WilliamLam.com

  • About
    • About
    • Privacy
  • VMware Cloud Foundation
  • VKS
  • Homelab
    • Resources
    • Nested Virtualization
  • VMware Nostalgia
  • Apple

vSAN ESA hardware mock VIB for physical ESXi deployment for VMware Cloud Foundation (VCF)

02.03.2025 by William Lam // Leave a Comment

Several weeks back I had shared a solution in which you can install a hardware mock VIB for Nested ESXi when using vSAN Express Storage Architecture (ESA) and VMware Cloud Foundation (VCF) to work around the vSAN ESA certified disks pre-check validations.


While the majority of my testing uses Nested ESXi, I have recently been deploying a physical VCF environment and I due to the limited number of NVMe devices, I wanted to use vSAN ESA for the VCF Management Domain but of course I would run into the same vSAN ESA certified disks pre-check validations, which would prevent the installer from proceeding.

I was hoping that I could also use the mocking method to allow my physical deployment but after some trial and error, I ran into inconsistent behaviors and after speaking with Engineering, I came to learn that the existing solution would also apply to a physical ESXi deployment as the physical storage controllers are made hidden by the mocking method and as long as you have vSAN ESA capable NVMe devices, it should allow vSAN ESA HCL pre-check to pass and continue with the installation!

[Read more...]

Categories // Automation, VMware Cloud, VSAN Tags // VMware Cloud Foundation, vSAN ESA

Quick Tip - Easily host VMware Cloud Foundation (VCF) Offline Depot using Python SimpleHTTPServer with Authentication

01.29.2025 by William Lam // Leave a Comment

In IT, you never know when you need to quickly spin up a web server for hosting files ... One of my favorite and super easy way to do this is by leveraging Python's SimpleHTTPServer which can immediately serve files within a directory with this 1-liner:

python -m http.server 9000

This certainly beats standing up a full blown web server if you just need GET and HEAD operations.

If you do not require authentication for serving your files, then this solution fits the bill perfectly! However, if you require authentication, then I typically resort to deploying a full blown web server and use .htaccess to manage users and passwords.

For customers that have a need to host a VMware Cloud Foundation (VCF) offline depot or any VMware-based offline depot, the solution will typically require a web server due to the authentication requirements. With that said, I have recently been using an alternative method, especially if you just need to quickly host some files for say an upgrade or deployment.

[Read more...]

Categories // Automation, VMware Cloud Foundation Tags // VMware Cloud Foundation

Passwordless login to vCenter Server or VMware Cloud Foundation (VCF) using Apple Face ID or Yubico YubiKey

01.28.2025 by William Lam // Leave a Comment

After spending some time playing with a couple of self-hosted Identity Providers solutions like Authentik and Keycloak for use with vCenter Server Identity Federation, I was curious about their Multi-Factor Authentication (MFA) support. Specifically, I was interested in their WebAuthn capabilities, which should allow me to use the popular Yubico YubiKey for passwordless authentication into my VMware environment. 😊


It is also important to mention, today vCenter Server Identity Federation officially supports the following IdPs listed below, all of which have support for the YubiKey (linked below is the official Yubico documentation for each IdP from Yubico's website):

  • Microsoft Active Directory Federation Service (ADFS)
  • Okta
  • Microsoft Entra ID
  • PingFederate

If you are already consuming one of these IdPs, you already have the ability to to use a YubiKey or other supported WebAuthn device for passwordless login! For VMware Cloud Foundation (VCF) customers, Identity Federation is also supported with the same IdPs as it relies on the VCF Management Domain vCenter Server, so this would allow you to login to SDDC Manager using YubiKey as an example.

I have never used a YubiKey before, so this was going to be a new adventure for me as well as playing with the WebAuthn protocol which is also new for me. I really like the UX of Authentik, which provides a seamless experience and with built-in support for SCIM, the choice was easy for the IdP I would choose for this experiment.

[Read more...]

Categories // VCSA, VMware Cloud Foundation, vSphere, vSphere 8.0 Tags // Authentik, Face ID, vCenter Server, VCSA, VMware Cloud Foundation, Yubikey

  • « Previous Page
  • 1
  • 2
  • 3
  • 4
  • …
  • 17
  • Next Page »

Search

Thank Author

Author

William is Distinguished Platform Engineering Architect in the VMware Cloud Foundation (VCF) Division at Broadcom. His primary focus is helping customers and partners build, run and operate a modern Private Cloud using the VMware Cloud Foundation (VCF) platform.

Connect

  • Bluesky
  • Email
  • GitHub
  • LinkedIn
  • Mastodon
  • Reddit
  • RSS
  • Twitter
  • Vimeo

Recent

  • Programmatically accessing the Broadcom Compatibility Guide (BCG) 05/06/2025
  • Quick Tip - Validating Broadcom Download Token  05/01/2025
  • Supported chipsets for the USB Network Native Driver for ESXi Fling 04/23/2025
  • vCenter Identity Federation with Authelia 04/16/2025
  • vCenter Server Identity Federation with Kanidm 04/10/2025

Advertisment

Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy

Copyright WilliamLam.com © 2025

 

Loading Comments...