Creating a Custom Role in vCenter for Aria Operations Actions

Introduction I created a vCenter custom role for an Aria Operations service account that can run actions. The role contains the privileges needed for the action workflow while keeping the account within least privilege. Before You Begin Prerequisites Before we begin, ensure you have the following: Access to vCenter with administrative privileges. VMware PowerCLI installed on your system. Basic understanding of VMware vSphere and Aria Operations. Connecting to vCenter with PowerCLI Step 1: Connect to Your vCenter Server Open VMware PowerCLI and connect to your vCenter server using the following commands. Replace the placeholders with your actual login credentials and vCenter server details. ...

 · Updated  · 
Creating a Custom Role in vCenter for Aria Operations Actions

Creating a Custom Role in vCenter for Aria Operations Monitoring

Introduction I created a read-only vCenter custom role for an Aria Operations service account. The role grants the privileges needed for monitoring without adding the permissions required to run remediation actions. Before You Begin Prerequisites Before we begin, ensure you have the following: Access to vCenter with administrative privileges. VMware PowerCLI installed on your system. Basic understanding of VMware vSphere and Aria Operations. Connecting to vCenter with PowerCLI Step 1: Connect to Your vCenter Server Open VMware PowerCLI and connect to your vCenter server using the following commands. Replace the placeholders with your actual login credentials and vCenter server details. ...

 · Updated  · 
Creating a Custom Role in vCenter for Aria Operations Monitoring

Enhancing vCenter Server Firewall Management with Ansible

In today’s dynamic IT environments, maintaining a secure and efficient infrastructure is paramount. For VMware vSphere administrators, managing the firewall settings on vCenter servers is a critical task that ensures the security of the entire virtualized infrastructure. Ansible, an open-source automation tool, offers a streamlined approach to managing firewall settings across multiple vCenter servers. This blog post will guide you through automating vCenter server firewall configurations using Ansible, showcasing how to apply these changes across multiple servers seamlessly. ...

Enhancing vCenter Server Firewall Management with Ansible

Streamlining vCenter Server Firewall Management with SaltStack Config

In the realm of VMware vSphere management, securing your vCenter Server is critical to maintaining a robust and secure infrastructure. SaltStack Config, integrated into VMware’s vRealize Automation suite, offers a powerful way to automate and manage configurations across your VMware environment, including firewall settings. This blog explores how to leverage SaltStack Config to automate firewall adjustments on your vCenter servers, ensuring consistent security policies and simplifying the process across multiple instances. ...

Streamlining vCenter Server Firewall Management with SaltStack Config

Managing the ESXi SSH Server Firewall Exception Across Hosts with PowerCLI

VMware PowerCLI can manage the firewall exceptions on ESXi hosts through vCenter Server. The commands in this guide change the SSH Server firewall exception on ESXi; they do not configure the firewall of the vCenter Server Appliance (VCSA). Enabling this exception permits inbound SSH traffic through an ESXi host’s firewall. It does not start the SSH service. Opening SSH on many hosts also increases the management-plane attack surface, so target only the hosts that require access and disable the exception as soon as the work is complete. ...

 · Updated  · 
Managing the ESXi SSH Server Firewall Exception Across Hosts with PowerCLI
Boot menu shows ESXi-8.0U1-21495797-standard options, including Installer and local disk.

Install/Upgrade ESXi 8.0 on unsupported hardware.

As I was installing\upgrading my lab environment to ESXi 7.0 I received an error that the CPU was unsupported. As per the release notes vSphere 8.0 release notes my CPU is no longer on the compatibility list. Since this is a lab environment I wanted to continue using my current hardware. It goes without saying that this method should not be used in a production environment. To allow the legacy CPU all I had to do is boot up from the ISO, on the boot Menu I pressed TAB or Shift + O and added allowLegacyCPU=True option as seen in the screenshot below ...

Install/Upgrade ESXi 8.0 on unsupported hardware.

A Step-by-Step Guide to Convert Native Cloud Virtual Machines to On-Prem vSphere with VMware Converter

Migrating virtual machines (VMs) from a cloud environment to an on-premises VMware vSphere infrastructure can be a daunting task. However, with the right tools and processes in place, it can be a seamless and efficient process. One such tool is the VMware Converter, which enables users to convert native cloud VMs\physical servers to vSphere machines. In this blog post, we will discuss the benefits and challenges of converting cloud VMs and provide a step-by-step guide for using VMware Converter to achieve this goal. ...

A Step-by-Step Guide to Convert Native Cloud Virtual Machines to On-Prem vSphere with VMware Converter

Removing NSX stale packages from ESXi host

Important safety update (August 25, 2026): Do not manually remove NSX VIBs with esxcli software vib remove. Broadcom documents that this method is unsupported and can cause loss of management or workload networking. The executable removal guidance previously shown on this page has been removed. Use the current follow-up instead: Safely Removing Stale NSX VIBs from an ESXi Host. It starts with the NSX Manager removal workflow and covers the narrower stale-package condition where Broadcom directs administrators to use nsxcli -c del nsx while the host is in maintenance mode. ...

 · Updated  · 
Removing NSX stale packages from ESXi host

Why Choose vRealize Automation (vRA) over Ansible

Ansible and vRealize Automation (vRA) are both popular DevOps tools for infrastructure automation and provisioning. However, the two tools have different strengths and use cases, and choosing the right one for your organization can be a challenge. In this blog post, we’ll explore the key differences between vRA and Ansible and why you might choose vRA over Ansible. Deployment Complexity and Integrations Complexity of Deployment Ansible is a simple, agentless tool that is easy to install and configure. However, as the complexity of your deployment increases, the simplicity of Ansible can quickly become a hindrance. vRA, on the other hand, is a complex tool that is designed to handle complex deployments, making it an ideal choice for large, complex environments. ...

Why Choose vRealize Automation (vRA) over Ansible

Why Choose VMware vRealize Automation Over Puppet

VMware vRealize Automation (vRA) and Puppet address different parts of infrastructure management. This comparison looks at VMware integration, cloud management, automation, self-service, and cost before outlining where vRA fits. Where vRA Outshines Puppet Integrated Management: vRA integrates with VMware’s vSphere virtualization platform, allowing for a seamless management of virtual machines (VMs). With Puppet, you would need to use additional tools to manage your virtual environment. Cloud Management: vRA is capable of managing both on-premise and cloud infrastructure, making it an ideal solution for hybrid cloud environments. Puppet, on the other hand, is primarily focused on on-premise deployments. Automation: Automation is at the core of both vRA and Puppet. However, vRA provides a more comprehensive automation solution with its built-in workflows and drag-and-drop design. This makes it easier for users to automate their infrastructure without having to write complex code. Self-Service: vRA provides a self-service portal for users to request and manage their own resources, reducing the burden on IT. Puppet does not have this capability, making it a less attractive option for organizations looking to implement a self-service model. Cost: vRA is a commercial product and is typically more expensive than Puppet. However, the added features and integration with other VMware products make it a more cost-effective solution in the long run. The Verdict vRealize Automation fits teams that need VMware-aware provisioning, hybrid-cloud management, and a self-service catalog. Puppet may be the better fit when configuration management is the main requirement or licensing cost is the deciding factor. ...

Why Choose VMware vRealize Automation Over Puppet