WilliamLam.com

Search Results for: synology

Ultimate Lab Resource for VCF 9.0

by // 6 Comments

Since the release of VMware Cloud Foundation (VCF) 9.0, you may have seen a few blogs from me ?

To help folks digest all the resources for deploying and running VMware Cloud Foundation (VCF) 9.0 in a lab environment, I have put this blog post together to summarize the various considerations and/or tweaks that will allow you to get the full experience of VCF 9.0 for non-production/commercial usage.

Make sure you to bookmark this page as I will continue to add new updates, I still have a number of backlog items to share ... but for now that will have to wait as I am in need of some PTO, which starts tomorrow! ?

[Read more...]

vCenter Identity Federation with Authelia

by // Leave a Comment

Gotta catch them all!? ?

Looks like I will be adding another identity provider to my existing collection of IdPs (Authentik, KeyCloak, Synology SSO, Pocket ID, Zitadel and Kanidm) that can be used with vCenter Server and VMware Cloud Foundation (VCF) Identity Federation.

Authelia is another free and self-hosted IdP solution, which also supports Time-based one-time password (TOTP) out of the box and all configurations are managed in a couple of configuration files as there is no administrative web UI.

[Read more...]

vCenter Server Identity Federation with Kanidm

by // 1 Comment

Looks like I will be expanding my collection of identity providers (Authentik, KeyCloak, Synology SSO, Pocket ID and Zitadel) that can be used with vCenter Server and/or VMware Cloud Foundation (VCF) Identity Federation!

Fellow colleague, Eric Gray just made me aware of another self-hosted IdP called Kanidm, which he had success setting up and thought I might be interested.


Kanidm is another basic free IdP that allows users to easily setup to play with vCenter Server and/or VCF Identity Federation, but what makes this IdP unique is that it is completely managed using a CLI, there is no web interface like ones listed above.

Additionally, Kanidm supports both traditional username/password authentication and modern passkeys. If you decide to use traditional passwords, Kanidm does require setting up Time-based One-Time Passwords (TOTP) using something like Google Authenticator and provides another factor of authentication, which is pretty neat!

[Read more...]