Zero touch provisioning of F/W 7.3.7 to 7.6.1

Similar Questions

• Why microsoft recommends the thin images for zero touch?

  According to this article from Microsoft Academy in the training of Windows 7 (http://technet.microsoft.com/library/dd919178.aspx?ITPID=win7dtp):

  "MDT 2010 supports imaging thin and thick. Thin Imaging refers to the Windows image that Microsoft provides without customizing the installation (or install a lightly customize image), then using automation to install applications, drivers, and updates on each client computer during deployment. Thick Imaging refers to the customization of an image with applications, drivers, and updates before deployment. Microsoft recommends using thin images, like doing so helps reduce the cost and time of maintenance. MDT 2010 makes using thin images with the simple strategy large Zero Touch Deployment: in fact, this strategy advocates thin images. »

  I do not understand how to install applications, drivers & updates AFTER DEPLOYMENT of an image to 500 computers + is more effective than the creation of a single image that already has everything that bundled in and done with it. The images would take more time to load, but then what? If this is zero contact, why do go back and press again ON all machines? I think the answer is that you can push all of the Configuration Manager 2007 R2 after that fine image has been deployed. But what's more effective than any group in a thick image?

  You should ask your question at:

  Windows 7 Installation, Setup, and deployment Forum - TechNet ...

• Zero touch a number in BPEL Expression

  Is it possible to zero key a number in an expression of BPEL?  I have a number that must be 6 digits wide (080000) and sometimes with only 5 (80000).  I was hoping there was a function to do this, but I couldn't find one.

  Thank you

  Tom Henriksen

  Use xslt for the same thing: -.

  xmlns:functx ="http://www.functx.com" > "

  substring(

  string-join (

  ($stringToPad, for $i in (1 to $length) return $padChar)

  ,'')

  ,1,$length)

  ">

• [ncs 5500 in the SP core]

  Hi all:

  Let's say you have a SP BGP-free core network with services like: the Internet residential and business, mpls vpn in all flavors, multicast voice and video, etc. What would be the reasons not to use a NCS5500 on other platforms like asr9k/crsX/ncs6k, which are classic/preferred kernel type routers?

  I know that this could be considered a too open question, so some specific balls could be enough to reply. I am aware that this could be a matter of opinion too, but prices in the ncs5500 makes this platform a very tempting option.

  Thank you very much!
  c.

  Hi Carlos,

  several parameters will be used to decide if you want / can use the NCS 5500 in your heart:

  -the density of ports: If you need ports of 1 G, only the NCS 5501 can serve today but not the 8 slots NCS 5508 chassis (a line with possibility of 1 card G is in the roadmap if)

  -l' scale: If you need very large route tables (more), you should consider ASR9000

  -If you need technology inherited from multicast now, it is not covered in the course of the feature set (PIM - SSM only today, ASM protocols are in the roadmap)

  -If you plan ZTP/ZPL FROM, you must target NCS 6000

  -If you wait L3VPN features (such as a PE) today and features the EVPN, you need the ASR9000. It will come soon, but even later on the 5500.

  Overall, the NCS 5500 can address today most of the basic MPLS requirements. In addition, it supports the Segment routing and MPLS - TE (RSVP), fairly large routing tables (once again, 2.7 M prefixes is huge and enough for 99% of the use cases) + all the news to come with IOS XR (telemetry streaming, 3rd party applications in containers, Zero Touch Provisioning with iPXE and scripts, M2M, automation...).

  Kind regards

  N.

• Difference in-between thickness available lazy to zero; Eager to thick provision to zero; Provision of thin.

  OLA Pessoal,

  Alguem poderia por gentileza me explain a difference wave São aplicadas essas may e no momento da Criação uma VM no ESXi?

  Lazy available zero thickness;

  Eager to thick provision to zero;

  Provision of thin.

  Obrigado

  Discos sao thick discos totally alocados not store data or seja, to você criar um disco thick com 20 GB, ele will occupy 20 GB go don't do seu datastore, a difference between o e thick lazy Zeroead eager to zero, as e no lazy nao sao written zero em todos os blocos disco, o ele ja eager keys zero em todos os blocos disco.

  Ja disco o think e um tipo disco than aloca only the Espaço e timed pelo sistema invited operational, for example, is você criar um disco 20 GB para uma VM, inicialmente ele go occupy only the few KB/Mo no data store, very no momento as voce ready SMS dados no mesmo don't do sistema operational through o dele pode chegar ate limit o 20 GB size.

  Applications:

  Thick lazy disposition to zero: option Padrão para virtually todas as management, Kena as requerem o eager to zero;

  Thick eager willingness to zero: usually used por VM as ARIO use a Fault Tolerance funcionalidade do VMware, or to use a funcionalidade do Microsoft Failover Cluster dentro das Máquinas tolls;

  Thin provision: usually used quando para is provisionar but Espaço than total o Espaço fisico available, very can cause problems is todas as VMs utilizarem todo o Espaço available data store.

• Migration of thick Eager VM supplied zero supplied to lazy thickness to zero

  I noticed that you can change the disk provisioning on a Windows prompt to reset zero Thick - Provisioned LAZY to Thick - Provisioned HASTE updated but NOT the reverse.

  So, it won't change back to LAZY.

  Anyone able to confirm?

  No, it was to test why did not have backups. Thank you

• Cisco SPA with problem of DHCP Options 66

  Dear all,

  I have a problem of my phone Cisco SPA for the autodeploiement.

  If I manually enter the page configuration and paste "[- pwd - password user uid] http:///dms/def/spa$PSN.cfg" in the profile rule. Everything works perfectly.

  However, we would like to do in the provision of zero touch, I add the "[- pwd - password user uid] http:///dms/def/spa$PSN.cfg"DHCP Options 66. " The SPA phone seems impossible to get the 66 Options parameter. It shows that "/ spa$ PSN.cfg" in the rule of profiles.

  I'm sure that the DHCP server works perfectly.

  Can anyone help on this?

  Kind regards

  Desmond

  You cannot use the custom during initial deployment (zero touch) password. DHCP can be used to deliver key to the device in this way.

  Ok. What are the options you have?

  You my use of the configuration file, compiled with SPC type -target option. It encrypt the file by using the password from each device Mac so you need no password given to the device - device can calculate the password required their Mac. It provides just basic security level - insensitive user, like me, know the algorithm used for password generation so that it can calculate the password and decrypt the file.

  You can use HTTPS with mutual certificate authentication to deliver XML or SPC configuration form. All phones have the unique client certificate, then you can be sure that the request has been issued by the unit. It offers a high level of security.

  There are also a few other possibilities, but disclosed so that information on the goal you want to hit, so I can't list.

  Just note that DHCP will meet anyone, in addition, the answer may broadcast (therefore handed to anyone, even without prior request). If you deliver critical data via DHCP, you can consider them publicly available. Security resulting is without security.

• Is it possible to create a Local administrator user when you use the Profile Manager to get the configuration settings

  Hello

  We are studying the use of the Profile Manager of OS X as a way to manage our Enterprise macs.

  One of the demands made by the team, is to create an administrator user, as part of the OS X Profile which is lowered to the customer. The rationale is that this would be a way for the it team get, if the fubar user had their Mac

  I did not see this anywhere in the configuration options of the Profile Manager and so ask the people who use it as part of their everyday Toolbox, to find out if such an option is available.

  Thank you and best regards,

  Madan failed

  No, not with the Profile Manager.

  How you deploying your company Mac?  As institutionally imagery or as BYOD devices?  If image, then the image should contain a coherent local administrator account.  If the active image also the Apple Remote Desktop or SSH, you have a method of mass, control and manage the devices.  If BYOD style, then you are out of luck that the end user is the only one with the key of the device.

  You can take a look at following JAMF Casper.  Once devices are registered, you have the possibility to create accounts (However the common method is to create an account on registration).  If you deploy a BYOD approach, you should also look into DEP program Apple (https://deploy.apple.com) as more DEP JAMF (or other MDM) is a very powerful tool for light to zero touch deployment of systems.

  Reid

  Apple Consultants Network

  Author - "El Capitan Server - Foundation Services.

  Author - "El Capitan Server - Collaboration & control»

  Author - "El Capitan Server - Advanced Services '.

  : IBooks exclusively available in Apple store

• Disable/remove password Public iPad without MDM

  I bought six air iPad (running iOS 9.2.1) for "iPad reference Bar." school library these iPads are in a public space in a kiosk of the enclosure. While I placed many restrictions on these iPads, some students keep by allowing an access code. Then the other students back to iPads and try to guess the password. As you know, after 10 attempts, the iPad becomes disabled and I need to restore it back to factory settings. It's very long because I have to re - download all the applications that are purchased for these six iPads.

  There seems to be no way to restrict access to the creation of the access code, unless I buy a Mobile Device Management (MDM) solution. I also considered using a guided access, but which limits me to one application. I want students to be able to access many applications (for example, Google Drive, Safari, Edmodo, etc..)

  Short of finding where the students do this, I am at a loss for a solution. Help, please!

  To check the setting of the password, you will need to step up to an MDM. [I'm sure an mdm can check the setting of the password to 95%].

  You have your devices purchased with active dep or use the configurator to apple 2.  These two approaches to supervise the ipad. Meraki is a free MDM.

  Alternatively, you can can configure an ipad in master.  Make a copy of it.  Then upload the copy on another ipad.  It is cloning. Might ask someone already supervises and cloning ipads you can tack on!  Apple Configurator 2 supports cloning.  See the last paragraph.

  I would see if you can find financial assistance to students to help out you. Regarding an experimental cheap iphone 4S runs the latest version of the ios software.  The iphone and ipad are functionally equivalent except for construction in the application phone on the iphone.

  "This document offers advice on some important considerations to get the best out of your iOS deployment." Covers: Prepare your infrastructure.  Configure devices.  Set up and manage the devices.  Deploy applications and content.  Support plan.

  https://www.Apple.com/business/docs/iOS_Enterprise_Deployment_Overview.PDF

  Quick overview of zero touch deplayment

  http://www.Apple.com/education/it/DEP/

  Envisager consider DEP, program registration of devices. Use the VPP, Volume purchase program.  Select a MDM, mobile device management.  Read the doc from Google below and nsdjoey write.

  Overview of the deployment of ipad and iphone.

  It is centered education.

  http://www.Apple.com/education/it/

  Write you own app for your business:

  https://developer.Apple.com/Enterprise/

  MDM - Mobile device management

  https://developer.Apple.com/videos/play/wwdc2015-301/

  For a comparison, see this page:

  http://www.enterpriseios.com/wiki/Comparison_MDM_Providers

  VPP - Volume purchase program

  http://www.Apple.com/business/VPP/

  http://www.Apple.com/education/it/VPP/

  Using the configurator to Apple 2

  Writeup ccsdtech see page 5

  See weinsteinbevit more Meraki MDM on page 5

  https://discussions.Apple.com/message/29798579?TSTART=0#29798579

  R

• URGENT REQUEST - X 200 problems running SMS ZTI build - hangs after agpcpq.sys

  I work for a major public sector division and we just started having a laptop Lenovo (X 200), through a system of Government.

  We drive on XP SP2 by using SMS and a Zero Touch installation.

  The machine connects very well and all the image will load but on reboot it will straight to a black screen on safe mode, it stops at AGPCPQ.sys but I think that's all that is subsequently which is suspended. Our preliminary investigation suggests that it is ACPI. The machine seems to have problems picking up the correct HAL.

  Are there patches to do this before I get all cancelled orders of Lenovos, because it must be built with SMS or that they are of no use to us.

  Panic at the wire. It turns out that our consultant had created another package acpi laptops and this ok bulds. It's to do with the fact that hal swapping does not always work in BDD2.5.

• Smart Install - vstack vlan other then vlan 1

  Hello people

  Someone managed to get smart to install work on a vlan other then vlan 1?

  Our installation would be:

  DHCP - Local Director

  TFTP - server ekstern

  Management vlan 209

  My problem is that when I connect the customer switch to a normal trunk "sw mode trunk" we use the vlan 1 by default natively and obviously no traffic comes from vlan 209 to the new switch. It works (IOS downloads and startup-config) when I connect the switch client to an access port on vlan 209.

  I went through several docs and videos but every show vlan 1 as the vlan vstack.

  According to this guide should be possible to use a vlan, the vstack management 1.

  http://www.Cisco.com/en/us/docs/switches/LAN/smart_install/configuration/guide/smart_install.PDF

  Could someone help me? I'm stuck here for a while...

  Best regards

  Isaac

  Yes I'm not sure how big the thing PLEASE will, I'm racking my brain trying to remember, I think that when VLAN_Inconsistencies are detected on a trunk VLAN may not to enter into the State of dispatch or something, but my memory is fuzzy at best. I think you can stop this, perhaps with something like BPDUFilter on the upstream side of the trunk. In this case could turn on to enable Zero Touch configure and upgrade of the switch, then as soon as the switch is configured you may have vlan corresponding native on both sides and the BPDUFilter could be disabled. Kind of, I see that something like a window join, it do not touch true zero, but includes a security feature where necessary before an intelligent installation can occure. For me, it's a good thing, but for others, it could be a pain in the ass. Of course in any case be careful when you play with everything which can interfere with STP, BPDUFilter is a point of obvious exclimation for this warning.

  I think that you would have problems with L3 that the config of default on a white switch will have all ports in switchport mode and you cannot switch zero touch and also set the port no switchport mode at the same time. Except if you reference that the L3 SVI for VLAN 1 on the Director. Obviously that solves all your problems with Smart Install: Burkina Faso / vlan 1, but then you have routing on your TFTP and DHCP server possibly GANYMEDE and at your resort management, so in my mind you basically start to actively use VLAN 1 for management. In my case, it's unacceptable because all our switches have a low VLANS numbered (never 1) as their management interface and it is the only interface I leave LMS contact them on. Since LMS is discovered through COP and COP always finds the IP address of the lowest numbered VLAN on your neighbor switch creating VLAN 1 would be very bad for us. She also defeats all security principals on the use and appropriate size of the vlan 1.

• With a dynamic IP address DMVPN spoke

  A DMVPN Hub-and-Spoke scenario. Hub is in HQ Corporate whileSpokes are based on Internet only. No idea how I could establish peering relationship if the rays are assigned dynamic IP address? He should learn via PNDH?

  I wonder how Zero Touch (ZTD) deployment point in the documentation for the rays...

  Hello Gerard,.

  While the CENTER should have a static IP address, speak it may have a dynamic IP, this isn't a problem.

  The hub is called a NHS (the next hop server). Basically, when the RADIUS will bring up the tunnel, he is recorded to the NHS via PNDH, so the hub will be a dynamic mapping of public IPs private rays.

  The only thing is that you must manually set the address IP of NHS at the rays so that they can register.

  Hope this helps.

• APEX 5, universal theme, value pairs attribute - column layout problem

  Hello

  APEX 5, universal theme.

  I have a little problem with the column model attribute - value pairs.

  If one of the fields is the result of a LOV and the value of the field is zero the provision goes a little wrong (half a row of the value column), when having long lists of pairs, it is difficult to see what value belongs to what field. It is a horizontal allignment problem that looks like the below example, the field in the middle is an empty field based on a LOV.

  Think of it as a little bug. Maybe someone can provide an easy solution?

  See you soon,.

  Bottom

  It looks like a bug in the CSS of the theme. This rule

  .t-AVPList-label,
  .t-AVPList-value {
    display: block;
    vertical-align: top;
    font-size: 1.4rem;
    line-height: 2rem;
    padding: .8rem 1.2rem;
    margin: 0;
    box-shadow: 0 1px rgba(0,0,0,.05) inset;
    transition: background-color .1s;
  }
  

  needs a property added minimum height so that the heights of term/description elements are aligned if one (or both) of them are empty:

  .t-AVPList-label,
  .t-AVPList-value {
    display: block;
    vertical-align: top;
    font-size: 1.4rem;
    line-height: 2rem;
    padding: .8rem 1.2rem;
    margin: 0;
    box-shadow: 0 1px rgba(0,0,0,.05) inset;
    transition: background-color .1s;
    min-height: 4rem;
  }
  

  You can create a style sheet personalized containing a rule of precedence for this problem:

  .t-AVPList-label,
  .t-AVPList-value {
    min-height: 4rem;
  }
  

  Transfer it to your workspace and reference it in the theme CSS File URL property to include in the app:

  #THEME_IMAGES#css/Core#MIN#.css?v=#APEX_VERSION#
  #WORKSPACE_IMAGES#theme_42_AVPlist_fix.css
  

• How to delete files from vCenter answers

  I am train to pre-fill vCenter with IP home address details, so when a stateless host starts using Auto deploy it is actually "zero touch" and can get to work immediately.

  I use the Daniel Hiltgen script which can be found here: Script for the static IP addresses to deploy Auto host (stateless ESXi). I'm identify hosts by mac address, and I modified the script (using his notes) to refer to a dvSwitch.

  I created my CSV file, but whenever I tried to run the script, I get "host 192.168.146.111 already has a valid answer file, jump."  Now, I'm not really sure it's correct, but im test this in a lab environment and it is possible, I tried all combinations of IP address on my local network.

  How can I make party PowerCLI to see what answer files are defined and if necessary remove them?

  I tried to use Get-view "HostProfileManager' but I'm not very far.

  Any help would be greatly appreciated.

  -Mark

  You can see if a host named ESX1 has an answer file with:

  $hostProfileManagerView = Get-view - Id HostProfileManager

  $targetHost = Get-VMHost - name ESX1

  $answerFile = $hostProfileManagerView.RetrieveAnswerFile ($targetHost.ExtensionData.MoRef)

  There is no way to delete an answer file. Howerver you can update an existing answer file. If you delete the control on an existing answer file in the script of Daniel Hiltgen then the answer file will be updated if it already exists. To do this, you will need to remove the following lines in the script of Daniel:

  157 if (-not $answerFile) {}

  182} else {}

  183 write 'Host $targetHost already has a valid answer file, jump.'

  184}.

• list VMDK which are not eagerzeroedthick?

  I try to list all the virtual machines in an environment that do not have their VMDK eagerlyzeroed so I can convert the vmdk in eagerlyzeroed said.

  The script that I have at the moment is:

  Get - vm | Get - views | %{

  $name = $_.name

  $_. Config.Hardware.Device | where {$_.} GetType(). Name - eq "VirtualDisk"} |  %{

  Si ( ! $_. Backing.eagerlyScrub) {}

  {{{"$name has a lazy zero thick provisioned disk"}}}

  However, it returns that each VMDK has a thickness of stocked disc lazy even if I check a number of virtual machines with eagerness to zero records via the vsphere client.

  Any suggestions on the scripts that will be able to the list of virtual machines without eagerlyzeroed VMDK?

  Thank you

  Hello, mmarzotto-

  You the code worked for me to return a row "vmname has a lazy to zero..." "for every thick disk of non-eagerlyzeroed.  You say that this code says that each virtual machine in your environment has all the non-eagerlyzeroed thick disks?

  You can quickly check if this code is producing the desired results by return points who _are_ rubbed anxiously - just remove the character of negation (the "!") in the "if" statement (I haven't posted a fairly simple example-).

  And just a suggestion about the speed of the code: for this run fast as you might end with the appeal of Get - VM at the beginning.  So, as:

  Get-View -ViewType VirtualMachine -Property Name,Config.Hardware.Device | %{    $name = $_.Name    $_.Config.Hardware.Device | where {$_.GetType().Name -eq "VirtualDisk"} |  %{        if(!$_.Backing.EagerlyScrub) {"$name has a lazy zeroed thick provisioned disk"}    } ## end foreach-object} ## end foreach-object
  

  You could combine a couple of statements, to make it a bit shorter and have it return the VMs that have at least a thick disk of non-eagerlyzeroed:

  Get-View -ViewType VirtualMachine -Property Name,Config.Hardware.Device | `    ?{$_.Config.Hardware.Device | ?{($_ -is [VMware.Vim.VirtualDisk]) -and !$_.Backing.EagerlyScrub}} | `    select Name
  

  Just a few suggestions.  Those who give the expected results of VMs who have at least a thick disk of non-eagerlyzeroed?