VMware releases patch for glibc vulnerability on ESXi 5.5

VMware ESXi550-201602401-SG

You may remember not to long ago, the GHOST vulnerability found in glibc, a GNU C library. Well a new glibc vulnerability (CVE-2015-7547) has been discovered and it affects VMware ESXi 5.5 and 6.0 in addition to all versions of VMware virtual appliances running Linux such as vCenter, Orchestrator, vRealize, etc.

VMware has just released patch ESXi550-201602401-SG for ESXi 5.5 and ESXi600-201602401-SG for ESXi 6.0 which fixes the glibc vulnerability, a patch for ESXi 6.0 has yet to be released. VMware has however posted workarounds for affected virtual appliances.

Read More “VMware releases patch for glibc vulnerability on ESXi 5.5”

HTML5 Embedded Host Client, this looks promising

It’s no secret many people have really disliked the vSphere web client, it’s very sluggish, clunky, and based on flash (flash comes with it’s own security issues). It was rumored and highly hoped that vSphere 6 might be re-written in HTML5, but sadly this didn’t and hasn’t happened yet. While vSphere 6 did improve a bit on the web client the issues many people have had with it in the past still remain today.

Enter the VMware HTML5 Embedded Host Client fling. I’ve been using and following this fling for a while now and have really enjoyed it and with each release it keeps getting better and better.

The Embedded Host Client fling is based on HTML5 which allows it works great across all kinds of platforms, it’s fast, responsive, and doesn’t require any plug-ins – YES the VM console works great. If this happens to be a look of what’s to come in a new VMware vSphere web client, then a client is looking very promising!

If you haven’t tried it yet, you should. It’s extremely easy to install and doesn’t even require a reboot just follow these simple instructions.

Read More “HTML5 Embedded Host Client, this looks promising”

Power off an unresponsive VM using ESXTOP

Just recently we have some hardware issues in our primary datacenter and during that time had a few VM’s that became unresponsive and needed to get them back online. The VM’s had stopped responding to the normal vSphere commands to reboot, shutdown or even restart. I didn’t want to power cycle the entire ESXi host and instead just power off an unresponsive VM.

Here is a quick and easy way to do just that using ESXTOP.

Read More “Power off an unresponsive VM using ESXTOP”

vCenter server service won’t start after upgrading 5.5 to Update 3b

Just a quick heads up! Over the last week I’ve been upgrading our vCenter servers from version 5.5 to the most recent 5.5 Update 3b version and have ran into a small hiccup.

The upgrade of SSO, Web Client, Inventory Service and even vCenter server all went as expected without any issues. Then I rebooted the vCenter server and after the reboot noticed that the vCenter server service hadn’t started and when I tried to start it manually I then received the following error:

Error 1053: The service did not respond to the start or control request in a timely fashion.

Read More “vCenter server service won’t start after upgrading 5.5 to Update 3b”

Another CBT bug found in VMware ESXi 6.0

VMware

VMware just published KB 2136854 regarding a new bug found in ESXi 6.0 that causes virtual machine backups, which use Changed Block Tracking (CBT), to be inconsistent. VMware says the cause of the issue is this:

This issue occurs due to an issue with CBT in the disklib area, this causes the change tracking information of I/Os that occur during snapshot consolidation to be lost. The main backup payload data is never lost and it is always written to the backend device. However, the corresponding change tracking information entries which occur during the consolidation task are missed. Subsequent QueryDiskChangedAreas() calls do not include these missed blocks, hence a backup based on this CBT data is inconsistent.

Read More “Another CBT bug found in VMware ESXi 6.0”

How to unlock vRealize Orchestrator default account

vrealize orchestrator account locked out

Earlier this month I posted how on how to fix the weak ephemeral Diffie-Hellman key issue in VMware vRealize Orchestrator 6.0.2 appliance. Another issue I’ve ran into is how to unlock vRealize Orchestrator default account. It seems you can lock the account after to many failed attempts but once locked the account does not seem to unlock… or at least for me after waiting more than a couple hours.

Luckily unlocking the vRealize Orchestrator default account is pretty straight forward.

Read More “How to unlock vRealize Orchestrator default account”

VMware vSphere 6.0 Update 1 available

VMware has released vSphere 6.0 Update 1, ESXi 6.0 U1 and updates for several other VMware products:

Read More “VMware vSphere 6.0 Update 1 available”

How to fix vRealize Orchestrator 6 appliance, weak ephemeral Diffie-Hellman key

vrealize orchestrator chrome error

I’ve recently deployed the vRealize Orchestrator appliance (6.0.2) and noticed right away that my default browser Firefox, would not load the Orchestrator appliance web panel. Firefox always complained about a weak Diffie-Hellman key.

An error occurred during a connection to ip-address:8281. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key)

At the time I simply ignored it and just tried Google Chrome which it worked fine. That was until the latest release also broke with the same type of error message:

Server has a weak ephemeral Diffie-Hellman public key“.

I now had a problem and contacted VMware support, below is the very easy fix to make vCO 6 work in both the latest version of Firefox and Chrome!

Read More “How to fix vRealize Orchestrator 6 appliance, weak ephemeral Diffie-Hellman key”

VMware Workstation 12 Pro Released

VMware has just released a new version of Workstation in VMware Workstation 12 Pro. Workstation 12 Pro provides full support for Windows 10, including features such as Cortana and universal applications. As well as even larger virtual machines with up to 16 vCPU’s and 64GB of memory. Workstation 12 Pro even supports 4K displays and DirectX 10 and OpenGL 3.3

You can even seamlessly drag and drop virtual machines between your PC and your internal cloud running vSphere, ESXi or another instance of Workstation. In addition, easily connect to vCloud Air and upload, run, and view virtual machines right from the Workstation 12 Pro interface.

Read More “VMware Workstation 12 Pro Released”