Hello,

We've noticed an event that gets logged against almost every one of our VMs every day on about 25 minute intervals.  An event description example is " 10/30/2018, 7:29:32 AMGuest operation authentication failed for operation Delete Directory on Virtual machine <VM name>".  We think this started after upgrading vROPs from 6.7 to 7.0 as that was the only thing that changed in our environment but can't confirm.

The environment is vCenter 6.5 with  ESXi, 6.5.0, 7967591.  The VM hardware versions range from 9 to 13.  Hyperic is also loaded in vROPs but isn't set up to monitor all VMs.

Has anybody seen this to be caused by vROPs or a plugin installed in vROPs that tries to interact with VMs?  Are there additional logs we could look at to see the source of these operation attempts?  We would like to find out what is causing these operations and stop them.

Thanks in advance!

Hello. I signed up for the VMware website. I signed up and had to activate my account via a message received from vmware. When I tried to activate the account and logged in, the following error appears. I do not know how to solve it.

Image may be NSFW.
Clik here to view.

PS. I am not able to log in to VMware and therefore can not use  technical vmware support . If I put a topic in the wrong section then I'm sorry.

Hi,

Is the vCloud usage meter using NTP or ESX time synchronisation to synchronise time? If the former (NTP) is it possible to configure the used NTP peers for time synchronisation? I do not want to allow the VM to go to the internet to do the time synchronization.

Regards,

Theo.

I've been working with reporting lately trying to create cluster capacity reports. I noticed a couple things and wonder if some of you may know the answer. Thanks for your help!

1. Why don't view metric colors appear in reports? It's kind of useless to play around with the coloring if you can't quickly present it that way to your audience.

Image may be NSFW.
Clik here to view.

2. When creating a report it would be nice to have a sections where you can select different objects. For example I'd like a section where I select a custom datacenter object and then in another section I could select different clusters. The end result I'm looking for is to show each clusters trending cpu or memory information. But it gets ugly when you have 5 different clusters in the same view. Below is how the report would end up looking. I want a section with each cluster.

Image may be NSFW.
Clik here to view.

Hi.

I have Horizon 7.1, vCenter 5.5 U3

When I try to create Instant Clone desktop pool ( Floating ), the Horizon do not display vCenter to select. It is available only for Full Clone configuration.

How I can select vCenter for InstantClone?

Hello,

We are in the planning stages for moving our vCenter6.0 environment to a new location. This new location will have all new equipment to mirror what we currently have which are 7 VM Hosts connected to an EqualLogic 6610 via iSCSI (isolated network). In order to have minimal downtime we would like to replicate the current environment to this new site then re-purpose the current equipment.

Would vSphere Replication Manager suffice for this or would we need something more robust such as Site Recovery Manager? Much of what I've read relates to recovery of VMs/vCenter.

My plan would be to stage the equipment at our current location for an initial sync then move to the new site for replication until our cut-over date.

Thanks,

John

     Hello all,

I have a dell 5060 wyse thin client that I want to connect my v800 Epson scanner and do the scanning there rather than redirection on Horizon 7 VM.

I am able to scan if I go on to printer and devices, but not on the Epson Scan function. Driver is installed successfully but can only scan if I go directly to the printer.

Anyone have some advice on how to get this to work or how to get better latency on the scanning redirection?

Thank you,

Anthony

I'm trying to tweak UEM as much as i can.  One thing that I've noticed about the longer logins is that they are typically tied to processing the UEM imports for web browsers.  I've read, alot.  And come up with solutions that i'm currently testing, but figured i'd ask to see if anyone had a better idea.

Chrome - This was done mainly through a better UEM template that i found and tweaked a little:

[IncludeFolderTrees]

<LocalAppData>\Google\Chrome\User Data

[IncludeRegistryTrees]

HKCU\Software\Google

[ExcludeFolderTrees]

<LocalAppData>\Google\Chrome\Default\Cache

<LocalAppData>\Google\Chrome\User Data\Default\Cache

<LocalAppData>\Google\Chrome\User Data\Default\Application Cache

<LocalAppData>\Google\Chrome\User Data\Default\Storage

<LocalAppData>\Google\Chrome\User Data\Default\Local Storage

<LocalAppData>\Google\Chrome\User Data\Default\Media Cache

<LocalAppData>\Google\Chrome\User Data\Default\Session Storage

<LocalAppData>\Google\Chrome\User Data\Default\GPUCache

<LocalAppData>\Google\Chrome\User Data\Default\Web Applications

<LocalAppData>\Google\Chrome\User Data\Default\Sync Data

<LocalAppData>\Google\Chrome\User Data\Default\Sync Data Backup

<LocalAppData>\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWriteableAdobeRoot

<LocalAppData>\Google\Chrome\User Data\Default\IndexedDB

<LocalAppData>\Google\Chrome\User Data\Profile 1\Cache

<LocalAppData>\Google\Chrome\User Data\Profile 1\Application Cache

<LocalAppData>\Google\Chrome\User Data\Profile 1\Storage

<LocalAppData>\Google\Chrome\User Data\Profile 1\Local Storage

<LocalAppData>\Google\Chrome\User Data\Profile 1\Media Cache

<LocalAppData>\Google\Chrome\User Data\Profile 1\Session Storage

<LocalAppData>\Google\Chrome\User Data\Profile 1\GPUCache

<LocalAppData>\Google\Chrome\User Data\Profile 1\Web Applications

<LocalAppData>\Google\Chrome\User Data\Profile 1\Sync Data

<LocalAppData>\Google\Chrome\User Data\Profile 1\Sync Data Backup

<LocalAppData>\Google\Chrome\User Data\Profile 1\Pepper Data\Shockwave Flash\CacheWriteableAdobeRoot

<LocalAppData>\Google\Chrome\User Data\Profile 1\IndexedDB

<LocalAppData>\Google\Chrome\User Data\Profile 2\Cache

<LocalAppData>\Google\Chrome\User Data\Profile 2\Application Cache

<LocalAppData>\Google\Chrome\User Data\Profile 2\Storage

<LocalAppData>\Google\Chrome\User Data\Profile 2\Local Storage

<LocalAppData>\Google\Chrome\User Data\Profile 2\Media Cache

<LocalAppData>\Google\Chrome\User Data\Profile 2\Session Storage

<LocalAppData>\Google\Chrome\User Data\Profile 2\GPUCache

<LocalAppData>\Google\Chrome\User Data\Profile 2\Web Applications

<LocalAppData>\Google\Chrome\User Data\Profile 2\Sync Data

<LocalAppData>\Google\Chrome\User Data\Profile 2\Sync Data Backup

<LocalAppData>\Google\Chrome\User Data\Profile 2\Pepper Data\Shockwave Flash\CacheWriteableAdobeRoot

<LocalAppData>\Google\Chrome\User Data\Profile 2\IndexedDB

<LocalAppData>\Google\Chrome\User Data\Profile 3\Cache

<LocalAppData>\Google\Chrome\User Data\Profile 3\Application Cache

<LocalAppData>\Google\Chrome\User Data\Profile 3\Storage

<LocalAppData>\Google\Chrome\User Data\Profile 3\Local Storage

<LocalAppData>\Google\Chrome\User Data\Profile 3\Media Cache

<LocalAppData>\Google\Chrome\User Data\Profile 3\Session Storage

<LocalAppData>\Google\Chrome\User Data\Profile 3\GPUCache

<LocalAppData>\Google\Chrome\User Data\Profile 3\Web Applications

<LocalAppData>\Google\Chrome\User Data\Profile 3\Sync Data

<LocalAppData>\Google\Chrome\User Data\Profile 3\Sync Data Backup

<LocalAppData>\Google\Chrome\User Data\Profile 3\Pepper Data\Shockwave Flash\CacheWriteableAdobeRoot

<LocalAppData>\Google\Chrome\User Data\Profile 3\IndexedDB

<LocalAppData>\Google\Chrome\User Data\WidevineCDM

<LocalAppData>\Google\Chrome\User Data\EVWhitelist

<LocalAppData>\Google\Chrome\User Data\pnacl

<LocalAppData>\Google\Chrome\User Data\recovery

<LocalAppData>\Google\Chrome\User Data\SwiftShader

<LocalAppData>\Google\Chrome\User Data\SwReporter

<LocalAppData>\Google\Chrome\User Data\ShaderCache

<LocalAppData>\Google\Chrome\User Data\PepperFlash

<LocalAppData>\Google\Chrome\Application\

[ExcludeFiles]

<LocalAppData>\Google\Chrome\User Data\Default\ChromeDWriteFontCache

<LocalAppData>\Google\Chrome\User Data\Profile 1\ChromeDWriteFontCache

<LocalAppData>\Google\Chrome\User Data\Profile 2\ChromeDWriteFontCache

<LocalAppData>\Google\Chrome\User Data\Profile 3\ChromeDWriteFontCache

<LocalAppData>\Google\Chrome\User Data\Safe Browsing Bloom

<LocalAppData>\Google\Chrome\User Data\Safe Browsing Bloom Prefix Set

<LocalAppData>\Google\Chrome\User Data\Safe Browsing Download

<LocalAppData>\Google\Chrome\User Data\Safe Browsing UwS List

<LocalAppData>\Google\Chrome\User Data\Safe Browsing UwS List Prefix Set

<LocalAppData>\Google\Chrome\User Data\ev_hashes_whitelist.bin

*.tmp

Firefox - This one was a little more annoying.  We have users who have 100MB+ profiles and are very defensive about losing their history or cookies.  The random username made doing it through UEM a bit of a challenge, so i opted for locked configuration (still testing).  This way i can ensure hardware acceleration is disabled, and limit cookies, disk cache and cleanup options.

IE 11 - Our IE profiles are typically small, however some users have thousands of cookies that result in a slow import.  My plan for this is to age the cookies out, by splitting the cookies and webcache into a seperate template that will age out things older than 30 days.

And while i believe this will keep the cookies under control, i know this isn't pruning the webcachev01.dat file.

Anyone have another method or idea?  Preferably without 3rd party software involved.

Thanks

Anyone have an issue with the 15.x workstation release and dialog boxes spanning BOTH screens and some? ie shutdown notices, delete notices

We have created an automated patching process for linux that creates snapshots before the virtual machines are patched. It works for the most part but we sometimes get the

The operation is not allowed in the current state of the host

and I am hoping there is a way we can check for this. I'm wondering if anyone has tried something similar, I'm thinking of getting creative and having the script check for the event somehow, but I can't think of the best process right now.

Any help is appreciated.

Hi team,

This is a frustrating problem, surely someone has run into this before.

Have a lab deployment of HV 7.5 and in general it was working well. Until I updated the default self signed SSL certs to an external one (Wildcard Rapid SSL SHA 256), also same thing with an internal Windows CA issued cert.

I follow the tasks in this article to the letter Import a Signed Server Certificate into a Windows Certificate Store and from the outset it looks to be a simple update.

However, when I restart the Connection Server Service on the Connection Server we lose connectivity to it, we get the Page cannot be displayed error in a browser when trying to browse the admin pages. Also the Agents all loose connection with the brokers - example of a static RDSH workload below (Debug log from the agent)

2018-12-05T09:19:36.186+13:00 DEBUG (1B28-0450) <Thread-4> [JmsManager] Unable to connect to JMS server win2k12-cb1.home.lab com.vmware.vdi.logger.Logger.debug(Logger.java:44)

javax.jms.IllegalStateException: Session is closed

at com.swiftmq.jms.v750.SessionImpl.verifyState(Unknown Source)

at com.swiftmq.jms.v750.SessionImpl.createTemporaryTopic(Unknown Source)

at com.vmware.vdi.messagesecurity.swiftmq.BrokerUpdateUtility.updateOverJms(SourceFile:139)

at com.vmware.vdi.agent.messageserver.AgentJmsConfig.pairOverJms(SourceFile:376)

at com.vmware.vdi.agent.messageserver.JmsManager.connect(SourceFile:288)

at com.vmware.vdi.agent.messageserver.Main.Start(SourceFile:1265)

2018-12-05T09:19:36.186+13:00 WARN  (1B28-0450) <Thread-4> [JmsManager] Unable to connect to any listed host. The agent will continue to retry: [win2k12-cb1.home.lab]

2018-12-05T09:19:36.186+13:00 DEBUG (1B28-0450) <Thread-4> [JmsManager] Will not report initial error

2018-12-05T09:19:36.186+13:00 DEBUG (1B28-0450) <Thread-4> [JmsManager] Will attempt JMS Thumbprint exchange

2018-12-05T09:19:51.072+13:00 DEBUG (1B28-0450) <Thread-4> [JmsManager] Using connection broker win2k12-cb1.home.lab

2018-12-05T09:19:51.072+13:00 DEBUG (1B28-1930) <MessageFrameWorkDispatch> [MessageFrameWork] KeyVault service got operation=getEndEntityCertificates, ok=1, msecs=0

2018-12-05T09:19:51.102+13:00 DEBUG (1B28-1930) <MessageFrameWorkDispatch> [MessageFrameWork] KeyVault service got operation=getEndEntityCertificates, ok=1, msecs=15

2018-12-05T09:19:51.335+13:00 DEBUG (1B28-0450) <Thread-4> [JmsManager] username for swiftmq connection is: agent/f5ff457a-a849-4e35-b436-f2e141dd7539

2018-12-05T09:19:51.335+13:00 INFO  (1B28-0450) <Thread-4> [AgentJmsConfig] Attempting to securely pair agent for JMS communication

2018-12-05T09:19:51.335+13:00 DEBUG (1B28-0450) <Thread-4> [AgentMessageSecurityHandler] Configuring message security (ENHANCED).

2018-12-05T09:19:51.397+13:00 DEBUG (1B28-0450) <Thread-4> [BrokerUpdateUtility] Published CHANGEKEY request

2018-12-05T09:19:53.324+13:00 DEBUG (1868-1108) <TimerService> [ws_perfmon] System CPU use: 6%

2018-12-05T09:19:53.324+13:00 DEBUG (1868-1108) <TimerService> [ws_perfmon] Commit memory use: 8%

2018-12-05T09:19:53.386+13:00 DEBUG (1868-10EC) <MessageFrameWorkDispatch> [ws_winauth] CheckDomainMembershipStatus for domain home.lab

2018-12-05T09:19:53.510+13:00 DEBUG (1868-10EC) <MessageFrameWorkDispatch> [ws_winauth] CheckDomainMembershipStatus bind successful

2018-12-05T09:19:53.510+13:00 DEBUG (1868-10EC) <MessageFrameWorkDispatch> [wsnm_desktop] domainChecker: Cacheing domain membership status DOMAIN_CHECK_ERR_OK

2018-12-05T09:19:53.510+13:00 DEBUG (1868-10EC) <MessageFrameWorkDispatch> [wsnm_desktop] domainChecker: Setting timer for 3600 seconds

2018-12-05T09:19:57.118+13:00 DEBUG (1868-1354) <PSGC> [wsnm_psgc] Sending get-info request (mid=620)

2018-12-05T09:19:57.118+13:00 DEBUG (1868-1264) <PSGC:L> [wsnm_psgc] Good response received for get-info request (mid=620) in 0 milliseconds

2018-12-05T09:20:01.382+13:00 DEBUG (1B28-0450) <Thread-4> [BrokerUpdateUtility] Timeout waiting for success response

2018-12-05T09:20:18.712+13:00 DEBUG (1868-1354) <PSGC> [wsnm_psgc] Sending get-counters request (mid=621)

2018-12-05T09:20:18.712+13:00 DEBUG (1868-1264) <PSGC:L> [wsnm_psgc] Good response received for get-counters request (mid=621) in 0 milliseconds

2018-12-05T09:20:18.712+13:00 INFO  (1868-1264) <PSGC:L> [wsnm_psgc] Stats: count=0, hwm=0

2018-12-05T09:20:21.411+13:00 DEBUG (1B28-0450) <Thread-4> [BrokerUpdateUtility] Published CHANGEKEY request

2018-12-05T09:20:31.427+13:00 DEBUG (1B28-0450) <Thread-4> [BrokerUpdateUtility] Timeout waiting for success response

2018-12-05T09:20:51.732+13:00 DEBUG (1B28-0450) <Thread-4> [BrokerUpdateUtility] Published CHANGEKEY request

2018-12-05T09:20:51.903+13:00 DEBUG (1B28-0450) <Thread-4> [msgid] Validating message with ID: '9adf4353-9cfb-417e-bfb6-2023bd27000d'.

2018-12-05T09:20:51.903+13:00 WARN  (1B28-0450) <Thread-4> [JMSMessageSecurity] Message could not be validated: Message not signed

2018-12-05T09:20:51.903+13:00 WARN  (1B28-0450) <Thread-4> [JMSMessageSecurity] Identity validation failed: UNKNOWN

2018-12-05T09:20:51.903+13:00 DEBUG (1B28-0450) <Thread-4> [JMSMessageSecurity] Identity validation failure trace com.vmware.vdi.logger.Logger.debug(Logger.java:44)

java.lang.Exception: Identity validation failed: UNKNOWN is not known identity for: null

at com.vmware.vdi.messagesecurity.JMSMessageSecurity.a(SourceFile:572)

at com.vmware.vdi.messagesecurity.JMSMessageSecurity.validateAndCheckWithHandler(SourceFile:450)

at com.vmware.vdi.messagesecurity.swiftmq.BrokerUpdateUtility.a(SourceFile:236)

at com.vmware.vdi.messagesecurity.swiftmq.BrokerUpdateUtility.updateOverJms(SourceFile:162)

at com.vmware.vdi.agent.messageserver.AgentJmsConfig.pairOverJms(SourceFile:376)

at com.vmware.vdi.agent.messageserver.JmsManager.connect(SourceFile:288)

at com.vmware.vdi.agent.messageserver.Main.Start(SourceFile:1265)

2018-12-05T09:20:51.903+13:00 WARN  (1B28-0450) <Thread-4> [BrokerUpdateUtility] Dropping response as not validated

If I replace the SSL cert with the default self signed cert I can get back into the HV Console and can see the agent has still not able to connect (a reboot doesn't fix this, also a reinstall of the Agent on this test workload doesnt fix this!)

I've tried to drop the JMS security mode down to mixed or lower as outlined here Using the vdmutil Utility to Configure the JMS Message Security Mode thinking the Agent has picked up a corrupted or bad cert from the connection broker when the update was done, and then by forcing it to negotiate at a lower level I can fix it, but unfortunately I cant seem to drop the security mode down from enhanced in 7.x of view.

Below is the console view once I get the original self signed cert re-instated, note the agent is no longer reachable.

Image may be NSFW.
Clik here to view.

Anyone have any ideas on this, before I do a complete rebuild of the deployment?

What am I missing when it comes to updating SSL certs on the connection broker?

Placeholder VM is located under the resource pool in the cluster A and the task is migrate the placeholder VM to the resource pool in the cluster B. Is vmotion supported for this operation? And how to change default location for creating new placeholder vm (when I create new protection group in SRM placeholder vm is created under the resource pool in the cluster A).

HI

We are looking at replacing our current storage array with a netapp HCI solution. Unfortunately this require Jumbo frames and I'm trying looking to see if there is any problems with migrating the vmkernel adapters that are bound to the iscsi adapter to a portgroup set for jumbo frames and then have both discover addresses in the adapter. Then I'll just storage vmotion everything from the old datastores to the new ones.

I need to get a list of the VM swap location and Swap size. I was able to use the script below to get some information but was missing the size data and some of the output was being cut off. Is it possible to add the size data to the script below and have it export to a CSV file? Or is another script needed to get the swapfile name/location and then use that data to query/get the size. Any help is greatly appreciated.

Thanks

foreach($vminGet-VM){

$vm|SelectName,@{N='VMX';E={$vm.ExtensionData.Config.Files.VmPathName.Split('/')[0]}},

@{N='Swap';E={

    switch($vm.ExtensionData.Config.SwapPlacement){

'inherit' {

    $parent=Get-View$vm.ExtensionData.ResourcePool -PropertyName,Parent

    while($parent-isnot[VMware.Vim.ClusterComputeResource]){

        $parent=Get-View$parent.Parent -PropertyName,Parent

    }

    $parent=Get-View$parent.MoRef -PropertyConfigurationEx.VmSwapPlacement

    switch($parent.ConfigurationEx.VmSwapPlacement){

    'hostLocal' {

        $esx=Get-View$vm.ExtensionData.Runtime.Host -PropertyConfig.Local.SwapDatastore

        $swapLocation=Get-View$esx.Config.LocalSwapDatastore -PropertyName

    }

    'vmDirectory' {

        $swapLocation=$vm.ExtensionData.Config.Files.VmPathName.Split('/')[0]

    }

    }

}

'hostLocal' {

        $esx=Get-View$vm.ExtensionData.Runtime.Host -PropertyConfig.Local.SwapDatastore

        $swapLocation=Get-View$esx.Config.LocalSwapDatastore -PropertyName

}

'vmDirectory' {

        $swapLocation=$vm.ExtensionData.Config.Files.VmPathName.Split('/')[0]

}

}

$swapLocation

}}}

Hi 

I'm trying to disable the field of boolean return type in my form. So I will able to return the result (yes or no), but I want that this field be disabled for the user. The users can not be able to change the result  

Image may be NSFW.
Clik here to view.

I installed ESXi 6.5 from a 32GB SD card (inserted into hyper-visor motherboard usb  port) and chose to install it on the same card during installation. I set the pass through on my LSI controller & USB controller, and applied a license. I rebooted and these changes retained.

However, I then added datastore1 (ssd) and uploaded backed up VMDK'/VMX's from prior EXSi 5.5 environment. All VM's were running fine....

I shutdown the VM's and rebooted the ESXi host.

To My surprise all the VM's unregistered themselves, but the license and pass-through settings retained.

I re-registered the VM's and rebooted ESXi host again, same result.

Any ideas?

Hola a todos, ¿alguien me podría ayudar con este mensaje??

resulta que cambie de notebook y no me deja abrir la consola de las MV , en el otro notebook (Windows 10 Pro) no tengo problema, me sucede con el nuevo (Windows 10 Pro). Los servidores son VMware ESXi (5.5 y 6.0) y me intento conectar con vSphere Client.

PD: Licencia Free

Saludos.

Running Horizon 7.6 and 4.9 client. Has anyone experienced this and what was your fix?

Hi,

We have two hosts set up for HA under 5.5 Essentials Plus.

The vCenter server is a VM on one of the hosts. If the host with the vCenter server suffers a hardware failure, can the lost VMs start on the other host or are we out of luck?

Thanks

I'm working with a legacy API instance that connects to our vCenters to collect data about hosts and vms.  

I was tasked with collecting the TPM PCR values for each host to do some daily validation.

I see a key on the host for 'runtime.tpmPcrValues', which looks like what I'm looking for.  But when I query that for our hosts,

I'm getting the same PCR values for every host - which shouldn't be the case.

Is there a better way to collect this data via the SOAP API?