If you have not upgraded yet to vSphere 7 and your vCenter certificate is about to expire or already expired, here is an runlist how to renew certificate for vCenter: SSH to vCenter with root user and root password Run tool to prepare CSR file. Tool is located: /usr/lib/vmware-vmca/bin/certificate-manager Chose option 1 and press ENTER Enter…
Read moreCategory: vCenter
How to export certificate from Certification Path
This article for a person who needs the whole chain for a certificate. Open certificate (double click on it) Go to Certification Path tab Double click on the cert you want to export (for example root) Another Cert window will open. Go to Details Go to *Copy to File…* Wizard will open. Follow the wizard…
Read morePowerShell to Upgrade the Virtual Distributed Switch (VDS)
After upgrading vSphere to version 7 there is one more component needs to be upgraded. VMware Virtual Distributed Switch (VDS). NOTE: Prior VDS upgrade all ESXi hosts MUST be upgraded. Otherwise upgrade will fail. NOTE: The VDS upgrade has no rollback, once it is complete it is permanent unless you have completed a backup. NOTE:…
Read moreVMware vCenter Server 7.0 Update 2c, VMware ESXi 7.0 Update 2c – overview.
Discontinuation of Trusted Platform Module (TPM) 1.2 in a future major vSphere release: VMware intends in a future major vSphere release to discontinue support of TPM 1.2 and associated features such as TPM 1.2 with TXT. To get full use of vSphere features, you can use TPM 2.0 instead of TPM 1.2. Support for TPM 1.2…
Read morevCenter Server 7.0.x Appliance /storage/log partition error. Partition full due to excessive pod-startup.log files
Lately I notice that the vmware-pod service will not start. Furthermore one can see /var/log/vmware/pod contains thousands of pod-startup.log.###### files. The /var/log/vmware/pod/pod-console.log contains the following errors: This issue occurs when the pod service repeatedly attempts to start but is not able to complete the process. One known reason for this is that the service is unable to validate the certificate…
Read moreHow to integrate vCenter HSM (DELL OpenMange) with vLCM (Lifecycle Management)
NOTE: This is for non-vSAN environment running Dell servers Using the Dell OpenManage integration with vLCM , we would create a desired state for image, driver and firmware for all ESXi servers in the environment. The desired state configuration is stored in vCenter and we can modify/update as needed. We can update/patch the image, drivers…
Read moreHow to upload logs to VMware directly from vCenter
Today in this short video I will show you how to upload logs directly from vCenter to #VMware support.
Read moreHow to check if STS certificate is about to expire or expired already
By now you should know what to do if your STS certificate expire, but if you have been caught on this one here are simple steps to recover: STS certificate expiration – “Signing certificate is not valid” error in VCSA 6.5.x,6.7.x or vCenter Server 7.0.x NOTE: In vCenter Server version 6.5U3k, 6.7 U3j, or 7.0 U1, you receive a…
Read moreHow to renew certificate for existing KMS setup
NOTE: KMS server root certificate (which per procedure should have been uploaded and trusted for vCenter to trust KMS) has long validity period and should never require an update. If for some reason vCenter server no longer trusts KMS server, ensure that trust is re-established using KMS root certificate only. Here is my runlist: Login…
Read moreHow to connect vCenter with external KMS
NOTE: For example here I choose Vault Enterprise KMIP as a default Key Provider for VM encryption, vSAN encryption and Host Attestation Prerequisites: Create a KMIP client in vault (only a vCenter server is client) Login to Vault Enterprise Navigate to Secret → KMIP → vmware Select “Create Role”. Use vCenter server name as role name and…
Read more