WilliamLam.com

How to install Windows 11 Arm with a vTPM using ESXi-Arm v1.11 

by // 7 Comments

The ESXi-Arm team has just released v1.11 of the ESXi-Arm Fling and one of the most exciting new capability is that you can now run Windows 11 Arm using an ESXi VM! There is also a TON of new features, so definitely check out the official ESXi-Arm Blog post announcement for more details.

One of the requirements for running Windows 11 Arm is the need for a Trusted Platform Module (TPM). Luckily, the latest ESXi-Arm v1.11 also now supports adding a vTPM to a guest and a requirement for setting this is a Key Management Server (KMS). Currently, the ESXi-Arm Fling is based on vSphere 7.0 (GA) and you can either use an existing compatible KMS (which you can look through VMware KMS Compatibility List) or for lab/testing purposes, you can use my KMIP Docker Container, which was also updated recently to support both amd64 and arch64 architecture.

For those interested in quickly setting this up and using my KMIP Docker Container for the KMS component, below is a quick walkthrough on how to set this up.

UPDATE (10/16/23) - vCenter Server may not be needed as you can use ESXi vSphere API to manually add encryption keys for use with vTPM, at least for x86. This same technique might also work with ESXi-Arm, for more information please see this blog post HERE.

Note: While vSphere 7.0 Update 2 introduced an embedded Native Key Provider (NKP) within vCenter Server, it can not be used with ESXi-Arm as both ESXi and vCenter must be running 7.0 Update 2 and the ESXi-Arm Fling is based on 7.0 GA.

[Read more...]

Using vSphere Lifecycle Manager (vLCM) to remediate Nested ESXi host with CPU on the host is not supported 

by // 4 Comments

If you are running a Nested ESXi VM on top of a physical ESXi host that does not have a supported CPU and you are using vSphere Lifecycle Manager (vLCM), the pre-check and/or remediation will fail due to the following error:

The CPU on the host is not supported by this image


The solution is actually quite simple and is similiar to what you had to do for your physical ESXi host by adding the ESXi kernel boot option allowLegacyCPU=true to successfully boot and install ESXi as recently explained in this blog post. To emulate this setup, I am using my trusty 2011 Apple Mac Mini which is running ESXi 8.0 with the kernel boot option and it is then running a Nested ESXi 7.0 Update 3g VM.

[Read more...]

NSX Alarms in vCenter Server using vSphere Events in vSphere 8

by // Leave a Comment

I recently learned about a really cool capability that is part of the NSX Easy Install feature that was initially introduced back in vSphere 7.0 Update 3, allowing administrators to easily deploy, configure and manage NSX directly from vCenter Server using the vSphere UI.

Here is a demo of this feature in action by fellow VMware colleague Vladimir Velikov, one of the Engineers who worked on the initial integration:

While reviewing the latest NSX 4.0.1.1 release notes, which adds support for vSphere 8 and DPU-based offloading, I found this little nugget at the very end of the What's New section under NSX vSphere UI Integration which states:

NSX Events Integrated in vCenter

🤩 whoa, the possibilities of this integration is immense, especially from an automation and event-driven standpoint ... In fact, this is something VMware Event Broker Appliance (VEBA) users have been asking for, a way to tap into the rich Alarms and Events provided by NSX, similiar to what vCenter Server provides out of the box with over 2000+ events.

[Read more...]