4.1 582267 Vmware ESX tools

Similar Questions

• VMware compliance tool

  Given that VMware has announced the end of life for vRealize Compliance Manager and over the air vRealize to comply, what are the tools that remain are good at:

  -Posture of the security and compliance of your enviroinment reports (that is maintained with PCI, HIPAA, risk profiles of VMware, etc)

  -Automatically enforce these standards of compliance

  Suggestions, traps, experiences?

  (Does anyone still use this community?)

  Thank you!

  Hello

  vRealize operations will bring in some of the data for you. However, you must activate it for use under Admin-> policies, is not 100% complete, or you can set the parameters of scope and are the only things easily verified that I see.

  HyTrust, Catbird security have also than data available but not yet 100% complete, but better than most.

  CISecurity has a Scanner if you are a member, but once more is not 100%.

  I have a scanner, but it is not 100% complete, but covers most things for VM, host, and began networking.

  William Lam wrote a small scanner to cover more easily verifiable things (anything in the DOM of the host).

  If they do exist, just not much more complete. If you have vRops, turn it on and should help. If you do not, there are any other options, same contacts me and we can set something.

  Best regards

  Edward L. Haletky
  VMware communities user moderator, VMware vExpert 2009-2016

  Author of the books ' VMWare ESX and ESXi in the business: Planning Server Virtualization Deployment, Copyright 2011 Pearson Education. ' Of VMware VSphere and Virtual Infrastructure Security: securing the virtual environment ', Copyright 2009 Pearson Education.

  Virtualization and Cloud Security Analyst: The Practice of virtualization, LLC - vSphere Upgrade Saga - virtualization security Table round Podcast

• How do you know what was the latest patch installed on VMware ESX Server 3i, 3.5.0 207095

  Hello guys,.

  I've been running an old server that was installed in a test system on workstation DELL - Optiplex GX620 (32 bit).

  During installation, I had to confirgure the file: /usr/lib/vmware/installer/Core/TargetFilter.py to change the following line:

  "interface returned. GetInterfaceType() == ScsiInterface.SCSI_IFACE_TYPE_IDE' as follows:

  "interface returned. GetInterfaceType() == ScsiInterface.SCSI_IFACE_TYPE_ISCSI' this is it worked and I used it for 3 years now. However, right now, I was hoping to be updated with the latest patches and updates and I do not know if I just ESX or ESXi, or what was my last update, and what it takes then.

  I used this command to get the following result:

  # vmware - v

  VMware ESX Server 3i 3.5.0 build-207095

  ... I think that the 3i says I have an ESXi 3.5.0 but build 207095 the buid even as ESXi 3.5.0 patch 5?

  If this is not the case, how should I do to update? What is the KB # I should download?

  I can manage using vSphere Client 5.5 and I can't SSH using PuTTY.

  Note: When I run... "# esxupdate - bundle = ESXe350-201302401-I - SG.zip updated ' of in the folder where his property in the data store, nothing happens... just a new line scrolls.

  Also...

  # esxupdate query

  <? XML version = "1.0"? >

  <>request-response

  < installed packages >

  < package ID = "ESX-207095" >

  firmware < name > < / name >

  < version > 3.5.0 < / version >

  < rel > 207095 < / rel >

  < / packages >

  < package ID = "ESX-CLIENT-204907" >

  < name > viclient < / name >

  < version > 2.5.0 < / version >

  < rel > 204907 < / rel >

  < / packages >

  < package ID = "ESX-TOOLS-207095" >

  < name > tools < / name >

  < version > 3.5.0 < / version >

  < rel > 207095 < / rel >

  < / packages >

  < / packages installed >

  < / request-response >

  # /vmfs/volumes/525300ce-5ff6ad3d-e2ed-0014222aedb7/patches/ESXe350-201302401-O-SG

  ... is there any update for this system? I therefore believe that the patch software etc was not around when I was installing this server in 2010.

  Based on KB http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1014508 you run ESX 3.5 Update 5.

• IPSec on VMWare ESX 5.1 communication problems

  Hello

  We have 2 computer systems.  You running us VMWare ESX 5.1 and the other is running Ubuntu 14.04.  We have problems for IPSec to work between the two systems.  We cannot find any documentation or known issues with IPsec on VMWare ESX 5.1, so we're going to reach out to the community.

  Here's what we did:

  1. we configured Ubuntu and VMWare systems to use IPv6, we can ping each other using IPv6.

  2. we configure IPSec on an Ubuntu operating system by following the instructions below:

  https://help.Ubuntu.com/community/IPSecHowTo

  3. we have followed the instructions below to configure IPsec on VMWare.

  http://KB.VMware.com/selfservice/microsites/search.do?language=en_US & cmd = displayKC & externalId = 1021769

  Here's the problem:

  When 2 Ubuntu systems run IPsec, they are able to ping each other.  However, when allow us IPSec communications between VMWare and Ubuntu, the ping is suspended.

  Here is the result of the configuration of command esxcli on VMWare:

  UBUNTU. IPv6.ADDRESS-> Ubuntu IPv6 address

  VMWARE. IPv6.ADDRESS-> address IPv6 from VMWARE

  
  Name Source address Destination address State SPI Mode Encryption Algorithm, integrity algorithm to life

  --------           -------------------------------------  -------------------------------------  ------      -----     ---------     --------------------               -------------------           --------

  GoToDPSA UBUNTU. IPv6.ADDRESS VMWARE. Mature IPv6.ADDRESS infinity 0 256 transport 3des-cbc hmac-sha2-256 x

  VMWARE DPToGoSA. IPv6.ADDRESS UBUNTU. Mature IPv6.ADDRESS infinity 0 x 300 transport 3des-cbc hmac-sha2-256

  Name of the Source address Source Port Destination address Destination Port Protocol flow Action Mode SA

  --------          ----------------------------------------  -----------        ----------------------------------------  ----------------          --------       ----     ------     ---------      --------

  VMWARE DPToGoSP. IPv6.ADDRESS/64 0 UBUNTU. IPv6.ADDRESS/64 0 everything on transport ipsec DPToGoSA

  GoToDPSP UBUNTU. IPv6.ADDRESS/64 0 VMWARE. IPv6.ADDRESS/64 0 in ipsec transport GoToDPSA

  Here's what we found:

  After debugging the problem (using tcpdump), we found that the VMWare system sends the ESP packets, but never sends a package AH (required for IPSec authentication).  Even when the encryption protocol is null, the system of VMWare would always send ESP packets, but never once sent a package of AH.

  Here is the resulting execution trace: Ubuntu - ping-> VMWare:

  ...

  IP6 UBUNTU. IPv6.ADDRESS > VMWARE. IPv6.ADDRESS: AH(spi = 0 x 00000256, seq = 0 x 16): ICMP6, an echo request, seq 1, length 64

  IP6 VMWARE. IPv6.ADDRESS > UBUNTU. IPv6.ADDRESS: ESP(spi = 0 x 00000300, seq = 0 x 1), length 160

  IP6 UBUNTU. IPv6.ADDRESS > VMWARE. IPv6.ADDRESS: AH(spi = 0 x 00000256, seq = 0 x 17): ICMP6, an echo request, seq 2, length 64

  IP6 VMWARE. IPv6.ADDRESS > UBUNTU. IPv6.ADDRESS: ESP(spi = 0 x 00000300, seq = 0 x 2), length 160

  IP6 UBUNTU. IPv6.ADDRESS > VMWARE. IPv6.ADDRESS: AH(spi = 0 x 00000256, seq = 0 x 18): ICMP6, an echo request, seq 3, length 64

  IP6 VMWARE. IPv6.ADDRESS > UBUNTU. IPv6.ADDRESS: ESP(spi = 0 x 00000300, seq = 0 x 3), length 160

  Summary:

  There seems to be a problem with IPSec in VMWare ESX 5.1 on IPv6.

  We noticed that the downloads section of the site support provided patches for VMWare ESx 4.x and earlier, but lack of patches for VMWare ESx 5.x.

  Are there known issues in this area or available patches to fix this problem?  Your kind suggestions would be greatly appreciated.  Thank you.

  Sorry for the late reply, but here the analysis of what is happening and why you are experiencing a problem.

  The Encapsulating Security Payload (ESP) to IPsec protocol will encrypt a payload of the packet and can

  Optionally authenticate the packages as well. You do not include orders allowing you to set the

  Security Association (SA) and political security (PS), but the output in your post indicates that you

  you want to encrypt the payloads both authenticate packets in mode of transport between the hosts.

  I don't know why the Ubuntu IPsec HowTo examples using protocols AH and ESP to encrypt and

  authenticate the packets. In our view, it is best done in a single step with ESP, ESXi only

  offer the option of AH with IPsec. Of course, this requires configuring the ESXi server and your

  The host with a configuration of IPsec compatible Ubuntu (or any other operating system).

  To illustrate, suppose the ESXi server has the address 2001:db8:1 and the host of Ubuntu has the

  address 2001:db8:2. We will use cbc-3des for encryption of the useful and hmac-sha2-256 load for integrity

  authentication mode of transport - just like in your message.

  On the ESXi host, the commands to do this might look like this (of course, you need to generate your)

  own keys and not re-use those I did).

  # Add the outbound security association ESXi

  esxcli ipsec ip network his Add.

  -sa-source = 2001:db8:1.

  -sa-destination = 2001:db8:2.

  -sa-mode = transport.

  -sa-spi = 0 x 200.

  -encryption = 3des-cbc algorithm-

  -encryption key = 0x6dd50fa97e919365d393fd0d404c655f80651316e9418682.

  -the integrity algorithm hmac-sha2-256 =.

  -integrity key = 0x730047c680d9812535a741bbb3521a29322cca77464cf16092519c4165ca6958.

  -sa-name = sa_1to2

  # Add the ESXi inbound security association

  esxcli ipsec ip network his Add.

  -sa-source = 2001:db8:2.

  -sa-destination = 2001:db8:1.

  -sa-mode = transport.

  -sa-spi = 0 x 300.

  -encryption = 3des-cbc algorithm-

  -encryption key = 0x50988e55ca6a0d0440cf0c29f80d308df884616ec4b55552.

  -the integrity algorithm hmac-sha2-256 =.

  -integrity key = 0xf76caa5b4985a8a9d1c7cedbcf43f21b83401818e3b8d5e526a8c99ff4d4baa7.

  -sa-name = sa_2to1

  # Add the outbound security policy ESXi

  esxcli network ip ipsec Ms Add.

  -sp-source = 2001:db8:1 / 64.

  -source-port = 0.

  -sp-destination = 2001:db8:2 / 64.

  -destination-port = 0.

  -top-layer-protocol = any.

  -action = ipsec.

  -output = flow direction.

  sp-= transport mode.

  -sa-name = sa_1to2.

  -sp - name = sp_1to2

  # Add the ESXi incoming security policy

  esxcli network ip ipsec Ms Add.

  -sp-source = 2001:db8:2 / 64.

  -source-port = 0.

  -sp-destination = 2001:db8:1 / 64.

  -destination-port = 0.

  -top-layer-protocol = any.

  -action = ipsec.

  -direction of flow = in.

  sp-= transport mode.

  -sa-name = sa_2to1.

  -sp - name = sp_2to1

  # List the ESXi security associations

  esxcli network ip ipsec its list

  Name Source address Destination address State SPI Mode Encryption Algorithm, integrity algorithm to life

  -------  --------------  -------------------  ------  -----  ---------  --------------------  -------------------  --------

  sa_2to1 2001:db8:2 infinite mature 2001:db8:1 of hmac-sha2-256 0 x 300 transport 3des-cbc

  sa_1to2 2001:db8:1 infinite mature 2001:db8:2 of hmac-sha2-256 0 x 200 transport 3des-cbc

  # List the ESXi security policies

  List of the sp network ip ipsec esxcli

  Name of the Source address Source Port Destination address Destination Port Protocol flow Action Mode SA

  -------  --------------  -----------  -------------------  ----------------  --------  ----  ------  ---------  -------

  sp_1to2 2001:db8:1 / 64 0 2001:db8:2 / 64 0 everything on ipsec transport sa_1to2

  sp_2to1 2001:db8:2 / 64 0 2001:db8:1 / 64 0 in ipsec transport sa_2to1

  On your Ubuntu host, you need a compatible IPsec configuration. In general, on linux systems

  use the command setkey BSD-door, this is done by changing the system-wide

  in/etc/ipsec configuration file - tools.conf.

  #! / usr/sbin/setkey - f

  flush;

  spdflush;

  #

  # SAs ESP using 192 bit long keys (168 + 24 parity)

  # generated using: dd if account = / dev/random = 24 bs = 1 | xxd - ps

  # ESXi supports 3des-cbc, aes128-cbc, or null

  #

  # AH SAs using 256 bit long keys

  # generated using: dd if account = / dev/random = 32 = 1 bs | xxd - ps

  # ESXi supports hmac-sha1 or hmac-sha2-256

  #

  Add 2001:db8:1 2001:db8:2 esp 0x200

  E 3des-cbc 0x6dd50fa97e919365d393fd0d404c655f80651316e9418682

  -A hmac-sha256 0x730047c680d9812535a741bbb3521a29322cca77464cf16092519c4165ca6958;

  Add 2001:db8:2 2001:db8:1 esp 0 x 300

  E 3des-cbc 0x50988e55ca6a0d0440cf0c29f80d308df884616ec4b55552

  -A hmac-sha256 0xf76caa5b4985a8a9d1c7cedbcf43f21b83401818e3b8d5e526a8c99ff4d4baa7;

  # Security policies

  spdadd 2001:db8:1 2001:db8:2 all Pei in ipsec

  ESP/transport / / need;

  spdadd 2001:db8:2 2001:db8:1 all Pei on ipsec

  ESP/transport / / need;

  I have no problem of encryption and authentication of IPv6 traffic between a server ESXi 5.1

  and a host of 14.10 Ubuntu using this configuration.

• Close VMware ESX 3.5 &amp; 4.0 hosts... What about the DRS?

  Hi experts,

  Here I begin this discussion to know the following:

  Facts:

  Farm with guests VMware ESX in u5 versions 3.5 and 4.0 U2

  DRS configured as entirely not automated, no rules.

  Issues related to the:

  What happens with DRS to deploy new virtual machines with Virtual Hardware 7?

  They will receive only on ESX 4.0u2 hosts?

  Could cause instability on the other virtual machines?

  I raise this because I have no experience in mixed environments, and I expect the DRS feature so smart that moves and power on virtual machines on hosts that are able to manage virtual machines with virtual hardware that is compatible with, I'm so innocent?

  Virtual machines with Virtual Hardware 4 can be moved throughout of these clusters 3.5 or 4.0, but what happens with VM with the newest virtual hardware?

  If they had moved in any case on a host ESX 3.5, what will be the behavior of this virtual machine?

  Last, but not least important, what do guys suggest to bypass this until I have all migrated hosts?
  (Migration of all hosts will take more than a month, support and SLA issues, so I need a workaround solution)

  Thanks in advance for your time and answers this!
  Kind regards
  RaMorn

  Hello

  1. what happens with the DRS to deploy new virtual machines with Virtual Hardware 7?

  2. they will receive only on ESX 4.0u2 hosts?

  3 could cause instability on the other virtual machines?

  1 VM' with HW v7 will be migrated only between vSphere 4.X nodes in a cluster

  2 VM with HW v7 will be only on vSphere 4.x nodes

  3 nope

  1. I raise this because I have no experience in mixed environments, and I expect the DRS feature so smart that moves and power on virtual machines on hosts that are able to manage virtual machines with virtual hardware that is compatible with, I'm so innocent?

  2. the virtual machines with Virtual Hardware 4 can be moved throughout these clusters 3.5 or 4.0, but what happens with VM with the newest virtual hardware?

  3. If they got anyway moved on a host ESX 3.5, what will be the behavior of this virtual machine?

  4. last, but not least important, what do guys suggest to bypass this until I have all migrated hosts?
  (Migration of all hosts will take more than a month, support and SLA issues, so I need a workaround solution)

  1. Yes, the DRS will be

  2. see comments of mu above

  3. nothing will change on the behavior of the virtual machine, only VMware tool will be updated

  4. all depends on how your is configured, how is use, VM how you would deploy during the month?

  See you soon

  Artur

  Visit my blog

  Please, do not forget the points of call of the "useful" or "correct" answers

• Update disk in VMware ESX 3i

  Hi all

  I recently replace the SATA 7.2 K six drive in my PowerEdge server for six SAS 15 K disks. Previously, I did my VM then restored for the new RAID volume 50 and backup. But when I start the virtual machine (centos 5) and run ' dd if = / dev/zero of = testfile2 bs = 8192 count = 12207 "the almost the same result I had with the SATA disks. My question is: VMWare ESX 3i immediately recognize the new SAS drive? Or maybe it's write the disc with the previous speed?

  Thank you and best regards,

  Amedina

  DD may be not the best tool to test the performance. In theory, the SAS drives, if you get more IOPs, dd wrote only (sequential).

  RAID 50 with only six readers isn't a really good choice either.

  Depending on your RAID controller (Perc xx? with battery backup cache write?), the bottleneck is not the disks, but the controller itself (calculation of parity on the two RAID5) and striping on the RAID50.

  Think about another provision RAID (8 disks RAID10?) and another test tool.

• VMware ESX Vmware Workstation

  Hello everyone:

  I have a question, I created 4 virtual machine in Vmware ESX using Vmware Infrastructure Client, I can open this virtual machine with Vmware Workstation?, what is the tool for this task? Thanks for your help.

  Good bye.

  Fernando.

  Yes - you can do it - here I do not use any tools at all - just copy to the desktop

  the method is to use the converter though

  ___________________________________

  VMX-settings- WS FAQ -[MOAcd | http://sanbarrow.com/moa241.html]- VMDK-manual

• services do not start after you run vmware-config - tools.pl

  VSphere 4 Enterprise - SLES10 x86_64.

  wmad: ~ # rpm - qa | grep vmware-i

  VMwareTools-8193-164009

  wmad: ~ # uname - a

  Linux wmad 2.6.16.60 - 0.54.5 - default #1 Fri Sep 4 01:28:03 2009 UTC x86_64 x86_64 x86_64 GNU/Linux

  I updated the kernel, now when I run vmware-config - tools.pl, I get the attached result ending in "abandoned Execution." Ideas?

  Thanks, Mike

  This does not happen with newly released patches.

  If you are not ready to upgrade the latest patches of the ESX host, you can also try to force load modules or try to recompile all modules by using the command "" vmware-config - tools.pl - compile ".

  The other (crude) way is to get the last iso linux tools of any other host ESX-4 (with the latest patches) and goes up on the virtual machine and proceed with the installation.

  N

• System HP for Vmware management tools

  Hello everyone

  I installed the management tools of the HP system on all the physical servers of my HP in order to control newspapers HW and pull on the server.

  -Is it possible to have the same on VMware ESX 3.0.1?

  -Do I need HP Systems Insight Manager and it is free to use?

  Thank you

  Julien

  II

  I remember the part you are refuring to now.  During installation choose to install SNMP agents and then select this option to use an existing SNMP configuration, then you will get the above screen.

  Sorry for the confusion

• With the help of VMware ESX in a business continuity Plan

  I'm looking to set up a Plan for continuity of the business using Vmware ESX. I would like to install an outside site that will duplicate a few key servers. Does anyone have any ideas on how I can do this with ESX? Is it as simple as pushing Server snapshots to the offsite location? Any ideas...

  Thank you

  Scott

  Hello

  Welcome to the forums.

  I'm looking to set up a Plan for continuity of the business using Vmware ESX. I would like to install an outside site that will duplicate a few key servers. Does anyone have any ideas on how I can do this with ESX? Is it as simple as pushing Server snapshots to the offsite location? Any ideas...

  One thing to know is that a snapshot in terms of "VMware" is not a full copy of the disc, it is a file that contains the changes to the drive block since the snapshot was created. Snapshots of assistance in making backups of virtual machines running, but allowing the basic disk to copy while the data is written to the snapshot. Then, you're the snapshot.

  So how do DR/BC is having a good backup strategy using one of the available backup/replication tools.

  There are:

  Veeam Backup w/replication

  Vizioncore vRanger backup and vReplicator for replication connection

  EsXpress doctorate for backup (restorations of use for replication)

  There is also some SRM if your San is supported, etc.

  So there are a lot of options the question is how 'real time' you need the data. You could also use the replication SAN, Double Take, etc.

  Best regards
  Edward L. Haletky
  VMware communities user moderator, VMware vExpert 2009, Analyst of DABCC
  ====
  Now available on Rough Cuts: ' VMware vSphere (TM) and Virtual Infrastructure Security: ESX security and virtual environment '
  Also available "VMWare ESX Server in the enterprise"
  SearchVMware Pro| Blue gears. Top virtualization security links| Security Round Table Podcast virtualization

• VMware ESX server CPU use test alarm

  Hi all

  For a new client, I need to show the alarm and ticket slot functionlity vmware ESX server logging settings

  • Use of the CPU of a server ESX VMW
  • Use of memory for the server ESX VMW

  While I reduced the threshold value of VMW ESX Server CPU use as beloow format

  WARNING - 5% and STDev.warning - 0

  I made this two days before configuration, but still no alarm generated for this rule.

  Help the creation of a test of the abveo metric ESX alarm

  Hi - I ended up having to do such things in the past as well. I just built a virtual machine added lots of processors and memory, then for the CPU, I used the script CPUBusy.vbs from VMware (Google search which) and down it load times so that he began to max real physical processors... For memory, I just opened a massive text file in Wordpad and scroll up and down it. This gave me the circumstances to test the alarms, just don't do as a busy time or use some dev ESX servers... Danny Bravo

• Host for vmware integration tools

  where can I download the host for Vmware integration tools?

  the support site are not providing the relevant download

  https://eqlsupport.Dell.com/support/download.aspx?ID=3199

  Klick on VMware integration or eqlsupport.dell.com/.../download.aspx

  Its a set of programs. Most likely, you are looking for the MEM (Module of Extension Multipath) and VSM (Virtual Storage Manager), formerly known as the ASM/VE. The last is the "plugin" for the connection between your group EQL and vSphere vCenter. His only usable in the 'new' WebClient vSphere and not for the old c# one.

  Kind regards

  Joerg

• Configuration of VMware ESX 5.1/5.5 pass through for PowerEdge 2970

  Hello

  I tried to configure VMware ESX 5.1/5.5 pass through for a 8 GB Qlogic FC HBA on PowerEdge 2970 server.

  Even after activation of the virtual technology in the BIOS, the PCI device is not listed in "Advanced settings" to configure pass-through. Attached screenshot shows the current setting of the processor.

  Y at - it all the additional steps required to configure it.

  Concerning

  E.

  Hello Sara

  You're talking Direct path IO or single root i/o virtualization? If so, none of these features are supported on the 2970 system.

  http://www.VMware.com/resources/compatibility/search.php

  I don't think that or the other of these characteristics were available until our 11 generation systems.

  Thank you

• Cisco Secure ACS 4.2 on VMware ESX 4.0.

  We must move from ESX 3.5 to ESX 4.0 a virtual machine running Cisco Secure ACS for Windows version 4.2.

  This solution is compatible and supported by Cisco?

  Thank you.

  Andrea

  ACS Windows 4.2 is not supported by Cisco, when installed on VMWare ESX 4.0 in accordance with the following documentation:

  http://Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/device/guide/sdt42.html#wp37898

  Only ACS 5.1 is supported on ESX 4.0:

  http://www.Cisco.com/en/us/partner/docs/net_mgmt/cisco_secure_access_control_system/5.1/installation/guide/csacs_vmware.html

• What is the best for VMware esx 4.0

  If I understand correctly, 4.2.1 for windows only supports VMware esx 3.0? IF ACS 5.0 supports VMware esx 4.0? Or is it a solution Manually applciation compete with hardware?

  Pls help?

  5.1 of the ACS is FCS and running on ESX 4.0

  See http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_system/5.1/installation/guide/csacs_vmware.html