7 important configuration files on ESXi server

Here is the first of the articles in “7” series. These articles will cover 7 important configuration files on an ESXi server, 7 useful troubleshooting commands, 7 tools to monitor core ESXi performance and 7 useful log files that can help you.

Today I will cover 7 important configuration files on an ESXi server. Please remember to take backup of any configuration files before changing any settings within the file!

  1. /etc/vmware/esx.conf – This file holds information about sotrage, network and hardware.
  2. /etc/vmware/hostd/vmInventory.xml – Virtual machine inventory list update on the ESXi server.
  3. /etc/vmware/hostd/authorization.xml – This file holds authorization for connection between ESXi server and vCenter server
  4. /etc/vmware/vpxa/vpxa.cfg –  Connectivity configuration for ESXi server and vCenter server
  5. /etc/vmware/vmkiscsid/iscsid.conf – iSCSI configuration file
  6. /etc/vmware/fdm – FDM configuration with clusterconfig, host list and VM metadata
  7. /etc/vmware/license.cfg – License configuration file for ESXi server.

How to harden your SSL configuration on Apache server

I’ve run into an excellent online tool for testing SSL configuration of a web server, Qualy SSL Labs. To begin with, my overall score was D, which means that web server was either misconfigured or that configuration was weak. Reading about all the things they’ve mentioned on their site, one should think that it is safer to run a web server without an SSL certificate than with one. Continue reading “How to harden your SSL configuration on Apache server”

How to add a free valid SSL certificate to Kerio Connect mail server

SSL certificates have always been pricey stuff, but since Letsencrypt offered free valid SSL certificates, there is more excuse NOT to run HTTPS traffic on your site, in this case, mail server (webmail). The good part, you get a free valid ssl certificate, the bad part, ssl certificate is only valid for 90 days. So, let’s start. First, we need to install Letsencrypt: Continue reading “How to add a free valid SSL certificate to Kerio Connect mail server”

How to upgrade vCSA and PSC to the latest version – the easy way

VMware suggested way of upgrading the vCSA and PSC to the latest software version is not the easiest way to do it. It’s actually not the upgrade, rather a new installation and then backup and restore of the current configuration. Luckily, there is a lot easier way of doing the upgrade and it takes just about 10 minutes. To do so, first, you must download a slightly different ISO image.  Log in to my VMware and go to Product Patches page. Enter your version of the vCSA and download the FP ISO file, in my case VMware-vCenter-Server-Appliance-6.5.0.5500-5318154-patch-FP.iso Continue reading “How to upgrade vCSA and PSC to the latest version – the easy way”

How to add SSL certificates to VMware Horizon View environment.

WMware made a huge step forward with their VMCA, but unfortunately, VMCA covers only Platform Service Controller, vCenter and ESXi hosts. I hope that they will cover this issue in the next release of VMCA/Horizon View. The first step is to create SSL certificate signing requests. Of course, your PKI infrastructure must be in place before you can get SSL certificates. Here I will show how to generate both certificate requests and SSL certificates, prepare them and import them in VMware Horizon View environment. Continue reading “How to add SSL certificates to VMware Horizon View environment.”

How to build latest VMware ESXi ISO image for Intel NUC 4th generation

When it comes to building cheap and reliable home lab Intel NUC computers are huge success. Their low power consumption and small footprint makes them perfect for almost any kind of home lab, including building a VSAN lab. Recently I ran into the issue where I needed an additional network card for my NUC. I needed to transfer vCenter server from iSCSI storage, to a VSAN datastore on the same host. Continue reading “How to build latest VMware ESXi ISO image for Intel NUC 4th generation”