New Release Menu 3.31

Don't like that pesky CVE-2015-7547 vulnerability, also known as glibc? Neither do we!

VMware vCenter Server 5.5. Update 3c (March 29)
This release of vCenter Server 5.5 Update 3c addresses the glibc security vulnerability

VMware vCenter Server 5.0 Update 3f (March 29)
This release of vCenter Server 5.0 Update 3f addresses the glibc security vulnerability

VMware vCenter Server 5.1 Update 3c (March 29)
This release of vCenter Server 5.1 Update 3c addresses the glibc security vulnerability

VMware vSphere Replication 6.1.0.1 Express Patch (March 29)
This patch release addresses the glibc security vulnerability

Read More

Upgrading a Horizon View Environment

The below links assume a Horizon 5.x environment. The same general process should be followed for Horizon 6 using the appropriate documentation.

Some prerequisites that I would highly recommend before performing any actual upgrades are:

1)      Perform an end-to-end backup of your environment (kb.vmware.com/kb/1008046)
2)      Review the Network Port Requirements for View: (kb.vmware.com/kb/1027217) // Be sure to also review the network section of the install guide for any new ports that might have changed in the target version of View.

In a VMware View environment, your order of operations for a complete upgrade will likely look similar to this (with page references in the View Upgrade Guide below):

1. Connection Server / Security Server (page 34 / 39)
2. vCenter / Update Manager / Composer (page 40 / 25)
3. Hosts (page 45)
4. VMware Tools / Virtual Machine Hardware (page 46)
5. View Agents (page 47)
6. View Client (page 51)
7. Distributed Switches and Datastores (found in vSphere Networking Guide, page 28 and vSphere Storage Guide page 143, respectively)

Documentation for Reference:

VMware View Upgrade Guide (5.2/5.3 shared the same docs)
http://pubs.vmware.com/view-52/topic/com.vmware.ICbase/PDF/horizon-view-52-upgrades.pdf

Horizon View 5.3.5 Release Notes
https://pubs.vmware.com/Release_Notes/en/horizon-view/horizon-view-535-release-notes.html

Keeping a vSphere environment up to date (generic order of events)
http://kb.vmware.com/kb/2004807

vSphere Upgrade Guide (for vCenter, VUM, and ESXi)
http://pubs.vmware.com/vsphere-55/topic/com.vmware.ICbase/PDF/vsphere-esxi-vcenter-server-552-upgrade-guide.pdf

vSphere Networking Guide
http://pubs.vmware.com/vsphere-55/topic/com.vmware.ICbase/PDF/vsphere-esxi-vcenter-server-552-networking-guide.pdf

vSphere Storage Guide
http://pubs.vmware.com/vsphere-55/topic/com.vmware.ICbase/PDF/vsphere-esxi-vcenter-server-552-storage-guide.pdf

For a complete list of VMware Horizon View Documents, Best Practices, and Notes, please bookmark the Documentation Center link here:
https://www.vmware.com/support/pubs/view_pubs.html

I hope you've found this post helpful! Let me know in the comments. Good luck!

Read More

Understanding Authentication in vRealize Operations

// This is a guest post by Jeremy (@nakedhitman)

vRealize Operations offers a number of options for user authentication and permission management, but does not do a great job describing the differences between them and why you should care. Most of the options are fairly easy to understand, but the vCenter authentication source is special and can easily cause confusion. Let's break them down and run through the differences:

• Local Shell Users
  
  
  
  • Example: root
  
  
  • These user accounts can not log in or be imported into the application UI.
  
  
  • They can log in to the shell of the system via SSH or VM console.
  
  
  
  


• Local Application Users
  
  
  
  • Example: admin, maintenanceAdmin, automationAdmin
  
  
  • They can not log in to the shell of the system via SSH or VM console.
  
  
  • The full range of permissions can be granted to local users.
  
  
  
  


• Active Directory / LDAP
  
  
  
  • Example: youruser@yourdomain.tld, yourdomain\otheruser
  
  
  • They can not log in to the shell of the system via SSH or VM console.
  
  
  • Technically, AD and LDAP are the same technology, but with different presets. These sources allow users and groups to be imported from a domain so that they can log in with their common credentials.
  
  
  • The full range of vRealize Operations permissions can be granted to imported AD/LDAP users and groups.
  
  
  
  


• SSO SAML
  
  
  
  • Example: administrator@vsphere.local, youruser@yourdomain.tld, yourdomain\otheruser
  
  
  • They can not log in to the shell of the system via SSH or VM console.
  
  
  • Similarly to the AD/LDAP source, importing users from SSO allows you to assign vRealize Operations roles to domain users and groups. The advantage of using the SSO source is that if you have a complex domain configuration, you can use the existing configuration from SSO without having to re-implement your domain delegation and bindings in vRealize Operations.
  
  
  • The full range of vRealize Operations permissions can be granted to imported SSO users and groups.
  
  
  
  


• vCenter
  
  
  
  • Example: administrator@vsphere.local, youruser@yourdomain.tld, yourdomain\otheruser
  
  
  • They can not log in to the shell of the system via SSH or VM console.
  
  
  • Users from this source are not imported in the traditional sense and vRealize Operations simply trusts the vCenter when it says that a user has permission to log in and see objects.
  
  
  • Because vCenter is responsible for assigning permissions, and because vCenter can only ever be aware of objects in its own inventory, it cannot grant permission to view or modify objects that are internal to vRealize Operations, nor to data that comes in to vROps from other sources.
  
  
  • The vRealize Operations roles cannot be modified or expanded for users that come from the vCenter source from the vRealize Operations side.
  
  
  • vCenter users are unable to create and schedule reports in vROps.
  
  
  
  

The vCenter authentication source is enabled automatically when vCenters are registered and is one of the options for authentication on the vRealize Operations login screen. This causes a great deal of confusion for many users that are using their domain credentials and can log in without issues, yet cannot perform various tasks despite being an "administrator" in the vCenter and/or domain.

Even in situations where "real" authentication sources are configured properly, the vCenter authentication source may still cause confusion since it can present itself as the default, allowing domain users to log in with partial permissions if they are not paying close enough attention. Unfortunately, there is no way to disable the vCenter authentication source, nor to change the default, so you must make an effort to educate your users about the differences and to use the appropriate source when logging in.

Hopefully, this clarifies the differences between the authentication sources and allows you to choose the one that best suits your needs. If any of the above is unclear, please drop me a line in the comments. Thanks for stopping by!

Read More

VMware Product Walkthroughs

NSX.. EVO:RAIL.. Virtual SAN.. ever wish you could have a simple one-stop-shop for learning about the latest virtualization technologies? A place to answer the questions of "Why does this exist" and "How can this help me" or "If I were interested, what would this cost me?"

Enter Product Walkthroughs.



VMware's Product Walkthroughs site is a publicly available resource for answering those questions. The best part is the site not only covers basic product overview, but it drills down into feature sets too. Try utilizing the Search bar or browse the Trending topics to see additional topics like understanding vROPs Forecasting Capacity, or Restoring a virtual machine with vSphere Data Protection, or learning more about the ESXi Firewall.

Remember to share with your friends! Enjoy!

Read More

New Release Menu Dec 21st

Christmas has come early! Buckle up.. because there's been a host of new releases from VMware over the past two weeks.

Below you'll find their release date and links to release notes for each release. I hope you find this helpful!

Merry Christmas and Happy Holidays!
- Ryan

 

vRealize
vRealize Orchestrator Plug-in for SRM 6.1 6.1.0a (Dec. 18^th)
vRealize Orchestrator Plug-in for SRM 6.0 6.0.0.1a (Dec 18^th)
vRealize Operations for Horizon 6.2.0 (Dec. 8th)
vRealize Operations for Published Applications 6.2.0 (Dec. 8th)
vRealize Code Stream Management Pack for IT DevOps 1.0 (Dec. 8th)
vRealize Orchestrator Plug-in for VR-A 7.0.0 (Dec. 17th)
VMware vRealize Business Adv/Ent 8.2.4 (Dec. 17th)
VMware vRealize Business Standard 7.0.0 (Dec. 17th)
VMware vRealize Orchestrator 7.0.0 (Dec. 17th)
VMware vRealize Automation 7.0.0 (Dec. 17th)
VMware Software manager - Download Service 1.3 (Dec. 8th)
VMware vSphere Big Data Extensions 2.3.0 (Dec. 8th)

EUC
VMware Fusion 8.1.0 EUC (Dec. 8th)
VMware Workstation 12.1 EUC (Dec. 8th)
VMware Mirage 5.6 EUC (Dec. 8th)
VMware FLEX 1.7 EUC (Dec. 8th)
VMware Horizon View 6.2.1 EUC (Dec. 8th)
VMware Horizon for Linux 6.2.1 EUC (Dec. 8th)

CSBU
VMware Continuent for Clustering 5.0 (Dec. 9th)
VMware Continuent for Replication 5.0 (Dec. 9th)
VMware Continuent for Analytics and Big Data 5.0 (Dec. 9th)
VMware Continuent for Disaster Recovery 5.0 (Dec. 9th)

Infra / Core
vCloud Director for Service Providers 5.6.5 (Dec. 10th)
VMware Integrated OpenStack 2.0.1 (Dec. 10th)
VMware NSX for vSphere 6.2.1 (Dec. 17th)
VMware vSphere Hypervisor 5.5.0 P07 Infrastructure (Dec. 8th)
VMware vCenter Server 5.5.0 u3b Infrastructure (Dec. 8th)

Read More

New Release Menu Dec 4th

It's that time again, the bi-weekly New Release Menu covering VMware's publicly new and recent releases over the past two weeks.

Below you'll find the product and its version, a link to its Release Notes, and the date it was released.

Enjoy!

App Volumes 2.10 (Nov 24)
VMware Tools 10.0.5 (Nov 24)
ESXi 6.0 EP4 (Nov 26)
vCloud Air Hybrid Cloud Manager 1.0 U1 (Nov 26)

Read More

New Release Menu Nov 23rd

It's that time again, the bi-weekly New Release Menu covering VMware's publicly new and recent releases over the past two weeks. Today's edition delivers 2 Infrastructure releases and 4 EUC releases.

Below you'll find the product and it's version, a link to its Release Notes, and the date it was released. Enjoy!

vSphere Data Protection 6.1.1 [Infrastructure] (Nov 10)
vSphere Data Protection 6.0.3 [Infrastructure] (Nov 10)
Fusion 7.1.3 [EUC/OSX] Nov 12
Workstation Pro/Player 11.1.3 [EUC] Nov 12
VMware Identity Manager 2.4.1 [EUC] (Nov 17)
ThinApp 5.2.0 [EUC] (Nov 19)

Read More