failure: Impact, Recovery, and Certificates
I have a vCenter 6 appliance that is used for our Horizon 6 VDI environment.
What happens when the moving from an Embedded PSC to an External PSC fails?
How will it affect Horizon 6?
Can vCenter be recovered using a snapshot?
Are there certificates that I should be aware of?
I am preparing documentation and possible recovery steps for an upcoming change.
Thank you
↧
Upgrading view from 6.0 to 6.2, can i skip upgrading view agent?
Hello, We are planning a Horizon View upgrade from 6.0 to 6.2. We are a little nervous about upgrading the View Agent due to usb redirect and scanning.
We are going to try and test first but our testing env isn't the best. We noticed there are more options in the agent install for usb redirect and scanning so we are a little nervous about the scanning breaking as it took allot to get it working in the first place.
So what I was wondering is, if we upgrade everything to 6.2 can we keep the Agent on our master images on 6.0. This would allow us time to test things out more with the scanning.
Or is it a big no no to have them mismatch.
I know from what ive read its best to have them match, but I haven't found anything saying you cant have the agent being on a slightly older version.
My understanding is we shouldn't have a newer version of the agent then the connection server, but im hoping I can have an older version of the agent.
Thanks for any advice
Mike
↧
Re: ESX on vmware workstation
Hello,
Just a really quick thought!
Are you using a laptop? As if so you might need to press the function key with F11.
↧
↧
Re: Using PCoIP Internally.
We're using an F5 load balancer which will proxy the PCoIP connections. https://www.f5.com/pdf/deployment-guides/vmware-horizon-view-dg.pdf. I would guess there are other solutions similar to this.
↧
Re: What permissions are needed to move VMs into other folders?
At what level are you applying the permission? I've ran into a couple bugs where I had to apply the permission higher in the hierarchy than one would think. The other gotcha I've ran into is with permissions you really have to use the web client to apply the permissions. The reason being in the thick client you only see the permissions applied on the current object where in the web client you see all of the inherited permissions for the user/group.
↧
shared vcenter - license audit
Hi everyone. We are a family owned company, and share vcenter across several sites for central management. 2 of these sites are technically financially separate daughter companies - literally half a block from each other, owned by the same family.
VMware recently decided to do a license audit. Our licenses were a bit of a mess, so to be better organized we split them into separate accounts (the 2 daughter companies). We were told sharing vcenter between was not an issue and it is common. Our vcenter is installed and licensed at site A, and it simply manages servers at site a and site b. I split time between both companies, thus using the 1 vcenter to manage everything under one umbrella.
After the license transfers were completed, VMware now wants to charge us for 2 separate vcenters. They claim section 3.1d of the EULA (shown below) disallows our sharing of vcenter, yet section 3.1a says you "can deliver hosted services to Your affiliates". Since site A is running vcenter, and is hosting management services for site B, should we really be forced to purchase another vcenter? Without involving lawyers to fight over EULA what avenue do we have to convince VMware we are covered under section 3.1a?
Thanks for your help!
vCenter EULA section 3:1a-d:
3.1 License Restrictions. Without VMware’s prior written consent, You must not, and must not allow any third party to: (a) use Software in an application services provider, service bureau, or similar capacity for third parties, except that You may use the Software to deliver hosted services to Your Affiliates; (b) disclose to any third party the results of any benchmarking testing or comparative or competitive analyses of VMware’s Software done by or on behalf of You, except as specified in Section 2.4 (Benchmarking); (c) make available Software in any form to anyone other than Your employees or contractors reasonably acceptable to VMware and require access to use Software on behalf of You in a matter permitted by this EULA, except as specified in Section 2.2 (Third Party Agents); (d) transfer or sublicense Software or Documentation to an Affiliate or any third party, except as expressly permitted in Section 12.1 (Transfers; Assignment);
↧
Re: Data-stores filled up causing virtual machine crashes
When you say stopped working do you mean they were paused? Was there an error message on them? How big is your data store? Normally they will pause when they were requesting new blocks. This could potentially be VM logs (remember there are a bunch of files associated with a VM). Once you are out of space you are prone to unpredictable results as ESXi is not designed to work with zero free space.
↧
↧
Re: uninstall fusion 8.5 trial version and install fusion pro 8.5 trial - failing
If you go to the VMware Fusion menu > About... it should say there if it's the Professional version.
By default, the evaluation without a key put in is in Pro mode.
While Pro gives you the ability to create custom networks, both would allow you to configure the guest VM as you see fit.
Specifically, you would choose NAT or Bridged as you desire, and then in the VM itself assign a static (or 'manual' as you put it) IP the same way you would on a physical PC.
↧
Re: What permissions are needed to move VMs into other folders?
The roles and privileges were created and assigned using the thin client, then applied to a VM and templates folder directly under data center object also using the thin client.
Permissions on the root folder are set to propagate to children.
↧
Re: WorkStation 12.5.4 bug
Hi.
Thank you for this one, I didn't know I could get previous versions.
Thank you!
↧
Merging two VMs with the same name
Hi. I have Fusion
Version 8.5.5 (5192483)
My Virtual Machine Library is showing two VMs with exactly the same name - one greyed out, and the other not. Can I merge these two so that I don't lose anything, like settings, from either of them, or things installed on the one that might not be on the other? Or has one superceded the other?
Vince.
↧
↧
Linux View Client 4.3.0 USB drive redirection on insert fails when variable ENABLE_FOLDER_REDIRECTION=TRUE
It appears that drive redirection interferes with USB mass storage redirection but only after a VM connection is established and then the USB device is plugged in.
Setting ENABLE_FOLDER_REDIRECTION=FALSE in /usr/bin/vmware-view fixes this as does setting view.shareRemovableStorage = "FALSE" in one of the various view config files.
↧
Vsphere Default user and password
Anybody know what the default user-id and password would be on a vshphere install. I got vsphere installed but get stuck from there.
Thanks
Sol
↧
FreeBSD: NAT broken with e1000 network, works with vmxnet3 + EFI firmware...
This has taken me the better part of a weekend to diagnose and troubleshoot, but on VMware Fusion 8.5.5 with the `e1000` driver configured (`ethernet0.virtualDev = "e1000"`), TCP connections would randomly stall after a few MB of downloads. After much consternation, handwringing, and yelling, I finally found the combination that appears to work 100% of the time:
In the `.vmx` file for the VM, add or update the lines with the following values:
firmware = "efi"
ethernet0.virtualDev = "vmxnet3"
Inside of the guest configure the use of the vmx(4) network driver, in my case FreeBSD, add:
echo 'if_vmx_load="YES"' | sudo tee -a /boot/loader.conf
Make sure to change the settings in /etc/rc.conf from em0 to vmx0 and you should be good to go.
If someone at VMware could add these nuggets of wisdom to their documentation someplace where it's indexable by search engines, that would be hugely appreciated.
UPDATE:
If you connect to your guest using a TCP connection where there is no activity and/or no application-level (layer 7) heart beating, you need to enable TCP keepalives on the client, too.
$ sudo sysctl net.inet.tcp.always_keepalive=1
$ echo net.inet.tcp.always_keepalive=1 | sudo tee -a /etc/sysctl.conf
There are two fixes that are required: 1) Use the vmxnet3 driver as stated above, and 2) Update the host to use TCP keepalives.
↧
problem in customisation of windows 7 machine. for automated pools
Hello
i have recently deployed the vmware horizon view and i have a problem in launching the window 7 machine with customisation tool . I try lot but unable to success.
when i launch windows 7 machine with customisation profile created in vcenter , WIndows 7 imachine is not reading the answer file properly like machine not attached to domain or
get stuck on username and password screen .
I try lot is there any one who can guide me.'
-Thankyou
↧
↧
Re: Issue with Outlook and visio configuration pop-up on each launch of application
Hi Mellicott,
Thanks for brief explanation, I am not able to execute the "fsutil file setshortname "ProgramData" PROGRA~2" (but rest of the commands I can execute with no issues) and I am getting access denied as shown below
I am running it as a administrator.
↧
Re: installing identity manager FQDN
Check the following:
- DNS - Each Identity Manager appliance has a Forward (A) record and a Reverse (PTR) record.
- Reverse Proxy / VIP FQDN - Reverse Proxy or Virtual IP is Online and addressable both with a Forward (A) record and a Reverse (PTR) record.
- If you are using a load balancer/reverse proxy like F5 BIG-IP, be sure the virtual server health monitor reports the Pool as green. See F5 BIG-IP docs on configuration inside blog post).
- Certificates - All certificates should have full chains - not just the child certs.
- Certificates which the Reverse Proxy uses for backend communication has complete certificate chain available to it for VMware Identity Manager appliances Subject Alternate Names for internal FQDNs if using specific certs (recommended).
- Identity Manager is using the Root CA which the Reverse Proxy or Load Balancer is using (not the full cert chain - just the root CA cert). This means including any and all intermediate certs in the proper order.
- Ensure the certificate chains are in the proper order. When pasting the OpenSSL PEM formatted certificate chain into VMware Identity Manager, the order is shown below. This is assuming a child cert, two intermediate certs, and the CA certificate. If there is only one intermediate, then obviously one cert would be removed. If there are load balanced intermediate certs, then bothmay need to be applied (both will need to be loaded on an F5 BIG-IP Load Balancer for proper cert termination).
-----BEGIN CERTIFICATE-----
...your child certificate goes here...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...your first intermediate certificate goes here...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...your second intermediate certificate goes here...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...your root CA certificate...
-----END CERTIFICATE-----
For more on certificates, see the online VMware Identity Manager documentation.
- Firewalls - Routing 443 and other necessary ports (depending upon solution) between all subnets is open.
- Make sure each appliance can resolve and reach (ping) the FQDN IP.
- If you don't enable ICMP, then use `curl` commands to pull a web address via the console. With the below, you should get a 'true' or 'false' depending on the status being returned. The thing you are looking for is not the status - but that you actually get a response. Whether it is true or false is irrelevant at this stage.
curl 'https://<fqdn_of_another_appliance_in_the_cluster>/SAAS/API/1.0/REST/system/health/allOk'
- Test both the FQDNs of the appliances within the cluster as well as the cluster FQDN. If you do not get a true or false on the above test, you'll need to narrow down why the appliance cannot resolve / connect to another appliance or the cluster FQDN.
- This partially goes to DNS again, but do an NSLOOKUP on both the names of the other appliances and the VIP(s) or cluster FQDN(s).
This should be a good start. If anything doesn't work, chase it down and figure out why. :-)
↧
Re: Issues after Migratrion
I have it set to BALANCED power inside HP BIOS.
What do you mean by paravirtual controller and how can I tell?
---
↧
More Pages to Explore .....
