Quantcast
Channel: VMware Communities : Discussion List - All Communities
Viewing all 178257 articles
Browse latest View live

'Performance degradiation VMs tolerate' setting: based on which memory metric?

0
0

Hello

 

I am trying to find out on which memory metric the 'performance degradiation VMs tolerate' setting in the Admission Control menu is based on.

Let's do an example:

 

I have 10 ESXi hosts, each with 512 GB RAM, resulting in total 5 GB of RAM. Used memory in the cluster is 2.87 TB (If I sum up the memory consumed value on all VMs manually, I do get virtually the same amount of memory):

Some VMs do have reservations, most VMs don't. The total amount of reservations in the cluster is 1.2 TB.

 

Admission Control is configured like this:

 

Normally, I configure 'Host failures cluster tolerates' to five hosts, so 50 percent of my "stretched over two sites cluster" can fail. In this example let's configure this setting to six hosts. This results in this graphic:

 

OK above we see the gray shaded bar, these are my 60 % failover capacity. I also see the reserved memory in blue. So in this state, every VM with reservations of course receives its reservation and the rest of available memory (for the vms without or partially reservations) is the light gray bar.This is approximately (5TB*0.4 - 1.2 TB)  = 0.8 TB RAM.

 

From this it follows that

  • in the normal state (10 hosts available) the vms are using 2.87 TB (thereof  1.2 TB reserved) --> unreserved capacity occupied by all VMs: 1.67 TB
  • in a failover state (4 hosts available) the vms can only use 2 TB (thereof still 1.2 TB reserved) --> unreserved capacity occupied by all VMs: 0.8 TB

 

So in a failover state (4 hosts running), the vms without reservations do have to move closer together. But it seems, that there is still enough capacity and there is no warning that the running VMs utilization cannot satisfy the configured failover resources on the cluster. Although the vms have less memory available, there is not yet a performance degradiation!

 

OK, lets try with 'Host failures cluster tolerates' set to 7 hosts. Of course, the gray shaded bar is getting longer, the blue bar for reserved memory is the same and gap between - the non reserved memory) is getting very small, only approximately 0.3 TB. So now, after waiting a few minutes, the cluster is complaining about insufficient failover resources...

 

So I am curious which memory metric is used here to do the calculation. I don't think it is only memory active? Because a calculation based only on memory active seems to be a calculation too progressive in my opinion and with only taken memory active in consideration one can expect some performance degradiation. Is it probably memory active and a certain percentage as a buffer?

 

Does anyone know here more how this calculation works? Because I would like to have a feeling how my vms will perform in a failover state (apart from that the algorithm tells me that the vm's don't have memory issues and that "the same performance is guaranteed...")

 

Best regards

Roland


NSX-T - Do we need multiple T0 for multiple transport zones?

0
0

Hello all,

 

We have a NSX-T design question.

 

We would like to have 2 Transport Zones (one for our VM ESXi cluster and one for our PKS ESXi cluster) and 2 T1 (also one for VMs and one for containers).

 

With this design, do we need to have 2 T0 routers, or could we have only one T0 router? Each T1 will manage it's own /16 subnet, but we would like to route everything to only 1 T0. To have only 1 T0 would also reduce traffic on the physical world between VMs and containers.

 

And if we can have 1 T0 router, do we need one EDGE cluster, or do we need 2 (or more) clusters?

 

Many thanks for your help on this.

 

Regards,

 

Renaud

User Account for Composer failing credential validation – lots of audit failures

0
0

1) In the Security log on our vCenter server we see an Event 4776 Audit Failure entry for the service account used for Composer, which is then followed by a successful logon for the service account. This is occurring every few seconds to every few minutes.

 

2) Additionally, in Horizon Administrator on both connection servers, we get the following warning once or twice a day:

 

vCenter at address https://VCENTER.XXXX.YYYY.EDU:443/sdk has invalid credentials

 

Everything in Horizon seems to be working fine, so I'm not sure if I need to be concerned with these or not.

 

- I’ve re-entered the credentials for the composer service account in the Horizon console (via View Configuration – Servers - vCenter Servers) on both connection servers. I can log into vSphere using that service account successfully.  Rebooted vCenter server so all VMware services were restarted. The service account has Administrator role in vSphere and local admin rights on the server.

 

Environment: 

- Horizon 7.3.2 - Two connection servers, one for internal use, one for external user paired with a security server.

- vSphere 6.5

 

In the vCenter server Security log:

Log Name: Security

Source: Microsoft-Windows-Security-Auditing

Date: 2/20/2018 4:23:28 PM

Event ID: 4776

Task Category: Credential Validation

Level: Information

Keywords: Audit Failure

User: N/A

Computer: VCenter.xxxx.yyyy.edu

Description:

The computer attempted to validate the credentials for an account.

 

Authentication Package:    MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

Logon Account:  service_Composer

Source Workstation:   VCENTER

Error Code:     0xC0000064

 

This is immediately followed by successful log on for the same service account:

 

Event ID:      4648

Log Name: Security

Source: Microsoft-Windows-Security-Auditing

Date: 2/20/2018 4:23:28 PM

Event ID: 4648

Task Category: Logon

Level: Information

Keywords: Audit Success

User: N/A

Computer: VCenter.xxxx.yyyy.edu

Description:

A logon was attempted using explicit credentials.

 

Subject:

     Security ID:          SYSTEM

     Account Name:         VCENTER$

     Account Domain:       OUR_DOMAIN

     Logon ID:       0x3E7

     Logon GUID:           {00000000-0000-0000-0000-000000000000}

 

Account Whose Credentials Were Used:

     Account Name:         service_Composer

     Account Domain:       OUR_DOMAIN

     Logon GUID:           {00000000-0000-0000-0000-000000000000}

 

Target Server:

     Target Server Name:   localhost

     Additional Information:    localhost

 

Process Information:

     Process ID:           0x870

     Process Name:         D:\Program Files (x86)\VMware\VMware View Composer\SviWebService.exe

 

Network Information:

     Network Address: -

     Port:           -

 

This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials.  This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command.

 

 

Event ID:      4624

Log Name: Security

Source: Microsoft-Windows-Security-Auditing

Date: 2/20/2018 4:23:28 PM

Event ID: 4624

Task Category: Logon

Level: Information

Keywords: Audit Success

User: N/A

Computer: VCenter.xxxx.yyyy.edu

Description:

An account was successfully logged on.

 

Subject:

     Security ID:          SYSTEM

     Account Name:         VCENTER$

     Account Domain:       OUR_DOMAIN

     Logon ID:       0x3E7

 

Logon Type:                8

 

Impersonation Level:       Impersonation

 

New Logon:

     Security ID:          OUR_DOMAIN\service_Composer

     Account Name:         service_Composer

     Account Domain:       OUR_DOMAIN

     Logon ID:       0x9A7BCD9

     Logon GUID:           {00000000-0000-0000-0000-000000000000}

 

Process Information:

     Process ID:           0x870

     Process Name:         D:\Program Files (x86)\VMware\VMware View Composer\SviWebService.exe

 

Network Information:

     Workstation Name:     VCENTER

     Source Network Address:    -

     Source Port:          -

 

Detailed Authentication Information:

     Logon Process:        Advapi 

     Authentication Package:    MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

     Transited Services:   -

     Package Name (NTLM only):  -

     Key Length:           0

 

This event is generated when a logon session is created. It is generated on the computer that was accessed.

 

The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

 

The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).

 

The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.

 

The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

 

The impersonation level field indicates the extent to which a process in the logon session can impersonate.

 

The authentication information fields provide detailed information about this specific logon request.

     - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.

     - Transited services indicate which intermediate services have participated in this logon request.

     - Package name indicates which sub-protocol was used among the NTLM protocols.

     - Key length indicates the length of the generated session key. This will be 0 if no session key was requested.

 

 

 

Event ID:      4672

Log Name: Security

Source: Microsoft-Windows-Security-Auditing

Date: 2/20/2018 4:23:28 PM

Event ID: 4672

Task Category: Special Logon

Level: Information

Keywords: Audit Success

User: N/A

Computer: VCenter.xxxx.yyyy.edu

Description:

Special privileges assigned to new logon.

 

Subject:

     Security ID:          OUR_DOMAIN\service_Composer

     Account Name:         service_Composer

     Account Domain:       OUR_DOMAIN

     Logon ID:       0x9A7BCD9

 

Privileges:           SeSecurityPrivilege

                SeTakeOwnershipPrivilege

                SeLoadDriverPrivilege

                SeBackupPrivilege

                SeRestorePrivilege

                SeDebugPrivilege

                SeSystemEnvironmentPrivilege

                SeImpersonatePrivilege

 

 

Vpxd log from vCenter server:

  1. For the Event ID 4776 audit failures, no errors are listed in the vpxd log for the audit failure times shown in event viewer.

 

    2.For the warning “vCenter at address https://VCENTER.XXXX.YYYY.EDU:443/sdk has invalid credentials”  the vpxd logs has entries such as

 

2018-02-22T06:00:24.370-07:00 info vpxd[10248] [Originator@6876 sub=vpxLro opID=4571102e] [VpxLRO] -- BEGIN lro-221825 -- SessionManager -- vim.SessionManager.login -- 52e0c5f1-f27b-0e0b-b161-e9adf5b8f4e0

 

2018-02-22T06:00:24.372-07:00 error vpxd[10248] [Originator@6876 sub=[SSO] opID=4571102e] [UserDirectorySso] AcquireToken exception: class SsoClient::CommunicationException(An established connection was aborted by the software in your host machine)

--> [context]zKq8NBMEAAAABCFDTbwAddnB4ZAAASi0fdm1hY29yZS5kbGwAAACHBgDesAYAtEECAdEkAnNzb0NsaWVudC5kbGwAAVRLBAIgaQZNU1ZDUjEyMC5kbGwAAm3jBQODKgludGRsbC5kbGwAAREfAgHSwgEE0HUQdnB4ZC5leGUABNb4cAS/8nAEG0pwBSfUDnZpbS10eXBlcy5kbGwABufcBHZtb21pLmRsbAAEdvEMBH+oCwTh3gsEzaMLBKbLCwCraBgAnHgYAIkLIgJ/TwICJlECB9ITAEtFUk5FTDMyLkRMTAAD9FQB[/context]

 

2018-02-22T06:00:24.375-07:00 error vpxd[10248] [Originator@6876 sub=User opID=4571102e] Failed to authenticate user <Our_Domain\service_Composer

 

2018-02-22T06:00:27.376-07:00 info vpxd[10248] [Originator@6876 sub=Default opID=4571102e] [VpxLRO] -- ERROR lro-221825 -- SessionManager -- vim.SessionManager.login: vim.fault.InvalidLogin:

--> Result:

--> (vim.fault.InvalidLogin) {

-->    faultCause = (vmodl.MethodFault) null,

-->    faultMessage = <unset>

-->    msg = ""

--> }

--> Args:

-->

--> Arg userName:

--> "Our_Domain\service_Composer"

--> Arg password:

--> (not shown)

-->

--> Arg locale:

-->

 

 

Connection Server logs:

 

1) For the warning “vCenter at address https://VCENTER.XXXX.YYYY.EDU:443/sdk has invalid credentials”  the  connection server log has entries such as:

 

2018-02-22T06:00:26.937-07:00 ERROR (10B4-16B0) <VCHealthUpdate> [ServiceConnection25] Invalid VC login. Check username and password for VirtualCenter at https://VCENTER.XXXX.YYYY.EDU:443/sdk

2018-02-22T06:01:33.210-07:00 INFO  (10B4-1AE0) <CacheRefreshThread-https://VCENTER.XXXX.YYYY.EDU:443/sdk> [CacheManager] Populating temporary stores for cache from VC Our_Domain\service_Composer@https://vCenter.xxxx.yyyy.edu:443/sdk

2018-02-22T06:01:33.302-07:00 INFO  (10B4-1AE0) <CacheRefreshThread-https://VCENTER.XXXX.YYYY.EDU:443/sdk> [CacheManager] Temporary stores for cache populated for VC Our_Domain\service_Composer@https://vCenter.xxxx.yyyy.edu:443/sdk

 

And the application event log on the connection server shows:

 

BROKER_VC_STATUS_CHANGED_INVALID_CREDENTIALS

vCenter at address https://VCENTER.XXXX.YYYY.EDU:443/sdk has invalid credentials

 

Attributes:

                Node=OUR_DOMAINPCON.Our_Domain.YYYY.edu

                Severity=WARNING

                Time=Thu Feb 22 06:00:26 MST 2018

                VCAddress=https://VCENTER.XXXX.YYYY.EDU:443/sdk

                Module=Broker

                Source=com.vmware.vdi.broker.health.l

                Acknowledged=true

 

Thank you for any assistance.

Error in UI: Unable to fetch inventory information for HW GW during "Manager Hardware Bindings"

0
0

Hi ,

      Does anybody knows at what scenario this error is displayed on NSX vSphere UI.

my Physical Switch(HW Gateway)(New Switch NOT yet certified by VMWare -In POC Stage) is connected to NSX controller and is UP and Running.

 

During the "Hardware Bindings" an Error is Seen like: Unable to fetch inventory information for "HW Gateway".

Can anyone tell when does this error is ideally seen.

 

 

Thanks,

Saroj

Need to know: "vCenter lookup service address"

0
0

Hello,

 

I´m trying to configure a vSphere Replication Server and I need to know the lookup service addres.

 

I found that usually is this:

https://FQDN:7444/lookupservice/sdk

 

But I tried and no way... Can i execute any command from the vCenter (Windows in this case) to let me know this address?

 

Thanks

 

Automatic report troubleshooting in 3.6.1

0
0

Usage meter sends reports based on the day of the month. I am having issues getting the reports to send automatically. Troubleshooting is tough because when i make a change i need to increment the day by 1 day so that it runs again that night.

 

Is there a way to attempt to send the automatic reports manually without relying on waiting a day?

 

I know alert emails are working fine and i know i can hit the test button that is working fine. On the email tab under manage i can even click "save" and "send email" and  I get those emails. I dont ever get "automatic reports" containing the attachments and i want to test this function without waiting a day each time i make a change.

Delete invalid virtual machine entry in web client

0
0

Hello,

 

in a standalone esxi 6.5, during the import of a vm via web client I stopped it, so now I have an entry in the web client that point to a vmx file that doesn't exists: in the list of virtual machines in the web client I have, as virtual machine name, the path of the vm that doen't exists and in Status field the "invalid" value.

 

How I can delete the entry? Is it possible?

 

I attach an image with 2 vm, the one invalid and one valid:

 

esxi 6.5 webclient invalid entry.png

 

--

Regards

How to Get Adapter Type from Network Adapter

0
0

I want to get Adapter Type (VMXNET 3 / E1000) from network adapter with vRO.

I search a lot in this forum and in the internet.

Thanks a lot

 

 

Screenshot - 2018-12-10 , 14_13_24.png


UEM Still Needed with Writable?

0
0

I have a situation and trying to figure out the best method moving forward so any input would be greatly appreciated. 

A little background.  I have recently upgraded to the below versions to better support O365 and Windows 10.   

 

App Vol 2.14, UEM 9.5, Horizon 7.6. 

 

With the recent deployment of O365 it was recommended to give all users Writable Profiles because of the need to enable Outlook caching.  This allows it to cache only the first time.  I leveraged UEM quite a lot but not sure it's needed anymore.  Looking for some advice on how I should still use UEM.  Will there be a conflict if both are used?  Should I remove my applications in UEM since the application data will now be backed up with the writable profile?  If you have used Writable volumes before then you know they have to be deleted sometimes due to weird issues which then loses all of the users data.  I'm thinking that UEM would be handy in that case since it will have all of the IE cache and application stuff saved with the roaming profile. 

 

Any ideas? 

Cannot login to Skyline can anyone help

0
0

Hi

I get the screen below when trying to login for the first time can anyone help

 

T

 

PowerCLI Script for Vsphere replication Status

can't copy an vm from one esxi hypervisor to another

0
0

I tried to copy a virtual machine from one esxi hypervisor to another (i shut down the source vm prior to this). after doing so i tried to start the vm on the new hypervisor.  as usually i got the question if i copied or moved to machine. after clicking  the "copied" option, I got an error message that the hypervisor could not find the HDD  '/vmfs/volumes/5bc99a5c-04297743-4306-509a4c929e71/edoosys/edoosys/edoosys-000001.vmdk' or one of it's snapshot files could not be found. Indeed the file 'edoosys-000001-delta.vmdk' was missing. I copied it again to the datastorage, but the hypervisor keeps deleting this file and complaining the the vmdk is incomplete.

Value mismatch between Get-AdvancedSetting output and esxcfg-advcfg output

0
0

VMware PowerCLI 11.0.0 Build 10380590

VMware ESXi 6.5.0 build-10390116

vSAN 6.6.1

 

The values of parameters in "Advance System setting" look different in vSphere Web Client, esxcfg-advcfg, esxcli (get-esxcli; v2) and PowerCLI.

 

 

The output of esxcfg-advcfg --get /VSAN/ClomRepairDelay shows 60.

esxcfg-advcfg.jpg

 

From PowerCLI, using esxcli (get-esxcli; v2), the integer value shows 60.

esxcliv2.jpg

 

 

But if I run the following PowerCLI script, the CSV output shows 360, which used to be the old value. It doesn't reflect the new value (60).

get-advset.jpg

powerCLI.jpg

The vSphere web client also shows 360, which is incorrect according to esxcli.

GUI.jpg

 

Does anyone have any idea what's gone wrong here?

VCenter 6.7 refuses approved host CPU ID added to EVC cluster

0
0

VSphere 6.7 latest update.  Violating host:  Dell R620 with dual Intel(R) Xeon(R) CPU E5-2670 0 @ 2.60GHz

 

We would like to add a lab host with dual Intel(R) Xeon(R) CPU E5-2670 0 @ 2.60GHz (Sandy Bridge) to a intel Nehalem compatible cluster.

 

The cluster's list of compatible CPUs are listed as:

Intel® "Nehalem" Generation (Xeon® Core™ i7)

Intel® "Westmere" Generation (Xeon® 32nm Core™ i7)

Intel® "Sandy Bridge" Generation

Intel® "Ivy Bridge" Generation

Intel® "Haswell" Generation

Future Intel® processors

 

The host to be added is in maintenance mode.  However the process throws the following error message:

 

The host's CPU hardware does not support the cluster's current Enhanced vMotion Compatibility mode.

The host CPU lacks features required by that mode.

com.vmware.vim.vmfeature.cpuid.ssbd

See KB 1003212 for more information.

Host is of type: vendor intel family 0x6 model 0x2d

 

I don't find any details about the specific CPUid field mentioned above.  But I hope that someone can pop in to indicate if there is a workaround to allow my Sandy Bridge into this Nehalem compatible EVC cluster.

 

regards Tor

Hi, We use Persona at the moment with Horizon vew with Automated Desktop Pools, Dedicated linked clones on Wyse P25 zero clients. It is a small environment (less than 30 users) Each user has a dedicated vmware machine where they can install programs (when

0
0

Hi, We use Persona at the moment with Horizon vew with Automated Desktop Pools, Dedicated linked clones on Wyse P25 zero clients. It is a small environment (less than 30 users) Each user has a dedicated vmware machine where they can install programs (when we saupply admin password) and make their own shortcuts and save docs on the desktop etc, as much like a PC as possible. I am trying to understand UEM and am not sure if we can replicate this type of scenorio in UEM? Also is it possible to install programs on the fly if a user requests it? for example if a user needs a PDF converter prog can we quickly download and install the program on the machine as with a PC etc? Thanks in advance


Migrate placeholder VM from cluster A to cluster B

0
0

Placeholder VM is located under the resource pool in the cluster A and the task is migrate the placeholder VM to the resource pool in the cluster B. Is vmotion supported for this operation? And how to change default location for creating new placeholder vm (when I create new protection group in SRM placeholder vm is created under the resource pool in the cluster A).

Kernel Security Check Failure after Updating Host to Windows 10 Build 18290 [Skip Ahead]

0
0

The computer just crashes wish the Green Screen of Death showing the error KERNEL_SECURITY_CHECK_FAILURE anytime I try to run a Virtual Machine, no matter which guest operating system I try to run.

 

Same problem with VMWare Workstation 14 and 15.

 

20181201_221028.jpg

AntiVirus Agent vs Agentless

0
0

Does anyone have any experience running A/V software from within the VDI with a full Agent in the Guest PC, or do you all use agentless and NSX?

Removal of an inactive Skyline collector?

0
0

My initial Skyline deployment failed and I deleted the appliance. I have since re-deployed successfully. How can I unregister my old inactive Skyline collector?

Thanks

 

Tony

Windows 10 Enterprise Edition Installation Error - "Windows cannot find the Microsoft Software License Terms"

0
0

Running wmware 11.

Installing Windows 10 Enterprise Edition (evaluation copy from Microsoft)

Windows 10 Enterprise Edition Installation Error - "Windows cannot find the Microsoft Software License Terms"

Any ideas?

Tried downloading again.  same error.

Viewing all 178257 articles
Browse latest View live




Latest Images