Introducing the Add CredSSP to a PowerShell script (vROCmdlet) workflow (SKKB1015)

Introduction Lab Environment Getting the vROC workflow Examining the tabs Examining the Settings Presentation Tab Examining the Connection Presentation Tab Use Case 1: Execute PowerShell command locally on the PShost against the PSHost itself Use Case 2: Invoke PowerShell command locally on the PSHost against remote computer Use Case 3: Invoke PowerShell command on remote Read more about Introducing the Add CredSSP to a PowerShell script (vROCmdlet) workflow (SKKB1015)[…]

Let’s vROC with vRO! (SKKB1014)

“… And on the eight day God created vRO. And vRO was without integration, and alone on the Earth. And God said, Let there be integration with the Ecosystem: and there was the vRO Plug-in. And God saw the Plug-in, and it was good.” … or at least so the story goes. Although this might Read more about Let’s vROC with vRO! (SKKB1014)[…]

Error invoking Active Directory tools while adding the Vmware Identity Appliance to a Windows Domain (SKKB1013)

Introduction Lab Environment Error Cause Workaround Introduction In this post we will take a look at common issue you might experience when trying to add/join a VMware Identity Appliance (IDA) to a windows domain. In this case when you try to join the domain you receive an error [Error invoking Active Directory tools.]   Lab Read more about Error invoking Active Directory tools while adding the Vmware Identity Appliance to a Windows Domain (SKKB1013)[…]

Managing NSX Edge and Manager Certificates (SKKB1012)

Introduction Lab Environment NSX Edge certificate operations Configuring self-signed certificate Configuring a CA signed certificate Configuring a CA generated and signed certificate NSX Manager certificate operations Configuring a CA signed certificate Configuring a global certificate Introduction In this post we will take a dive into NSX. We will look into NSX Global certificates as well Read more about Managing NSX Edge and Manager Certificates (SKKB1012)[…]

com.SpasKaloferov vCO (vRO) workflow library package (SKKB1011)

com.spaskaloferov vCO Workflow LIbrary This is a collection ov vCO /vRO workflows that i’ve developed some of which are refered to in some of my posts. Download: com.spaskaloferov Library package (last update 3.12..2015)       DISCLAIMER; This is a personal blog. Any views or opinions represented in this blog are personal and belong solely Read more about com.SpasKaloferov vCO (vRO) workflow library package (SKKB1011)[…]

How to use the NSX Create Logical Switch vRO workflow (SKKB1010)

Introduction Lab Environment Running the Create Logical Switch workflow   Introduction In this post we will take a look how we can use the Create Logical Switch vCenter Orchestrator (vCO)/vRealize Orchestrator (vRO) workflow to create a logical switch in NSX. The workflow is part of the NSX vSphere Plugin for vRO/vCO. Lab Environment The following Read more about How to use the NSX Create Logical Switch vRO workflow (SKKB1010)[…]

How to add PowerShell hosts from multiple domains with Kerberos authentication to the same vRO (SKKB1009)

Introduction Lab Environment Editing the Krb5.confi file Adding the PowerShell hosts Final Step Update Log: 12/02/2016 – Updated “Editing the Krb5.conf file” chapter.   Introduction In this post we are going to take a look at the configuration needed in order to add PowerShell hosts from multiple domains using Kerberos to the same vCenter Orchestrator Read more about How to add PowerShell hosts from multiple domains with Kerberos authentication to the same vRO (SKKB1009)[…]

How to Change the SSL Certificate of a vRO Appliance (6.x) (SKKB1008)

Introduction Lab Environment Scenario 1: Use vCO Dunes Private Key for your new certificate Import the CA certificates into the vCO SSL Trust Store Import the CA certificates into the Windows certificate store Generate Certificate Request and Issue Certificate Import the new certificate into vCO SSL Trust Store. Scenario 2: Use Custom Private Key with Read more about How to Change the SSL Certificate of a vRO Appliance (6.x) (SKKB1008)[…]

How to change the SSL certificate of WIndows installed vCO (SKKB1007)

Introduction Lab Environment Scenario 1: Use vCO Dunes Private Key for your new certificate Import the CA certificates into the vCO SSL Trust Store Import the CA certificates into the Windows certificate store Generate Certificate Request and Issue Certificate Import the new certificate into vCO SSL Trust Store. Scenario 2: Use Custom Private Key with Read more about How to change the SSL certificate of WIndows installed vCO (SKKB1007)[…]

Kaloferov.com Lab Logical Design (SKKB1001)

Logical Design The following is a logical representation of the environment used for some of the posts. Full sizecan be seen HERE Active Directory Domain called vmware.com Windows Server 2012 R2 lan1dc1 (192.168.1.1) Domain Controller DNS Server. PowerShell v4 Host. .NET 4 Framework installed (4.0.30319) Windows Server 2008 R2 SP1 lan1dm1 (192.168.1.2) Domain Member PowerShell Read more about Kaloferov.com Lab Logical Design (SKKB1001)[…]

Configuring vRealize Automation Load Balancing Using F5 BIG-IP (SKKB1006)

Introduction Lab Environment Logical Design Deploying the F5 BIG-IP Virtual Edition Appliance F5 BIG-IP Initial Configuration Configure the F5 Internal Network Configuring F5 BIG-IP Health Monitors Configuring F5 BIG-IP Server Pools Configuring F5 BIG-IP Virtual Servers Introduction This post will go through the F5 BIG-IP configuration needed so that it can be used as vRealize Read more about Configuring vRealize Automation Load Balancing Using F5 BIG-IP (SKKB1006)[…]

Adding vCO Powershell Host with account other than the default domain administrator account (SKKB1005)

In this post we will take a look how we can we add a vCO powershell host with account other than the default domain administrator account. Also we will take a look how to generally configure which accounts and user groups can remotely execute powershell commands in Windows. This post assumes that you have already Read more about Adding vCO Powershell Host with account other than the default domain administrator account (SKKB1005)[…]

NSX VXLAN Enable Agent fails on ESXi hosts with error “Cannot complete the operation.” (SKKB1004)

In this post we will take a look at problem you might experience when using VMware NSX/VXLAN network virtualization with VMware ESXi hosts. Problem Solution Cause The following environment has been used in all of the examples below: Active Directory Domain called vmware.com Windows Server 2012 R2 (with FQDN lan1dc1.vmware.com) Domain Controller DNS Server. PowerShell Read more about NSX VXLAN Enable Agent fails on ESXi hosts with error “Cannot complete the operation.” (SKKB1004)[…]

vCO Workflow to automate the certificate generation process (SKKB1003)

Introduction Lab Environment Getting to know the main workflow Use Case 1: Create certificate request file Use Case 2: Convert existing certificate to PEM Use Case 3: Using the “Generate Certificate” WF to automate the end-to-end process Introduction In this post we will take a look into a workflow that can help the automation of Read more about vCO Workflow to automate the certificate generation process (SKKB1003)[…]

Using CredSSP with the vCO PowerShell Plugin (SKKB1002)

Lab Environment Introduction Security Considerations Configure WinRM and user token delegation (CredSSP). Configure Windows Credential Delegation using the Credential Security Service Provider (CredSSP) module. Configure Windows service principal names (SPN’s) for WinRM Grant WinRM service access to the private key of valid certificate Edit the Kerberos Domain realm on the vCO Appliance (Optional/Scenario specific) Add Read more about Using CredSSP with the vCO PowerShell Plugin (SKKB1002)[…]