Here I will explain how to resize the root (/) partition on the VMware vCenter Server Appliance (VCSA). This can be necessary if the update/upgrade process fails due to the inadequate free space on the appliance. Continue reading “How to resize the root partition in VMware vCenter Server Appliance (VCSA)”
Here is the first of the articles in “7” series. These articles will cover 7 important configuration files on an ESXi server, 7 useful troubleshooting commands, 7 tools to monitor core ESXi performance and 7 useful log files that can help you.
Today I will cover 7 important configuration files on an ESXi server. Please remember to take backup of any configuration files before changing any settings within the file!
- /etc/vmware/esx.conf – This file holds information about sotrage, network and hardware.
- /etc/vmware/hostd/vmInventory.xml – Virtual machine inventory list update on the ESXi server.
- /etc/vmware/hostd/authorization.xml – This file holds authorization for connection between ESXi server and vCenter server
- /etc/vmware/vpxa/vpxa.cfg – Connectivity configuration for ESXi server and vCenter server
- /etc/vmware/vmkiscsid/iscsid.conf – iSCSI configuration file
- /etc/vmware/fdm – FDM configuration with clusterconfig, host list and VM metadata
- /etc/vmware/license.cfg – License configuration file for ESXi server.
In one of the previous articles, I have explained how to harden SSL configuration in Apache and how to add Let’s Encrypt Everything SSL certificate to Kerio Mail server. Now I will explain how to install a client that will help you to automatically renew your SSL certificate(s). Continue reading “How to install Let’s Encrypt with Apache on Ubuntu”
Here I will show you how to install async driver on ESXi 5.x and 6.x using esxcli and VIB file or offline bundle. The same task can be accomplished using GUI and VMware Update Manager, but this will be covered in one of the future how-tos. Continue reading “How to install async driver on ESXi 5.x and 6.x using esxcli and VIB file or offline bundle”
I’ve run into an excellent online tool for testing SSL configuration of a web server, Qualy SSL Labs. To begin with, my overall score was D, which means that web server was either misconfigured or that configuration was weak. Reading about all the things they’ve mentioned on their site, one should think that it is safer to run a web server without an SSL certificate than with one. Continue reading “How to harden your SSL configuration on Apache server”
SSL certificates have always been pricey stuff, but since Letsencrypt offered free valid SSL certificates, there is more excuse NOT to run HTTPS traffic on your site, in this case, mail server (webmail). The good part, you get a free valid ssl certificate, the bad part, ssl certificate is only valid for 90 days. So, let’s start. First, we need to install Letsencrypt: Continue reading “How to add a free valid SSL certificate to Kerio Connect mail server”
VMware suggested way of upgrading the vCSA and PSC to the latest software version is not the easiest way to do it. It’s actually not the upgrade, rather a new installation and then backup and restore of the current configuration. Luckily, there is a lot easier way of doing the upgrade and it takes just about 10 minutes. To do so, first, you must download a slightly different ISO image. Log in to my VMware and go to Product Patches page. Enter your version of the vCSA and download the FP ISO file, in my case VMware-vCenter-Server-Appliance-184.108.40.20600-5318154-patch-FP.iso Continue reading “How to upgrade vCSA and PSC to the latest version – the easy way”
In order to reset forgotten root password in VMware vCenter Appliance 6.5 do the following: Continue reading “How to reset forgotten root password in VMware vCenter Appliance 6.5”
WMware made a huge step forward with their VMCA, but unfortunately, VMCA covers only Platform Service Controller, vCenter and ESXi hosts. I hope that they will cover this issue in the next release of VMCA/Horizon View. The first step is to create SSL certificate signing requests. Of course, your PKI infrastructure must be in place before you can get SSL certificates. Here I will show how to generate both certificate requests and SSL certificates, prepare them and import them in VMware Horizon View environment. Continue reading “How to add SSL certificates to VMware Horizon View environment.”
When it comes to building cheap and reliable home lab Intel NUC computers are huge success. Their low power consumption and small footprint makes them perfect for almost any kind of home lab, including building a VSAN lab. Recently I ran into the issue where I needed an additional network card for my NUC. I needed to transfer vCenter server from iSCSI storage, to a VSAN datastore on the same host. Continue reading “How to build latest VMware ESXi ISO image for Intel NUC 4th generation”