“Prepare” ESXi 5.5 Host within Deep Security 9.0

During some recent Trend Micro Deep Security 9.0 implementations I’ve come across an issue while “Preparing” the ESXi 5.5 Host for Deep Security. This process is initiated from the Deep Security Manager and should normally install the Trend Micro Filter Driver and add some settings to the ESXi 5.5 Host.

While preparing the ESXi 5.5 Host

Prepare_ESX

You will eventually get the error message: “The installation transaction failed”.

This problem is described in this VMware KB article and a work around is described, however, this work around is not complete.
As VMware describes you need to manually install the Filter Driver and you need to add a Virtual Machine group named “vmservice-trend-pg” to the configuration. This VM Portgroup needs to be added to the same vswitch which has been created by vShield.

Read the full post »

1 Comment
by on August 15, 2014  •  Permalink
Posted in Trend Micro Deep Security
Tagged , ,
Posted by Kenneth van Ditmarsch on August 15, 2014

http://virtualkenneth.com/2014/08/15/prepare-esxi-5-5-host-within-deep-security-9-0/

BL460c Gen8: Not detecting SD-Card during ESXi 5.1 Installation

While installing new HP BL460c Gen8’s (Xeon E5-2680 v2) we discovered some strange behavior while setting the HP Power Profile setting to “Maximum Performance”. It appears that this setting causes the ESXi 5.1 Installer to not see the Internal SD-Card as storage device anymore.

Default BIOS Settings give us this, which is good:

SD-Card

Read the full post »

21 Comments
by on August 7, 2014  •  Permalink
Posted in ESXi, HP, HP c-Class, HP c7000 enclosure, Installation, VMware
Tagged , , , ,
Posted by Kenneth van Ditmarsch on August 7, 2014

http://virtualkenneth.com/2014/08/07/bl460-detecting-sd-card-esxi-5-1-installation/

Auto Deploy: ESXi Stateful Install with multiple LUNs connected fails

Recently I have been experiencing some troubles with VMware Host Profiles, Auto Deploy and the stateful install of ESXi 5.1 (Update 1). After the Host Profile gets applied, the system eventually times out with the message: “The request failed because the remote server took too long to respond” as indicated on the screenshot below.

Host Profile Timeout

Read the full post »

7 Comments
by on October 24, 2013  •  Permalink
Posted in Deployment, ESXi, VMware, VMware Host Profile, vSphere, vSphere Auto Deploy
Tagged , , ,
Posted by Kenneth van Ditmarsch on October 24, 2013

http://virtualkenneth.com/2013/10/24/auto-deploy-esxi-stateful-install-multiple-luns-connected-fails/

Failover difference with SRM4 and SRM5 on HDS VSP

This blog post highlights the technical difference on how vCenter SRM4 and SRM5 do failover with Hitachi’s Virtual Storage Platform (HDS VSP). Credits to Saravanan Mahalingam for delivering this information.

SRM 4

  • SRM4 does not support failback operation
  • SRM4 uses horctakeover command for failover operation. Horctakeover command fails over to remote site and reverses the replication automatically when the volumes are in PAIR status and the remote array is online (in order to make sure the horctakeover command succeeds for TrueCopy sync, fence level of data must be used).
  • When the horctakeover command fails to reverse the replication, the S-VOL is kept in a special state called SSWS. In order to reverse the replication, pairresync -swaps must be executed manually.

 SRM 5

  • SRM5 introduced re-protect and failback operations
  • SRM5 uses pairsplit –RS command for failover operation. Hence the status of S-VOL will always be in SSWS state after the failover
  • Re-protect operation uses the pairresync command to  reverse the replication and make the volumes in PAIR state (S-VOL to the P-VOL and resynchronized the NEW_SVOL based on the NEW_PVOL)
  • Failback/personality swap operation uses the pairresync –swaps command to reverse the replication

So  while SRM4 is reversing the replication automatically, SRM5 needs the “manual” Re-protect option for that. This is important to know in case you need to guarantee replication before VM’s get booted on the Recovery Site (as part of the run book).

For more information on how to implement HDS VSP with vCenter Site Recovery Manager 5 see these resources:

 

No Comments
by on June 18, 2013  •  Permalink
Posted in SRM, Storage, vSphere
Tagged , , , , , ,
Posted by Kenneth van Ditmarsch on June 18, 2013

http://virtualkenneth.com/2013/06/18/differences-between-srm4-and-srm5-using-hds-storage/

vSphere Auto Deploy: Consider the Asset Tag to categorize ESXi Hosts

While designing for vSphere Auto Deploy you may want to group (categorize) your ESXi Hosts and attach a deploy rule (rule set) to them:

You specify the behavior of the Auto Deploy server by using a set of rules written in Power CLI. The Auto Deploy rule engine checks the rule set for
matching host patterns to decide which items (image profile, host profile, or vCenter Server location) to provision each host with.

So for instance, by creating a deploy rule (rule set) which matches on hardware type you could add all the same hardware to a specific cluster (with a specific host profile). But what if you got different vSphere Clusters, identical hardware and don’t want to make an exception by manually adding a pattern like hostname or mac address every time? In that case you could consider using the hardware Asset Tag to categorize your ESXi Hosts.

Read the full post »

No Comments
by on June 17, 2013  •  Permalink
Posted in Deployment, vSphere Auto Deploy
Tagged , , ,
Posted by Kenneth van Ditmarsch on June 17, 2013

http://virtualkenneth.com/2013/06/17/vsphere-auto-deploy-consider-asset-tag-to-categorize-esxi-hosts/

ESXi Hostname lookup with DHCP/DNS

Within this article I will share some of the challenges faced while implementing a VMware Auto Deploy environment with DHCP for the  Management Network.

The environment uses an Infoblox DHCP/DNS appliance but contains  some good-to-know things that are not Infoblox specific, so keep on reading.

DHCP is configured to use mac-address reservations to ensure that each ESXi Host receives a static IP address. After starting ESXi from PXE Boot you will get the well-known ESXi Boot Screen:

Read the full post »

No Comments
by on December 14, 2012  •  Permalink
Posted in DNS, ESXi
Tagged , , ,
Posted by Kenneth van Ditmarsch on December 14, 2012

http://virtualkenneth.com/2012/12/14/esxi-dns-hostname-lookup-with-dhcp/

Understanding HP Virtual Connect FlexFabric Mappings with VMware vSphere

Within this article I will try to give you a clear vision on the HP Virtual Connect FlexFabric Mappings that HP uses to facilitate their blades with NIC’s and HBA’s. If you are looking for the Flex-10 mappings click here.

In our example we use the HP BL460 Gen8 blade with a FlexibleLOM (LAN on Motherboard) Adapter and no additional mezzanine cards. HP’s quote about the FlexibleLOM:

 In past server generations, the adapter is embedded on the system motherboard as a LOM (LAN on motherboard). If a customer desired a different kind of networking adapter, they would need to purchase a standup adapter and install it in a slot in the server.

Now with many ProLiant Gen8 servers, our customers can now choose the type of network adapter they want. This new Flexible LOM provides our customer the ability to customize their server’s networking of today and the ability to change to meet future needs without overhauling server infrastructure.

Read the full post »

24 Comments
by on November 26, 2012  •  Permalink
Posted in FlexNic, HP c-Class, HP Virtual Connect, vSphere
Tagged , ,
Posted by Kenneth van Ditmarsch on November 26, 2012

http://virtualkenneth.com/2012/11/26/understanding-hp-virtual-connect-flexfabric-mappings-with-vmware-vsphere/

vSphere Authentication Proxy: Failed to bind CAM website with CTL

While troubleshooting the vSphere Authentication Proxy (vSphere 5.1) I ran into a bug which will I highlight in this article.

After successfully installing the Authentication Proxy I discovered an error message in the C:\ProgramData\VMware\vSphere Authentication Proxy\logs\camadapter.log:

2012-xx-xx 14:03:35: Failed to bind CAM website with CTL
2012-xx-xx 14:03:35: Failed to initialize CAMAdapter.

Read the full post »

4 Comments
by on November 19, 2012  •  Permalink
Posted in VMware vCenter, vSphere
Tagged
Posted by Kenneth van Ditmarsch on November 19, 2012

http://virtualkenneth.com/2012/11/19/vsphere-authentication-proxy-failed-to-bind-cam-website-with-ctl/

Unable to enable the vSphere Authentication Proxy Plug-in

I recently had some issues getting the vSphere Authentication Proxy Plug-in to be enabled within vCenter Server 5.1. This is the error message that was displayed: “The server could not interpret the client’s request. (The remote server returned an error: (404) Not Found.)” 

 

Read the full post »

1 Comment
by on November 16, 2012  •  Permalink
Posted in VMware vCenter, vSphere
Tagged
Posted by Kenneth van Ditmarsch on November 16, 2012

http://virtualkenneth.com/2012/11/16/unable-to-enable-the-vsphere-authentication-proxy-plug-in/

« Older Posts
Newer Posts »