If you prefer to configure syslog options using ESXi command line, you can do it using the following esxcli commands: Continue reading “How to configure syslog options from ESXi command line”
From v6.0 VMware vCenter Server Appliance supports 2 types shell, BASH shell and Appliance SHELL. To toggle between 2 different shells, do the following: Continue reading “How to toggle shell on VMware vCenter Server Appliance (VCSA)”
I’ve run into this error a few times now while configuring syslog settings on an ESXi server. Since there is not much description, one does not know where to look for a solution. This error can appear regardless if one is using local datastore or remote log host. There is, however, a hidden log file that holds descriptive error regarding problems with the syslog settings. Continue reading “ESXi syslog – A general system error occurred: Internal error”
One of the common problems when using vSAN is the missing VASA storage providers registration in the VMware vCenter. There is a number of possible reason for this, but if your network is segmented, and you are using separate VLANs for vCenter and ESXi hosts, then the most common issue is the firewall between the management VLAN (vCenter) and ESXi VLAN. Continue reading “How to manually register storage providers in vSAN enabled cluster”
Here I will explain how to resize the root (/) partition on the VMware vCenter Server Appliance (VCSA). This can be necessary if the update/upgrade process fails due to the inadequate free space on the appliance. Continue reading “How to resize the root partition in VMware vCenter Server Appliance (VCSA)”
Here is the first of the articles in “7” series. These articles will cover 7 important configuration files on an ESXi server, 7 useful troubleshooting commands, 7 tools to monitor core ESXi performance and 7 useful log files that can help you.
Today I will cover 7 important configuration files on an ESXi server. Please remember to take backup of any configuration files before changing any settings within the file!
- /etc/vmware/esx.conf – This file holds information about sotrage, network and hardware.
- /etc/vmware/hostd/vmInventory.xml – Virtual machine inventory list update on the ESXi server.
- /etc/vmware/hostd/authorization.xml – This file holds authorization for connection between ESXi server and vCenter server
- /etc/vmware/vpxa/vpxa.cfg – Connectivity configuration for ESXi server and vCenter server
- /etc/vmware/vmkiscsid/iscsid.conf – iSCSI configuration file
- /etc/vmware/fdm – FDM configuration with clusterconfig, host list and VM metadata
- /etc/vmware/license.cfg – License configuration file for ESXi server.
In one of the previous articles, I have explained how to harden SSL configuration in Apache and how to add Let’s Encrypt Everything SSL certificate to Kerio Mail server. Now I will explain how to install a client that will help you to automatically renew your SSL certificate(s). Continue reading “How to install Let’s Encrypt with Apache on Ubuntu”
Here I will show you how to install async driver on ESXi 5.x and 6.x using esxcli and VIB file or offline bundle. The same task can be accomplished using GUI and VMware Update Manager, but this will be covered in one of the future how-tos. Continue reading “How to install async driver on ESXi 5.x and 6.x using esxcli and VIB file or offline bundle”
I’ve run into an excellent online tool for testing SSL configuration of a web server, Qualy SSL Labs. To begin with, my overall score was D, which means that web server was either misconfigured or that configuration was weak. Reading about all the things they’ve mentioned on their site, one should think that it is safer to run a web server without an SSL certificate than with one. Continue reading “How to harden your SSL configuration on Apache server”
SSL certificates have always been pricey stuff, but since Letsencrypt offered free valid SSL certificates, there is more excuse NOT to run HTTPS traffic on your site, in this case, mail server (webmail). The good part, you get a free valid ssl certificate, the bad part, ssl certificate is only valid for 90 days. So, let’s start. First, we need to install Letsencrypt: Continue reading “How to add a free valid SSL certificate to Kerio Connect mail server”