Tuesday, August 22, 2017

Download the VMworld 2017 app now!


VMware released today the all-new VMworld 2017 mobile app. The app is free and will work on your phone and tablet. Here are a few things you can do with the app:
  • Get your QR code for express badge check-in
  • Watch breakout session recordings on-demand
  • Add sponsors, exhibitors, and speakers to your Favorites List
  • Find your way around with the interactive and searchable map
  • Access VMworld Social Visualization, Community Offerings, and Social Channels
  • Network with other conference attendees
  • Keep current with daily highlights and important notifications
  • Provide feedback through session surveys
The app is compatible with iOS, Android, and Windows devices

Find out more at https://www.vmworld.com/en/mobile-app.html
Download from the iOS App Store
Share:

Monday, August 7, 2017

Mapping VMware Updates and Tools to Build Numbers

VMware has always branded its software as GA, Update 1, Express Patch 4, etc etc. This makes it easy to discuss features and fixes among employees and customers alike. The challenge, as many of you know, is knowing the exact build numbers that correlate to these upgrades and patches. Those specific build numbers are often requested by TAMs, Support, and Engineering in order to ensure accurate recommendations when upgrade planning or troubleshooting.

Another challenge is knowing where in the stack of released versions you line up. If you're on vSphere 6.5.0b Patch 1, is that before or after Express Patch 1b? When did Update 1 come out again?

Luckily, VMware has made it easy for you to track down these build numbers, and know where you are in the greater timeline of releases. VMware Knowledge Base Article 1014508 is a hub of build numbers for most VMware products. Be sure to bookmark this page!

Table from KB1014508

You may notice a key component missing from this table, and that would be VMware Tools, VMware's guest operating system management and performance solution. VMware Tools can throw in some complexity since there are versions that come bundled with ESXi hosts, and there are separate build numbers for how ESXi sees it, vs how the Guest OS sees it. This can be overly complicated in mapping out. Here's the second page to bookmark:
https://packages.vmware.com/tools/versions 
Notice the 4 columns of information. As the page states, the columns represent the Tools Client registered build, the source ESXi build bundle, the GOS identified build, and the ESXi server build number. All in a public setting that easy to consume and report on.

Thanks for reading!

Share:

Saturday, March 18, 2017

Horizon 7.1 | Everything you need to know [Updated]



VMware released the highly anticipated Horizon 7.1 this week and there are all sorts of enhancements and new features related to the next-gen virtual desktop infrastructure. Here's your one-stop-shop for everything you need to know.

[Update] Check out the new Horizon 7.1 Technical Overview Video on YouTube and ensure sure your environment is configured properly for a successful upgrade.

Horizon 7.1 Official Pubs including installation, upgrades, configuration, and administration.

See the official What's New post hosted on the VMware EUC Official Blog

Always review the Official Release Notes prior to upgrading your environment

Credit to Tony Huynh, VMware Director of Horizon Product Management and the EUC Technical Marketing Team

Enhancements to Horizon


  • Instant Clone (IC) updates

    • Instant clone support for RDS hosts provides the ability to rapidly provision RDS hosts and build out your RDSH farms.

    • Automated maintenance mode allows the administrator to schedule windows and put their RDS hosts in maintenance mode.

    • Multi-vLAN support for Instant Clones removes the limitation of 1 vLAN per 1 IC pool, and enables multiple vLANs per pool.

    • vGPU-backed Instant Clones provides the option to provision IC desktop pools with vGPU enabled.

    • Automatic deletion of Instant Clone parent VMs with host maintenance mode – currently, administrators must manually delete ParentVMs before ESX can go into maintenance mode. This feature eliminates the need for admin intervention.

  • Unauthenticated Access - allows users to directly access their RDSH applications without having to logon using Windows AD credentials. This preserves workflows for nurses and doctors using kiosk stations (Windows and Linux clients only).

  • RDSH Application Icon Customization - administrators can now customize the icon for their RDSH Applications.

  • Windows Server 2016 support for Horizon infrastructure - deploy Horizon Broker and Composer using Windows Server 2016.

  • Enterprise scale Cloud Pod Architecture (CPA) – increases the scale for CPA up to 75k sessions across 5 sites

  • Support for ADMX files - upgrade to ADMX files, which are used exclusively by Windows 10, 2012, 2016.

  • Support of tags for global entitlements in CPA – supports the use of tags to allow the administrator to control desktop accessed based on admin-specified attributes and extends support for global entitlement in CPA environments.

  • Protect full clone pools with vSphere VM encryption – for environments running vSphere 6.5 and above, VMware has qualified and now support encryption with full clone pools.

  • Horizon desktop restart – allows users to restart their virtual desktop from the client menu without administrative intervention.

  • Horizon PowerCLI updates – instead of requiring a separate package to support PowerShell, Horizon 7 now provides an integrated module included in VMware PowerCLI 6.5 R1.  These PowerCLI samples have now been posted to GitHub to be shared with community.

Unified Access Gateway (UAG) 2.9.1


  • Formerly known as Access Point

  • Blast Extreme Adaptive Transport (BEAT) support – supports a new release of Blast Extreme.

  • FIPs OVA - Separate OVA for FIPS-140-2 with restrictive functionality with only PSG support available in this release, BSG support will be released in patch v2.9.1

  • Admin User Interface (UI) - minimal UI enhancements

    • To make deployment and troubleshooting easy, new health status for services and backend resources using color coding has been added in the UI

    • Ability to change log levels from UI for ease of debugging

  • Access to on premise legacy apps - Supports access to on premise legacy apps using headers and Kerberos based authentication. UAG acts as Identity Bridge to convert SAML to Kerberos or headers for back end resources access.

  • Security enhancements - SLES 12 SP2 with updated opens’ version.

  • Hyper-V support - Provides additional flexibility and footprint for UAG in Microsoft environments. Current release only AirWatch uses cases has been qualified by QE. Horizon use cases to be qualified in future

Blast Extreme Updates

  • Blast Extreme Adaptive Transport (BEAT) – a new end-to-end protocol optimized for LAN and WAN environments, while delivering higher frame rates, faster file transfers and consuming up to 50% less bandwidth.

  • UDP-based transport is specially designed for low bandwidth, high latency, and high packet loss networks. UDP mode is only available with the Unified Access Gateway.

  • Over 4X faster file transfers for transcontinental connections and over 6X faster file transfers for intercontinental connections when compared to Horizon 7.0.2.

  • Automatically connects using UDP (primary) or TCP (secondary) transport protocol.

  • Intelligent error correction for increased data reliability.

  • Enterprise level security with SSL web sockets

    • AES encryption for TCP

    • DTLS encryption for UDP

  • Available across all Horizon desktop and mobile clients

Remote Experience Updates


  • Skype for Business (beta release) – with the new VMware Horizonâ Virtualization Pack for Skype for Business, customers can now communicate using rich audio and video codecs native to Skype. This initial release is only available for Windows clients. For more information, please refer to the Skype beta community page - https://communities.vmware.com/community/vmtn/beta/horizon-skype4business-beta/overview

  • User login enhancements – allows administrators to hide domain name from login list for increased security. Users can login using <domain name>/<user name> to access their desktops and apps.

  • Windows 10 Aero Peak and Aero Snap – allows users to take advantage of Windows 10 enhancements.

Horizon Client Updates

  • Windows 4.4 client updates

    • Support for Unauthenticated Access with Horizon Apps

    • Support for multiple proxy servers configured with proxy auto-config (PAC) file

    • Hide domain list and server URL from client UI for enhanced security

    • Support <domain>/<user name> format in username field

    • Desktop restart option from client menu

    • Resolution helper to show the resolution of virtual desktop

    • Aero snap-assist mode in Windows 10

    • Support for Aero Peak

  • Mac 4.4 client updates

    • Biometric authentication support with Touch ID

    • Touch bar integration for enhanced user experience

    • Hide domain list and server URL from client UI for enhanced security

    • Support <domain>/<user name> format in username field

    • Desktop restart option from client menu

    • Automatic client update

  • Linux 4.4 client updates

    • Unauthenticated Access for Horizon Apps

    • Support for Ubuntu 16.0 x86_64

    • Support for RHEL 7.3 x86_64

    • Hide domain list and server URL from client UI for enhanced security

    • Support <domain>/<user name> format in username field

    • Desktop restart option from client menu

    • USB redirection UI for Horizon Apps

  • iOS 4.4 client updates

    • New widget to easily launch Desktops and Apps

    • Push default user name to client with Airwatch using AppConfig

    • Hide domain list and server URL from client UI for enhanced security

    • Support <domain>/<user name> format in username field

    • Desktop restart option from client menu

    • Support App Transport Security (ATS) for enhanced security

  • Android 4.4 client updates

    • Support for multiple monitors (2 monitors) – Tech Preview

    • Immersive full screen experience and system mouse icon

    • Hide domain list and server URL from client UI for enhanced security

    • Support <domain>/<user name> format in username field

    • Desktop restart option from client menu

    • Preservation of sidebar and touch ball position

    • Connect to PCoIP secure gateway with FQDN

  • Chrome 4.4 client updates

    • Support for multiple monitors (2 monitors) – Tech Preview

    • Hide domain list and server URL from client UI for enhanced security

    • Support <domain>/<user name> format in username field

    • Desktop restart option from client menu

    • Connect to PCoIP secure gateway with FQDN

  • HTML 4.4 Access

    • UX redesign for enhanced user experience

    • Hide domain list from client UI for enhanced security

    • Support <domain>/<user name> format in username field

    • DPI Sync to deliver extremely sharp graphics and text

    • Desktop restart option from client menu

    • Support for multiple monitors (2 monitors with 2560*1600) – Tech Preview

  • Windows 10 4.4 UWP client updates

    • Support for Xbox One device

    • PCoIP General Availability

    • Pin Horizon client to start menu

    • Launch UWP client from Workspace ONE portal with vIDM integration

    • Screen rotation support for enhanced user experience

    • Enhanced stability and performance with H.264 codec of Blast Protocol

Horizon for Linux Updates

  • Support for USB redirection – Tech Preview

  • Support for CDR – Tech Preview

  • SSO with Ubuntu 14.04 and 16.04

  • Keyboard layout and locale sync-up

  • Support RHEL 7.3 x84_64 as guest OS

  • Support Cent OS 7.3 x84_64 as guest OS

  • Support for SUSE Linux Enterprise Desktop/Server 12 SP2 as guest OS

Share:

Tuesday, January 17, 2017

My Top 10 Horizon View Tips

If you're just getting started with managing a Horizon View environment, or if you're looking for ways to make the most of your new environment, then head on over to the VMware TAM Blog to see my Top 10 List for a successful Horizon View deployment. This post covers the basics for the core Horizon Infrastructure, so no mention of app virtualization or profile management. Those may come later if there's enough demand.

https://blogs.vmware.com/services-education-insights/2017/01/top-10-tips-successful-horizon-vdi.html
Share:

Wednesday, November 16, 2016

Horizon Linux VM (pre-packaged) [Updated]

I'm excited to share what I've been working on the last several weeks. Recently I posted over on my Github a new project I'm working called Horizon Linux VM. It's a pre-packaged Ubuntu OVA that automates most of the customization and configuration needed for a Linux Desktop Template to be used in a VMware Horizon 7 environment. The project is now an official VMware Fling. 



Check out the Ubuntu OVA for Horizon on VMware Flings

In short, it's an OVA built from Ubuntu's mini.iso (to keep footprint down) that has the below key features (full changelog available on Github)

  • Built from Ubuntu’s mini.iso for a minimal footprint

  • Installs the MATE desktop environment

  • Downloads and installs the latest Open VM Tools packages

  • Installs Horizon Agent dependencies

  • Installs Winbind (optional)

  • Configures krb5.conf

  • Configures smb.conf

  • Joins the domain (optional)

  • Optimizes login screen for VDI
Share:

Thursday, November 3, 2016

Send Time Machine backups to a VM hosted in Windows

I've successfully configured Time Machine backups over my home network using VMware Workstation, Ubuntu, and a 1 TB WD drive. A big thanks to HowToGeek for their Raspberry Pi post for the inspiration and to Netatalk's Wiki. Here we go!

screen-shot-2016-11-03-at-8-44-29-am:: Prerequisites


  • Windows (using Windows 10 in this tutorial)

  • VMware Workstation (using 12.5 Pro)

  • Linux ISO (using Ubuntu 16.04 mini.iso)

  • Dedicated backup drive (using a 1TB WD) formatted as HFS+

  • macOS Seirra

:: Prepare your drive


Format your hard drive to be HFS+. This can be done by booting to any linux live disk and using gparted. You'll likely need to install hfsprogs and hfsplus to enable the formatting.

When attached to your Windows Host system, Windows won't mount this drive in Explorer, but you can still see it in Windows Disk Management to ensure it's working properly. Here it shows as Disk 0screen-shot-2016-11-02-at-9-22-21-pm

Choose a mount point that your backup server will use for the drive. I'll use /media/tm
Choose a user that will connect to your backup server from the Mac. <your-user>

Save these for later.

:: Setting up the dedicated backup server


I run my personal servers on a Windows 10 box under VMware Workstation. It's plain simple, easy to administer and maintain, and works great for home needs. Because I like dedicating my servers to individual VMs, I wanted a small VM to attach my 1 TB backup drive to - something with a small footprint as I won't need to interact with the OS much. This is why I chose to use Ubuntu's mini.iso

  1. In Workstation, create a new VM using the mini.iso. The only 'options' I chose to install with it were opensshserver for management, and samba (might use this in the future). My VM uses 512 MB of RAM and 1vCPU.

  2. Obtain HFS+ support by running
    sudo apt-get install hfsprogs hfsplus

  3. Let's take a moment to add our disk to the VM. I chose for my VM to have direct access to the physical disk as its primary purpose will be for backups.screen-shot-2016-11-02-at-9-25-48-pm
    screen-shot-2016-11-02-at-9-26-09-pm

  4. Now boot the VM back up, and mount the drive
    sudo mount -t hfsplus -o force,rw /dev/sd* /media/tm

    You should also add this to /etc/fstab so it mounts properly at boot
    /dev/sd* /media/tm hfsplus force,rw,user,auto 0 0

  5. Setup permissions for your user that will connect to the server
    sudo chown -R root:users /media/tm
    sudo chmod -R g+rwx /media/tm
    sudo usermod -a -G users <your-user>

  6. Once that's done, follow Netatalk's Wiki on setting up v3.1.10 (current at time of writing) on Ubuntu 14.04 (my server is using Ubuntu 16.04 and I can attest it works). Here are the commands for reference:
    sudo apt-get install build-essential libevent-dev libssl-dev libgcrypt11-dev libkrb5-dev libpam0g-dev libwrap0-dev libdb-dev libtdb-dev libmysqlclient-dev avahi-daemon libavahi-client-dev libacl1-dev libldap2-dev libcrack2-dev systemtap-sdt-dev libdbus-1-dev libdbus-glib-1-dev libglib2.0-dev libio-socket-inet6-perl tracker libtracker-sparql-1.0-dev libtracker-miner-1.0-dev

    wget http://prdownloads.sourceforge.net/netatalk/netatalk-3.1.10.tar.gz

    tar -xf netatalk-3.1.10.tar.gz

    cd netatalk-3.1.10

    ./configure --with-init-style=debian-systemd --without-libevent --without-tdb --with-cracklib --enable-krbV-uam --with-pam-confdir=/etc/pam.d --with-dbus-sysconf-dir=/etc/dbus-1/system.d --with-tracker-pkgconfig-version=1.0

    make

    sudo make install

     
  7. Now edit your /etc/nsswitch.conf and append mdns4 mdns to the end of the hosts file so it looks like this
    hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 mdns

     
  8. Create the file /etc/avahi/services/afpd.service with the below contents
    <?xml version="1.0" standalone='no'?><!--*-nxml-*-->
    <!DOCTYPE service-group SYSTEM "avahi-service.dtd">
    <service-group>
       <name replace-wildcards="yes">%h</name>
       <service>
         <type>_afpovertcp._tcp</type>
         <port>548</port>
       </service>
       <service>
         <type>_device-info._tcp</type>
         <port>0</port>
         <txt-record>model=TimeCapsule</txt-record>
       </service>
    </service-group>
     

  9. Setup the Netatalk AFP File Server config file /usr/local/etc/afp.conf
    [<your-user>]
     path = /home/<your-user>
     rolist = <your-user>
    
    [Global]
     mimic model = TimeCapsule6,106
    
    [Time Machine]
     path = /media/tm (or whatever your mount point is)
     time machine = yes

  10. Run the init scripts in this order
    sudo /etc/init.d/avahi-daemon start

    sudo service netatalk start
  11. Add services to default runlevels
    sudo update-rc.d avahi-daemon defaults
    sudo update-rc.d netatalk defaults

  12. Back on your Mac, add your Ubuntu machine to /etc/hosts
    x.x.x.x <ubuntu-hostname>

  13. At this point, you should be able to connect to the server via hostname. From Finder Window, press command+K and enter the server address afp://<ubuntu-hostname> 

  14. Open Time Machine Preferences and select the Time Machine disk
If you don't see your disk in Time Machine preferences, ensure that it was mounted as read/write on the backup server. Good luck!
Share:

Monday, October 3, 2016

Head over to the TAM Blog

Recently I posted an article over at VMware's TAM Blog about working around Kiosk Mode for an iPad using Horizon. Given there is no official Kiosk Mode for iPads, we work around this using a pre-determined username and password that all kiosk users would use. The iPad is then put into Guided Access mode to lock the iPad to the Horizon Client app. This configuration is likely best suited for use of a known set of users where individual profiles/accounts aren't necessary.

Head over to the VMware TAM blog to check it out and other great posts from the Technical Account Manager program!
Share: