Skip to main content

Posts

Technical overview of how VCF 9.1

Operational Efficiency in VMware Cloud Foundation 9.1: Live Patching, Simplified Networking, and Enhanced Day-to-Day Management By Charvo Benjamin For VMware system administrators, operational efficiency is often constrained by two persistent challenges: patching overhead and network configuration complexity . The release of VMware Cloud Foundation (VCF) 9.1 directly addresses these friction points with measurable improvements in lifecycle management, platform security, and provisioning workflows. This post examines the most impactful changes for day-to-day operations, with specific attention to expanded ESX live patching support for TPM-enabled hosts and a simplified networking and IPAM model. Expanded Live Patching: Eliminating Reboot Cycles for TPM-Enabled Hosts Prior to VCF 9.1, administrators managing TPM-enabled ESX hosts faced a mandatory reboot cycle when applying security updates. While TPM-based measured boot and Secure Boot provide critical integrity guarantees, t...
Recent posts

Steps PSC Converge to vCenter in GUI(vSphere 6.7)

  Convergence is the process of reconfiguring or converting a vCenter Server instance with an external Platform Services Controller to a vCenter Server instance with an embedded Platform Services Controller. Convergence Internal Workflow illustrates the process of converging a single standalone vCenter Server with an external Platform Services Controller to a vCenter Server with an embedded Platform Services Controller. Check vCenter is standalone or linked vCenter, plan accordingly to perform vCenter Converge. In Case of Linked vCenter, This testing is performed on vCenter 6.7 Example Linked List of vCenter and PSC vCenter1 vCenter2 vCenter3 vCenter4 vCenter5 PSC1 PSC2 PSC3 PSC1 mapped to vCenter 1 and vCenter2, PSC2 Mapped to vCenter3 and vCenter4 and PSC3 mapped to vCenter5  Each PSC mapped to 2 vCenter, last PSC mapped to 1 vCenter Take Backup of vCenter  Check all PSC and vCenter are in same version, if there version mismatch. make all component version identical. Do...

vCenter's PSC LADP 696 SSL certificate binding/replacement

vCenter VCSA will have default self-sign certificate which communicate with 443 over https. There are three method of certificate 1.       Self-Sign Certificate 2.       Custom certificate 3.       VMCA We are discussing with vCenter replaced certificate either custom and VMCA. I am using custom method. Mostly organization will have their CA server locally or outsourced or public CA server service. Embedded vCenter you need to replace certificate on one appliance, incase of external vCenter you need to replace on PSC and vCenter. Before replacing and after replacing certificate you can check SSL certificate details with this command “openssl s_client -connect localhost:443” This is article we going to secure LDAP on VSCA. The LDAP(Secure) on PSC Identity Source Configuration Wizard. vCenter LDAP is integrated on PSC. If its embedded vCenter you can perform this Steps on vCenter. If vCente...

Replacing vCenter VCSA Custom certificate

While VMware vCenter provides a centralized platform for managing across the hybrid cloud, an expired certificate can turn into an IT nightmare. Recently, one of our clients experienced an issue with VMware vCenter 6.5. The platform became unavailable because the certificate expired. This expired certificate was not self-signed or automatically created during new vCenter installation, but instead issued by a trusted certificate authority (CA). Dasher’s expert engineers recommend replacing the certificate on your vCenter and checking the expiration date to prevent a vCenter outage. When a vCenter machine certificate expires, most communication and services will not work properly and fail to function (due to multiple services that are assigned to use that certificate for secure communication). In this case, our client could not login vCenter, manage it and other third-party integration plugins, or backup software failed with tasks. How to recover a VCenter machine certificate ...