ESXi: ssh public/private key authentication
Hi, to login to your ESXi Hosts by ssh using public/private key authentication you need to place your public key into the authorized_keys file of the correspondenting user. Other than on Linux/UNIX...
View ArticleVMware vSphere: Join a vCenter VCSA Appliance to an Active directory domain...
Hi, the vCenter GUI offers the ability to add an identity provider like Microsoft AD. In some cases this won’t work. For example if you are not a domain admin and you have to specify in which...
View ArticleVMWare vSphere: Install a custom a certificate in VCSA Appliance
Hi, for a higher security level it is recommended to install own (trusted) certificates in to VMware’s vCenter VCSA appliance. Prepare your certificates. In parentheses the filenames I use for this...
View ArticleVMware: vCenter VCSA appliance upgrade fails with “Service cannot be started”
Hi, often, when a vCenter VCSA update fails, the error is a certificate missmatch. For example the sso/vmware-stsd service [2021-12-12 10:08:11,628] : Running patch script........
View ArticleVMware: Change network configuration of a vCenter Appliance (VCSA )
Hi, a customer had the problem that, due to outdated DNS Server settings, vCenter didn’t start all services. Connecting with a browser just show “No healthy upstreams” and the login to the VCSA GUI...
View ArticleVMware: Renew an ESXi host certificate by PowerCli
Hi, these are the steps to renew a ESXi Host certificate signed by the vCenter VMCA by PowerCli. Start the renew process asynchronous Or synchronous Michael A treatment also became that sure clinics...
View ArticleVMware: Export the vCenter VMCA_ROOT_CERT certificate
Hi, in the default configuration the ESXi host gets a TLS certificate from the vCenter signed bei the VMCA_ROOT_CERT certificate. So if you want to connect directly to a ESXi server you have to accept...
View ArticleVMware: Start a rescan for new/dead devices and volumes on ESXi from command...
Hi, the command for triggering a rescan for new or dead volumes, devices or pathes use To scan on a specifc adapter determine the HBA name and start a rescan there To scan for new or changed...
View ArticlevCenter: Installing of a custom certificate failed
Hi, a customer had the problem that he couldn’t install a custom certificate, reset all ceritifcates etc. with the vCenter certificate manager /usr/lib/vmware-vmca/bin/certificate-manager. He had...
View ArticleESXi: Silent installation by UEFI HTTP boot
Hi, this post describes the silently installing of a ESXi server by a UEFI HTTP remote boot. Installserver Debian 11 (10.10.220.10): deb https://nginx.org/packages/mainline/debian/ bullseye nginx...
View ArticleESXi: Silent Installation by iPXE HTTP boot
Hi, this post describes the silently installing of a ESXi server by a iPXE HTTP remote boot. Installserver Debian 11 (10.10.220.10): deb https://nginx.org/packages/mainline/debian/ bullseye nginx...
View ArticlevSphere VCSA: Cannot add a (http) https proxy
Hi, with the VCSA Gui it is not possible to to enter a http proxy for https target URLs. An error: HTTPS Cannot connect to proxy server occurs. The most linux tools accept http URLs in the HTTPS_PROXY...
View ArticleVMware Powercli: Get CDP infos for the Hosts Networkadapter
Hi, if CDP is enabled the networkswitches gives some informations to the ESXi Hosts physical network adapters. Here are the steps to retrive these by PowerCli. Get the networkview of the host Query the...
View ArticleVMware Powercli: Check and enable CDP (Cisco Discovery Protocol
Hi, ESXi has the ability to respond to CDP requests. Check if CDP is enabled on a vSwitch Possible values: down (disable CDP), listen (only respond to client requests), advertise (send frequently...
View ArticleVMware vCenter: Get a result set of permissions/privileges for a user on an...
Hi, sometimes you be known which permissions respectiliy privileges a vSphere User has on an entity. The vCenter GUI has no such feature but it’s possible by PowerCli and using the...
View Article
