Skip to main content

Posts

Preparing a new VMware Cloud Foundation Deployment

With the release of VMware Cloud Foundation (VCF) 3.0, major changes were made to the deployment and architecture of the platform and as a result, there are new pre-requisites that need to be met before bringing up can occur. 1. Physical prerequisites This is where the architecture changes come into play. VCF 3.0 includes a new Bring Your Own Network design methodology that is drastically different than the very prescribed networking in previous versions. This was from direct feedback from customers, and it shows that they’re listening and willing to make changes based on said feedback.  Racking and cabling of the hosts is still the same, but there are no longer any requirements around how the networking is cabled or configured if VLAN tagging is enabled and the ports are available. This opens up VCF to being supported on what would previously have been a non-VCF architecture. This provides a great deal of flexibility in switching vendors as well as throughput choices. The...

Corrupted image profiles in ESXi breaking HA agent installs and VIB installations

Ever wonder why your update just won’t install or why HA just won’t enable on a host? Well wonder no more! We just upgraded to vSphere 6.5 Update 2 and had a host that would not install the HA agent. No amount of “Reconfigure for vSphere HA” or disabling/re-enabling HA would get the agent to install. There’s  a KB article  that talks about uninstalling the HA agent manually, so I gave that a try and lo and behold running  esxcli software vib remove vmware-fdm  came back with an error.   Running  esxcli software vib list  showed only the vmware-tools VIB. This didn’t seem right, so I did some additional digging and found  this KB article  that worked out the problem (yes it says SDDC Manager, a function of VMware Cloud Foundation, but I saw this on a non-VCF host and it’s an ESXi issue, so I wouldn’t worry about titles). Copy the  imgdb.tgz  file from a known good ESXi host with the same VIBs, upgrades and Patches. To copy...

VMware vRA Disable sslv3 and Enable TLS1.2 for better security and compliance

=========================================================================================== Link: https://docs.vmware.com/en/vRealize-Automation/7.3/com.vmware.vra.install.upgrade.doc/GUID-1B4E85C5-B980-416F-96B0-160B4C816671.html#GUID-1B4E85C5-B980-416F-96B0-160B4C816671 =========================================================================================== Update the HAProxy configuration cd /etc/haproxy/conf.d/ cat 20-vcac.cfg backend backend-vrhb     mode http     balance roundrobin     option forwardfor     server server1 127.0.0.1:8090 check ssl verify none /*Yellow Highlighted above lines contains ssl verify none, no change */ backend backend-horizon     mode http     balance leastconn     option http-server-close     option forwardfor     option redispatch     http-response replace-v...