WilliamLam.com

vSphere 6.7 Update 2 add support back for Apple Mac Pro 6,1

by // Leave a Comment

Last fall, support for vSphere 6.7 Update 1 on the Apple Mac Pro 6,1 was removed by VMware after finding out an updated version of the Apple Firmware prevented ESXi from booting up properly after upgrading. After some investigation and troubleshooting with several customers, VMware Engineering found a solution to workaround the problem and that fix is included in the latest vSphere 6.7 Update 2 release. As mentioned in the original blog post, this could also impact Apple Mac Mini's, which are not officially supported by VMware, but the fix should also apply to the Mac Mini.

In addition, the VMware HCL will also be updated shortly to reflect support for both vSphere 6.7 Update 2 along with the existing vSphere 6.7 support. For customers that have been waiting for features in vSphere 6.7 Update 1, you can finally upgrade to the latest release to get all the new features and benefits of vSphere.

Aquantia 10GbE ESXi Driver for Apple 2018 Mac Mini

by // 30 Comments

I know many of you have been anxiously waiting for ESXi to be fully functional on the latest Apple Mac Mini (2018), unfortunately I do not have any news to share with you on that front. Without help from Apple, we are still challenged with Apple's new T2 chip, which prevents us from accessing the underlying NVMe device.

UPDATE (04/27/20) - Marvell (formally Aquantia) has just released an official Native ESXi Driver for their AQtion based network adaptors which you can find here and for the complete list of supported devices using this driver, please refer to the VMware HCL here.

Having said that, I do have some exciting news regarding the built-in 10Gigabit Ethernet adaptor on the 2018 Mac Mini. The 10GbE adaptor uses an Aquantia chipset, this is also the same chipset used in Apple's high end iMac Pro which was released earlier in the year. Over the past few weeks, I have been working with the Aquantia team and they have successfully ported over their open source Atlantic driver to a VMKlinux driver for ESXi, which they have published here. Although the local NVMe device can not be used to run any VMs, with the network fully enabled, customers could take advantage of this model and connect to IP-based storage to start leveraging the new Mac Mini platform.

The easiest way to incorporate the driver into the latest ESXi release is to use Image Builder within the vSphere H5 Client UI, below are the step-by-step instructions.

[Read more...]

Enhanced vCenter Server Audit Event & Logging in vSphere 6.7 Update 2

by // 9 Comments

A couple of years back I had published a detailed analysis on vCenter Server's Authentication (AuthN) and Authorization (AuthZ) from an auditing and logging standpoint. This has been the go to reference for many of our customers and the posts also includes a number of log samples which I have documented in the following Github repository.

In addition to serving as a reference for our customers, it has also helped our Product and Engineering teams understand where we still had some gaps and how we could improve the overall user experience. As hinted in the recently announced vSphere 6.7 Update 2 release, which will be available soon, there are number of new auditing enhancements that have been made to both vCenter Server and the vCenter Single Sign-On (SSO) service that I think customers will really appreciate.

"Real" client IP address in Events

When you look at a login or logout Event in vCenter Server today, you may have noticed the user's client IP Address is actually of the vCenter Server rather than the actual remote client's address and the reason for this is explained here. In vSphere 6.7 Update 2, the real client IP Address is now captured and is included in all successful login/logout and failed logins. This information can now enable administrators to easily identify unauthorized access and be able to quickly track down the systems initiating the connections.

[Read more...]