Tag: VMware
-
Aria Operations for Logs logins failing with domain users in nested AD groups
I came across an issue today which had me stumped for a while. I had configured Aria Operation for Logs to use Active Directory authentication as per the Broadcom documentation here. I added the Aria Operations for Logs Administrators group with the Super Admin role as per the requirements. However, when I tried to log…
-
Customizing VMware Aria Operations Cloud Proxies to use non-default Docker networks
I ran into an issue for a customer with a dual-site VCF deployment where the management network of the primary VCF site used a subnet in the default Docker network of 172.17.0.0/16. VMware Aria Operations Cloud Proxy VMs include an implementation of Docker for internal services, where everything is deployed using default values.(For information about…
-
Applying Transport Node Profile is not allowed when vLCM Config Manager is enabled on the cluster
I came across an issue with a customer earlier today that impacts the installation of NSX 4.1 on a vSphere 8.0 cluster with the new image-based vLCM configured. The error message you might see when you try to apply a transport node profile to a cluster is as follows:Error: vLCM Config Manager is enabled on…
-
Configuring PyKMIP for testing KMS functionality with vSphere/vSAN
In today’s security conscious world, using encryption to secure workloads is becoming the norm, rather than the exception. To facilitate this requirement, VMware provides two distinct technologies to help customers simply and securely encrypt their workloads – virtual machine encryption and VMware vSAN data-at-rest encryption. In each case, a key provider is required to generate…
-
Beacon Probing
Why am I talking about Beacon Probing? Simply because, in my experience, it is a very misunderstood feature in vSphere and I hope to clear up some of the confusion around its implementation and behaviour. What is Beacon Probing? With virtual switches, multiple connections (uplinks) to the physical network switches can be configured to allow…