WilliamLam.com

Quick Tip - Silent installation of the VMware Client Integration Plugin (CIP)

by // 9 Comments

After answering this question internally, I thought I would also share the details externally for anyone that might also be interested in automating the silent installation of the VMware Client Integration Plugin (CIP). Below are the commands to run for both Windows as well as Mac OS X (be sure to replace the filenames with the paths to your files).

Windows:

C:\Users\lamw\Desktop\VMware-ClientIntegrationPlugin-6.0.0.exe /s /v/qn /l C:\Users\lamw\Desktop\cip.log

Mac OS X:

hdiutil attach -nobrowse ~/Desktop/VMware-ClientIntegrationPlugin-6.0.0.mac64.dmg
sudo installer -pkg /Volumes/VMware-ClientIntegrationPlugin-6.0.0.mac64.dmg/VMware\ Client\ Integration\ Plug-in.pkg -target /
hdiutil detach /Volumes/VMware-ClientIntegrationPlugin-6.0.0.mac64.dmg

Someone had commented on Twitter that it would be great to have a public URL for the CIP installer for automation. In fact, such a URL does exists 🙂 If you open a browser to your vSphere Web Client login page and you do not have CIP installed, there is a link at the lower left hand corner. The URL provided is one that is hosted on VMware and always points to the latest version.

  • http://vsphereclient.vmware.com/vsphereclient/VMware-ClientIntegrationPlugin-6.0.0.exe
  • http://vsphereclient.vmware.com/vsphereclient/VMware-ClientIntegrationPlugin-6.0.0.mac64.dmg

You also have the option to download a specific version. For example, the download URL for Build 299404 would look like the following:

  • http://vsphereclient.vmware.com/vsphereclient/2/9/9/4/0/4/1/VMware-ClientIntegrationPlugin-6.0.0.exe
  • http://vsphereclient.vmware.com/vsphereclient/2/9/9/4/0/4/1/VMware-ClientIntegrationPlugin-6.0.0.mac64.dmg

What is the VMware Client Integration Plugin (CIP)?

by // 3 Comments

If you are a consumer of the vSphere Web Client, you might have seen something called the VMware Client Integration Plugin (CIP) and you may have even downloaded it from bottom of the vSphere Web Client page and installed it on your desktop.

Screen Shot 2015-12-10 at 6.18.30 AM
However, have you ever wondered what CIP is actually used for? I know I personally have even though I have a general idea of what CIP provides, I have always been curious myself about the technical details. Recently there have been a few inquiries internally, so I figure I might as well do some research to see what I can find out.

The VMware CIP is actually a collection of different tools that are bundled together into a single installer that is available for either Microsoft Windows or Apple Mac OS X (Linux is being worked on). These tools provide a set of capabilities that are enabled when using the vSphere Web Client and below is a diagram of the different components included in CIP.

vmware-cip

  • ovftool - Standalone CLI utility used to manage import/export of OVF and OVA images
  • Windows Authentication - Allows the use of SSPI when logging in from the vSphere Web Client
  • Remote Devices - Connecting client side devices such as a CD-ROM, Floppy, USB, etc. to VM
  • File Upload/Download - Datastore file transfer
  • Content Library - Operations related to the Content Library feature such as import and export
  • Client Side Logging/Config - Allows for writing non-flash logs + vSphere Web Client flash and logging settings

In addition to capabilities shown above, CIP is also used to assist with basic input validation when deploying the vCenter Server Appliance deployment using the new guided UI installer.

Internally, CIP is referred to as the Client Support Daemon or CSD for short. Prior to vSphere 6.0 Update 1, CIP ran as a browser plugin relying on the Netscape Plugin Application Programming Interface (NPAPI). In case you had not heard, Google Chrome and other popular browsers have all recently removed support for NPAPI based plugins in favor of better security and increased speed improvements. Due to this change, CIP had to be re-written to no longer rely on this interface and starting with vSphere 5.5 Update 3a and vSphere 6.0 Update 1, the version of CIP that is installed uses this new implementation. CIP is launched today via a protocol handler which is a fancy term for a capability web browsers that allows you to run a specific program when a link is open.

One observation that some customers have made including myself when installing the CIP is that an SSL Certificate is generated during the installation process. To provide the CIP services to the vSphere Web Client, a secure connection must be made to vSphere Web Client pages. To satisfy this requirement, a self-signed SSL Certificate is used and instead of pre-packaging an already generated certificate, one is dynamically created to ensure that no 3rd Party would have access to the private key and be able to access it from the outside.

The longer term plan is to try to move as much of the CIP functionality onto the server side as possible, although not everything will be able to move to the server side. For things like remote devices, it has already been moved to the Standalone VMRC which already provides access to the VM Console and being able to connect to client side devices makes the most sense. Hopefully this gives you a better understanding of what CIP provides and hint of where it is going in the future.

Here are some additional info that you might find useful when installing and troubleshooting CIP:

CIP Installer Logs:

  • Windows -

    %ALLUSERSPROFILE%\VMware\CIP\csd\logs

  • Mac OS X -

    /Applications/VMware Client Integration Plug-in.app/Contents/Library/data/logs

CIP Application Logs:

  • Windows -

    %USERPROFILE%\AppData\Local\VMware\CIP\csd\logs

  • Mac OS X -

    $HOME/VMware/CIP/csd/logs

vSphere Web Client / CSD Session Logs:

  • Windows -

    %USERSPROFILE%\VMware\CIP\ui\sessions

  • Mac OS X -

    $HOME/VMware/CIP/ui/sessions

CIP SSL Certificate Location:

  • Windows -

    %ALLUSERSPROFILE%\VMware\CIP\csd\ssl

  • Mac OS X -

    /Applications/VMware Client Integration Plug-in.app/Contents/Library/data/ssl

 

Quick Tip - Fix for CIP no longer functioning in vSphere Web Client after Chrome 45 update

by // 39 Comments

For those of you who recently updated to Chrome 45, which apparently I did as well or more likely it automatically did it for me. You may have noticed that the Client Integration Plugin (CIP) for the vSphere Web Client no longer function when you try to upload an OVA or trying to use the Windows Session Authentication feature. The latest release of Chrome has now completely disabled NPAPI support, but luckily there is a simple fix.

You simply just need to download and install the following new version of the CIP package for either Windows or Mac OS X and you will be able to restore the functionality that you once had which no longer relies on NPAPI. This fix applies to both a vSphere 6.0 and vSphere 6.0 Update 1 environment which I was able to test myself as I have both deployed. If you are still having issues after installing the update, make sure you clear your browser cache as the old plugin may still be cached. Some folks had to perform a reboot, especially if you have more than one user on the system which could still have existing running processes.

UPDATE (10/27/15) - For customers running vSphere 5.5.x, the NPAPI fix has just been released as part vCenter Server 5.5 Update 3a. The fix includes both a server side and client side component. This means to apply the fix, you MUST update BOTH the vCenter Server as well as the updated CIP which is provided when logging into the vSphere Web Client. For vSphere 5.0/5.1 customers, the only work around is by following this VMware KB 2114800.

I want to give a big shoutout to my buddy Blair who shared this KB with me as I was having issues after the Chrome update.

Client Integration Plugin for Windows:

Client Integration Plugin for Mac OS X

You can also find more details noted in this VMware KB 2130672. For vSphere 5.5 customers, a back port is currently being worked on but there is currently not an ETA. When is it released, the KB will be updated and you can subscribe to it for the announcement.