VMware

If your vCenter logs are flooded with ApiGwServicePrincipal messages about token expirations, you’re not alone. These frequent “info” level logs in the apigw.log file can clutter your system, making it tough to identify real issues. Fortunately, there’s a simple workaround: adjust the logging severity from “info” to “error.” Below, I’ll guide you through the exact steps to reduce this log noise effectively. The Issue: Too Many ApiGwServicePrincipal Logs In vCenter, you might see repeated log entries like: ...

Today, I’m diving into a critical issue that demands immediate attention for anyone managing VMware environments: VMSA-2025-0004. Released by Broadcom on March 4, 2025, this security advisory highlights severe vulnerabilities in VMware ESXi, Workstation, and Fusion—products that form the backbone of many virtualized infrastructures. Here’s what you need to know and how to respond, especially since patches are not yet available as of this writing. What is VMSA-2025-0004? VMSA-2025-0004 addresses multiple vulnerabilities that could allow attackers to compromise VMware’s virtualization platforms. The most alarming of these is CVE-2025-22224, a Time-of-Check Time-of-Use (TOCTOU) vulnerability leading to an out-of-bounds write. Rated as critical with a CVSSv3 score of 9.3, this flaw enables a malicious actor with local administrative privileges on a virtual machine (VM) to execute code as the VMX process on the host. In plain terms, an attacker could break out of the VM and take over the hypervisor, potentially gaining control of the host and all VMs running on it. ...

Upgrading Aria Operations (formerly VMware vRealize Operations) is a crucial task to ensure you’re using the latest features, security patches, and performance improvements. In this guide, we’ll walk through the step-by-step process of upgrading Aria Operations using a .pak file. If you manage your environment with Lifecycle Manager instead, I covered upgrading Aria Operations to 8.18.3 via Aria Suite Lifecycle separately. Preparing for the Upgrade Prerequisites Before starting the upgrade, ensure the following prerequisites are met: ...

If you’re a system administrator or IT professional working with VMware Aria Suite Lifecycle Manager, you might have hit a roadblock when trying to import a VMware Aria Operations for Networks instance. The error in question? LCMVRNICONFIG90115. Here’s what it looks like: Error Code: LCMVRNICONFIG90115 Invalid credentials provided for Console user. Please retry with correct console password. Invalid credentials provided for Console user. Please retry with correct console password. On the surface, this error screams “wrong password!” But even if you’re certain the credentials are spot-on, the issue might persist. Spoiler alert: the fix lies in enabling FIPS mode on the Aria Suite Lifecycle appliance. In this blog post, I’ll break down why this error happens, how FIPS mode resolves it, and provide a step-by-step guide to get you back on track. ...

In today’s fast-paced IT landscape, managing infrastructure efficiently is a top priority. Configuration management toolslike SaltStack Config and Ansible Tower empower IT teams to automate server provisioning, software deployment, and system maintenance. But how do these two solutions compare, and which one is the best fit for your organization? In this detailed comparison of SaltStack Config vs Ansible Tower, we’ll explore their key features, use cases, strengths, and weaknesses. Whether you’re searching for scalability, ease of use, or seamless integrations, this guide will help you decide which tool aligns with your automation needs. ...

In the evolving landscape of infrastructure automation, two tools frequently stand out: SaltStack and Terraform. Both are pivotal for managing infrastructure, yet they cater to distinct needs and operate on fundamentally different principles. This blog post explores what sets SaltStack and Terraform apart, delving into their purposes, architectures, use cases, and how they can work together to streamline your infrastructure workflows. What is SaltStack? SaltStack, commonly known as Salt, is a configuration management tool designed to automate the setup, configuration, and ongoing maintenance of servers. It thrives in environments where consistency and control over server states are paramount. Salt operates on a master-minion architecture, where a central master server orchestrates commands and configurations across multiple minion servers in real time. ...

In today’s blog, we’re diving into the world of storage solutions, specifically comparing VMware’s vSAN Express Storage Architecture (ESA) with traditional storage systems like SAN (Storage Area Network) and NAS (Network Attached Storage). If you’re wondering which storage solution is right for your environment, this post is for you. We’ll explore the key differences in architecture, performance, scalability, cost, management, and use cases to help you make an informed decision. ...

I often find myself fielding questions about how to effectively manage and monitor licensing in VMware Aria Automation. Licensing is a critical piece of the puzzle when it comes to ensuring compliance, optimizing resource usage, and maintaining operational efficiency in your automation environment. Recently, I was asked about tracking licensed assets, and I’m excited to share a practical approach using the powerful vracli command-line interface (CLI), specifically the vracli license usage command. In this blog, I’ll walk you through how to leverage this tool to gain visibility into your licensed assets, why it matters, and some actionable insights for managing your Aria Automation deployment. ...

Are you looking to streamline configuration management in your VMware by Broadcom Aria Automation environment? SaltStack Config 8.17, integrated into Aria Automation 8.18, offers powerful tools for automating and securing your infrastructure. In this guide, I’ll walk you through deploying SaltStack Config 8.17 using VMware Aria Suite Lifecycle Manager in an existing Aria Automation 8.18 setup. Whether you’re a solutions architect or IT administrator, this step-by-step tutorial will help you get started efficiently. ...

When it comes to configuration management, SaltStack and Ansible stand out as two of the most popular open-source tools for automating infrastructure, deploying applications, and managing IT environments. Whether you’re a DevOps professional or an IT administrator, choosing the right tool can streamline your workflows and improve efficiency. In this technical comparison, we’ll break down the differences between SaltStack Config and Ansible Open Source, covering their architectures, ease of use, scalability, and more. By the end, you’ll know which tool is best suited for your specific needs. ...