WilliamLam.com

  • About
    • About
    • Privacy
  • VMware Cloud Foundation
    • VMware Cloud Foundation 9.1
    • VMware Cloud Foundation 9.0
  • VKS
  • Homelab
    • Hardware Options
    • Hardware Reviews
    • Lab Deployment Scripts
    • Nested Virtualization
    • Homelab Podcasts
  • VMware Nostalgia
  • Apple

VCF 9.1.1 - Setting up VCF Private AI Services (PAIS) using Artifact Mirroring Tool (AMT) for Air-Gapped Environments

09.09.2026 by William Lam // Leave a Comment

With the rising cost of consuming AI services in the public cloud, the availability of powerful open-weight models, and growing concerns around security and data sovereignty, there was certainly a lot of interest from attendees at last week’s VMware Explore in running their own AI models within their VCF Private Cloud environments.

The timing could not have been better with the release of VMware Cloud Foundation (VCF) Private AI Services (PAIS) 3.0, which is part of the broader VCF Private AI Cloud offering and perfectly complements the latest VCF 9.1.1 release. VCF 9.1.1 also introduces a number of new AI capabilities for infrastructure administrators, including the new AI Assistant for VCF, which can leverage the same PAIS infrastructure to consume AI models running directly within your VCF Private Cloud environment.

Some key highlights in PAIS 3.0 include the new Model-as-a-Service capability, which can now be shared across different vSphere Namespaces to better utilize precious GPU resources, the ability to consume PAIS services directly from vCenter Server in addition to VCF Automation (VCFA), and support for built-in local identity for streamlined proof-of-concepts (POC)/lab deployments.

While not new, the Private AI Services (PAIS) Artifact Mirroring Tool (AMT) provides an easy way to download all the required container images for non-internet-connected or air-gapped environments. A typical workflow would involve inspecting the various deployment YAML manifests, using the imgpkg utility to export the required container images, and then manually updating the deployment manifests to reference your local container registry, hoping that everything works as expected. Since this was my first time using PAIS AMT, I thought it would be useful to document the workflow for those interested in trying out PAIS in their lab environment.

[Read more...]

Categories // Private AI Services, VMware Cloud Foundation Tags // VCF 9.1.1

Configuring OIDC with PKCE in Keycloak for VCF Private AI Services

08.26.2026 by William Lam // Leave a Comment

I have taken a short hiatus from playing with my NVIDIA RTX 4000, which fits perfectly inside a Minisforum MS-A2 and is what I use to run VMware Cloud Foundation (VCF) 9.1. While redeploying my environment to test an upcoming release of VCF Private AI Services (PAIS), I was reminded that the deployment requires an OIDC provider that supports the Authorization Code grant flow with PKCE (Proof Key for Code Exchange).

When I originally deployed PAIS with VCF 9.0, I used Authentik as my identity provider (IdP). With my VCF Infrastructure Services (VIS) Appliance which provides a number of services including Keycloak as an OIDC provider, I wanted to figure out the required Keycloak configuration to satisfy the PAIS OIDC requirements, especially as this can help accelerate Lab/PoC deployments.

After some trial and error, and with the help of OpenAI Codex to debug my live environment, I now have Keycloak successfully configured with PAIS, along with a script to generate the access token required to interact with a PAIS Model Endpoint! 🥳

[Read more...]

Categories // Private AI Services, VMware Cloud Foundation Tags // PAIS, VCF 9.1

Modding an NVIDIA RTX 4000 Ada (20GB VRAM) into Minisforum MS-A2

10.08.2025 by William Lam // 5 Comments

The Minisforum MS-A2 has been my go to platform for running an optimized and fully functional VMware Cloud Foundation (VCF) 9.0 lab environment. From vSAN ESA to NSX VPC to vSphere Kubernetes Service to VCF Automation to Data Services Manager, it runs it all!

Over the past couple of weeks, I had also been experimenting with running VMware Private AI Services (PAIS) using the MS-A2. For those with an eye for detail, may have noticed that the NVIDIA GPU requirement was actually being satisfied by an ASUS NUC 14 Performance, which includes an NVIDIA GeForce RTX 4070 (8GB VRAM). The ASUS NUC was purely for validation and prototyping purposes to ensure that I could actually run PAIS before investing in a more capable and certainly more expensive NVIDIA GPU 🤑

One of the lesser known capabilities of the MS-A2 is the ability to add a half-height PCIe device and from the very beginning when I had first heard about the MS-A2, my plan and hope was to be able to add an NVIDIA GPU to the system!

[Read more...]

Categories // Private AI Services, VMware Cloud Foundation Tags // Minisforum, VCF 9.0

  • « Previous Page
  • 1
  • 2
  • 3
  • 4
  • 5
  • Next Page »

Search

Thank Author

Author

William is Distinguished Platform Engineering Architect in the VMware Cloud Foundation (VCF) Division at Broadcom. His primary focus is helping customers and partners build, run and operate a modern Private Cloud using the VMware Cloud Foundation (VCF) platform.

Connect

  • Bluesky
  • Email
  • GitHub
  • LinkedIn
  • Reddit
  • RSS
  • Twitter
  • Vimeo

Recent

  • VCF Agentic AI Hub (Code Assist) MCP Server Fling 10/05/2026
  • Automate Inventory of vSphere Supervisor Clusters & vSphere Kubernetes Service (VKS) Guest Clusters 10/02/2026
  • VCF 9.1.1 - OCuLink External Graphics (eGPU) Dock with integrated PSU for GPU Passthrough with VKS 10/01/2026
  • VCF 9.1.1 - Single ESX Host for VCF Fleet, VCF Workload Domain or VCF Cluster 09/30/2026
  • Bypassing Minimum Unique Flows & Metric Collection Period for vDefend Security Services Platform (SSP) 5.2 Lab Deployments 09/28/2026
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.

To find out more, including how to control cookies, see here: Cookie Policy

Copyright WilliamLam.com © 2026

Loading Comments...