WilliamLam.com

Quick Tip - How to deploy vCenter Server Appliance (VCSA) to legacy CPU without VMX Unrestricted Guest feature?

03.02.2023 by William Lam // 1 Comment

I recently had a customer reach out who was having an issue deploying the latest vCenter Server Appliance (VCSA) 8.x to an ESXi host that had a CPU that was no longer supported. After the VCSA OVA was uploaded by the VCSA (UI/CLI) installer, it fails to power on the VM with the following error message:

The Intel "VMX Unrestricted Guest" feature is necessary to run this virtual machine on an Intel processor

This problem is only observed with older legacy CPUs that do not support some of the modern CPU instructions that is expected by most workloads today. There is workaround for those that still wish to run on unsupported hardware, which may yield other unexpected behaviors, by adding a VM Advanced Setting monitor.allowLegacyCPU = TRUE

However, there is a chicken/egg problem that user was not able to add this setting before the VM was automatically powered on by the VCSA Installer.

[Read more...]

ESXi on palm size iKOOLCORE R1

03.01.2023 by William Lam // 17 Comments

Towards the end of 2022, I came to learn about a really fascinating mini PC called the R1, that is manufactured by a company called iKOOLCORE, which is based out of China. iKOOLCORE is described as specializing in open source firewall applications and the R1 adds some interesting networking possibilities as you will see shortly.

What really makes the R1 standout is that it comes equipped with four built-in ethernet adapters that is packaged into a super compact form factor with a pretty elegant design. In fact, the R1 might actually be the worlds smallest x86 system that literally fits in the palm of your hand! 😎

With the compact design and flexibility in networking, the R1 can certainly enable a number of interesting use cases for VMware Homelabs like running infrastructure systems (vCenter Server Appliance, VMware Cloud Builder, Active Directory, etc.) to networking services (DNS, DHCP, Firewall, VPN, etc). The R1 can also make for a great portable homelab that you can bring anywhere and not have to worry about space or noise and is powered simply through USB-PD (Power Delivery) which makes it even more friendly to travel with.

The only thing left was to get my hands on the R1 and thanks to the creator and designer of the R1, who goes by the name of Jackeroo, I was able to give the R1 a spin and explore it from a VMware Homelab perspective.

[Read more...]

Quick Tip - Multi-Factor Authentication (MFA), IP Address Range & Source Domain restrictions available for all VMware Cloud Services

02.28.2023 by William Lam // Leave a Comment

A lesser known capability of the VMware Cloud Console is that we support a number of different authentication policies that can be configured to provide more secure access and/or restrict who can access the different VMware Cloud Services like VMware Cloud on AWS, vSphere+, vSAN+, VMware Cloud Foundation+ or ANY other VMware Cloud Service for that matter within your VMware Cloud Organizations(s)!

To configure the authentication policies, you will need to have the Organization Admin role and then click on "View Organization" under your user name and then navigate to Organization->Authentication Policy. In addition to configuring Multi-Factor Authentication (MFA), users also have the option of configuring IP Address Range (allow/deny rules) and Source Domain (allow) restriction policies as shown in the screenshots below.