Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and...

48
Table of Contents HOL-2011-91-SDC-vSphere 6.7 Lightning Lab: Simple & Efficient Management at Scale 2 Overview - vSphere 6.7 Lightning Lab: Simple & Efficient Management at Scale ... 3 Lifecycle Management Operations ......................................................................... 4 Getting Started with Update Manager ................................................................. 11 Embedded Linked Mode ....................................................................................... 25 Lightning Lab Conclusion ..................................................................................... 26 Appendix - Lab Guidance ..................................................................................... 28 Appendix - Enhanced vCenter Server Appliance ................................................... 32 HOL-2011-91-SDC Page 1 HOL-2011-91-SDC

Transcript of Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and...

Page 1: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Table of ContentsHOL-2011-91-SDC-vSphere 6.7 Lightning Lab: Simple & Efficient Management at Scale 2

Overview - vSphere 6.7 Lightning Lab: Simple & Efficient Management at Scale ...3Lifecycle Management Operations ......................................................................... 4Getting Started with Update Manager ................................................................. 11Embedded Linked Mode ....................................................................................... 25Lightning Lab Conclusion ..................................................................................... 26Appendix - Lab Guidance ..................................................................................... 28Appendix - Enhanced vCenter Server Appliance ................................................... 32

HOL-2011-91-SDC

Page 1HOL-2011-91-SDC

Page 2: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

HOL-2011-91-SDC-vSphere 6.7 LightningLab: Simple & EfficientManagement at Scale

HOL-2011-91-SDC

Page 2HOL-2011-91-SDC

Page 3: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Overview - vSphere 6.7 Lightning Lab:Simple & Efficient Management atScaleWelcome to vSphere 6.7 Lightning Lab: Simple & Efficient Management at Scale

We have developed Lightning Labs to help you learn about VMware products in smallsegments of time.

In this lab, you will explore vSphere 6.7 Update 2 improvements and new features inESXi and vCenter Server management and lifecycle:

• Lifecycle Management• Getting Started with Update Manager• Embedded Linked Mode

Lab Captain:

• Sonya Harley, Consulting Architect, USA

Interested in learning what else you can do with vSphere 6.7 Update 2? Explore the fulllab: vSphere Platinum - Getting Started

• https://labs.hol.vmware.com

Lab SKU: HOL-2011-01-SDC

Below are the lab modules included in the complete vSphere Platinum - GettingStarted lab:

• Module 1 - vSphere 6.7 Overview• Module 2 - Simple & Efficient Management at Scale• Module 3 - Comprehensive Built-in Security• Module 4 - Universal Application Platform• Module 5 - Seamless Hybrid Cloud Experience• Module 6 - vSphere Platinum: AppDefense Configuration and

Management

If you have never taken a lab, view the to see best practices and tips on how to use thelab environment console.

HOL-2011-91-SDC

Page 3HOL-2011-91-SDC

Page 4: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Lifecycle Management OperationsVMware vSphere 6.7 Update 2 includes several improvements that accelerate the hostlifecycle management experience to save administrators valuable time.

Before starting the lab, we recommend taking a moment to review vSphere 6.7 newfeatures and enhancements developed around vCenter Server Appliance.

Open Chrome Browser from Windows Quick Launch TaskBar

1. Click on the Chrome Icon on the Windows Quick Launch Task Bar.

Log into the vSphere Web Client

HOL-2011-91-SDC

Page 4HOL-2011-91-SDC

Page 5: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Using the Chrome web browser, navigate to the URL for the Web client. For this lab, youcan use the shortcut in the address bar.

1. Click the RegionA bookmark folder2. Click on bookmark for RegionA vSphere Client (HTML)3. Check the Use Windows session authentication box4. Click Login

Alternatively, you could use these credentials

1. User name: corp\Administrator2. Password: VMware1!

Please Note: All of the user credentials used in this lab are listed in the README.TXT fileon the desktop.

Gain screen space in Chrome by zooming out

The lab desktop is limited to 1280x800 screen resolution. It might be helpful to zoomout the browser for better readability.

1. Select the Options menu in Chrome.2. Click the '-' button to zoom out to 90%

This will provide more viewing space while still allowing you to read the text.

HOL-2011-91-SDC

Page 5HOL-2011-91-SDC

Page 6: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Navigate to Update Manager

Navigate to the Update Manager interface

HOL-2011-91-SDC

Page 6HOL-2011-91-SDC

Page 7: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

1. Click the Menu icon2. Click Update Manager

1. Click on Updates2. Filter on the ID3. Enter 2018

The results will be filtered for any patches released in 2018. You can also filter by theversion, under releases, category and type.

Update Manager with Embedded Linked Mode

With the introduction of embedded linked mode in vSphere 6.7, you can now manageUpdate Manager instances through the same interface.

1. Select the drop down arrow2. Select vcsa-01b.corp.local

HOL-2011-91-SDC

Page 7HOL-2011-91-SDC

Page 8: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Browse the settings in the other vCenter.

Upgrades from 6.5 to 6.7

Hosts that are currently on ESXi 6.5 will be upgraded to 6.7 significantly faster than everbefore. This is because several optimizations have been made for that upgrade path,including eliminating one of two reboots traditionally required for a host upgrade. In thepast, hosts that were upgraded with Update Manager were rebooted a first time in orderto initiate the upgrade process, and then rebooted once again after the upgrade wascomplete. Modern server hardware, equipped with hundreds of gigabytes of RAM,typically take several minutes to initialize and perform self-tests. Doing this hardwareinitialization twice during an upgrade really adds up, so this new optimization willsignificantly shorten the maintenance windows required to upgrade clusters of vSphereinfrastructure.

These new improvements reduce the overall time required to upgrade clusters,shortening maintenance windows so that valuable efforts can be focused elsewhere.

Recall that, because of DRS and vMotion, applications are never subject to downtimeduring hypervisor upgrades VMs are moved seamlessly from host to host, as needed.

vSphere Quick Boot

What is the Quick Boot functionality? Quick Boot functionality allows restarting only thehypervisor instead of going through a full reboot of the host hardware includingPOSTing, etc. This functionality is utilized with vSphere Update Manager so thatpatching and upgrades are completed much more quickly. A note here before gettingexcited about potential backwards compatibility, this functionality is only available forhosts that are running ESXi 6.7. Even if your hardware is compatible with the new QuickBoot, if you are running a legacy version of ESXi, this won't be available.

Host reboots occur infrequently but are typically necessary after activities such asapplying a patch to the hypervisor or installing a third-party component or driver.Modern server hardware that is equipped with large amounts of RAM may take manyminutes to perform device initialization and self-tests.

Quick Boot eliminates the time-consuming hardware initialization phase by shuttingdown ESXi in an orderly manner and then immediately re-starting it. If it takes severalminutes, or more, for the physical hardware to initialize devices and perform necessaryself-tests, then that is the approximate time savings to expect when using Quick Boot!In large clusters, that are typically remediated one host at a time, it's easy to see howthis new technology can substantially shorten time requirements for data centermaintenance windows.

Due to the nature of our lab, we can't demonstrate Quick Boot because ESXi running onESXi! Click on this video to watch Quick Boot in action!

HOL-2011-91-SDC

Page 8HOL-2011-91-SDC

Page 9: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Video - vSphere Quick Boot (1:53)

While we can't watch the reboot go any faster in this lab, let's go check where weenable this setting.

<div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><ahref="http://www.youtube.com/watch?v=T3OZiuAJnmE" target="_blank">Try watching this video on www.youtube.com</a>, or enableJavaScript if it is disabled in your browser.</div></div>

HOL-2011-91-SDC

Page 9HOL-2011-91-SDC

Page 10: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

1. From Update Manager, click the Settings tab2. Under Remediation Settings click on Hosts3. Click on Edit

1. Notice the Enable Quick Boot is checked by default2. Review the available host settings3. Click on Cancel to exit

HOL-2011-91-SDC

Page 10HOL-2011-91-SDC

Page 11: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Getting Started with Update ManagerVMware vSphere Update Manager is a tool that simplifies and centralizes automatedpatch and version management for VMware vSphere and offers support for VMware ESXhosts, virtual machines, and virtual appliances.

With Update Manager, you can perform the following tasks:

1. Upgrade and Patch ESXi hosts.2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

vSphere Update Manager is installed and running by default in the vCenter ServerAppliance. Each vCenter Appliance will have a single vSphere Update Manager pairedwith it.

Open Chrome Browser from Windows Quick Launch TaskBar

1. Click on the Chrome Icon on the Windows Quick Launch Task Bar.

HOL-2011-91-SDC

Page 11HOL-2011-91-SDC

Page 12: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Log into the vSphere Web Client

Using the Chrome web browser, navigate to the URL for the Web client. For this lab, youcan use the shortcut in the address bar.

1. Click the RegionA bookmark folder2. Click on bookmark for RegionA vSphere Client (HTML)3. Check the Use Windows session authentication box4. Click Login

Alternatively, you could use these credentials

1. User name: corp\Administrator2. Password: VMware1!

Please Note: All of the user credentials used in this lab are listed in the README.TXT fileon the desktop.

HOL-2011-91-SDC

Page 12HOL-2011-91-SDC

Page 13: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Gain screen space in Chrome by zooming out

The lab desktop is limited to 1280x800 screen resolution. It might be helpful to zoomout the browser for better readability.

1. Select the Options menu in Chrome.2. Click the '-' button to zoom out to 90%

This will provide more viewing space while still allowing you to read the text.

HOL-2011-91-SDC

Page 13HOL-2011-91-SDC

Page 14: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Navigate to Update Manager

Navigate to the Update Manager interface

1. Click the Menu icon2. Click Update Manager

Select vcsa-01b.corp.local

We are going to create a baseline on the vcsa-01b vCenter Server.

1. Ensure vcsa-01b.corp.local is selected in the host drop down menu.

HOL-2011-91-SDC

Page 14HOL-2011-91-SDC

Page 15: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Baselines and Baseline Groups

Baselines can be upgrade, extension, or patch baselines. Baselines contain a collectionof one or more patches, extensions, or upgrades.

Baseline groups are assembled from existing baselines, and might contain one upgradebaseline per type of upgrade baseline, and one or more patch and extension baselines.When you scan hosts, virtual machines, and virtual appliances, you evaluate them

against baselines and baseline groups to determine their level of compliance.

By default, Update Manager contains two predefined dynamic patch baselines.

• Critical Host Patches - Checks ESXi hosts for compliance with all criticalpatches

• Non-Critical Host Patches - Checks ESXi hosts for compliance with all optionalpatches

We are going to create a new baseline, which we will then use to scan a vSphere host sothat we can make sure that it has the latest patches.

1. Select the Baselines tab2. Click New3. Click Baseline

HOL-2011-91-SDC

Page 15HOL-2011-91-SDC

Page 16: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Create Baseline

1. Enter HOL Host Baseline for the name2. Enter Host Baseline for the description3. Select the Patch radio button4. Click Next to continue.

HOL-2011-91-SDC

Page 16HOL-2011-91-SDC

Page 17: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Select Patches Automatically

This screen gives the baseline the ability to continually update itself based on thecriteria you select. You can use these options to narrow the scope of the patches addedto this baseline (selecting embeddedEsx 6.5.0 would limit this baseline to only thosepatches relevant to ESXi 6.5).

Some areas you can refine the baseline patches to are:

• Vendor• Product• Severity (Critical, Important, Moderate, Low)• Category (Security, BugFix, Enhancement, Other)

1. For our example, we will leave the default setting to automatically update thebaseline as new patches become available. We will also leave the default Criteriasettings of Any for all options.

2. Click Next

HOL-2011-91-SDC

Page 17HOL-2011-91-SDC

Page 18: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Select Patches Manually

From this screen you have the ability to manually select patches for the baseline toinclude. Since we have selected the option to have this baseline automatically updated,this screen will appear without patches to select. If you disable the automatic option inthe previous screen, you would now be presented with a listing of all patches availablewhich you could manually select to include in this baseline.

1. Click Next

HOL-2011-91-SDC

Page 18HOL-2011-91-SDC

Page 19: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Summary

Review the settings of the patch baseline you created before finishing the wizard

1. Click Finish to complete the Patch Baseline

Return to Hosts and Clusters View

Next, we are going to attach the baseline we just created to a host. This makes sure thatscanning and remediation happens for the host.

HOL-2011-91-SDC

Page 19HOL-2011-91-SDC

Page 20: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

1. Click on the Menu Icon2. Select Hosts and Clusters

Attach the Patch Baseline to a Host

1. Expand vcsa-01b.corp.local vCenter Server --> RegionB01 Datacenter -->RegionB01-COMP01 Cluster

2. Click on the host esx-02b.corp.local3. Select the Updates tab.4. Click on Attach (Note: You may need to scroll down to see this)5. Click Attach Baseline or Baseline Group

HOL-2011-91-SDC

Page 20HOL-2011-91-SDC

Page 21: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Select the Baseline

In the new window that opens,

1. Select HOL Host Baseline - this is the new Baseline that we just created2. Click Attach

HOL-2011-91-SDC

Page 21HOL-2011-91-SDC

Page 22: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Verify the Baseline is Attached

Before we scan the host for compliance against our new baseline, let's verify the newbaseline is attached and see what the current status of its compliance is.

1. Verify HOL Host Baseline is listed in the Attached Baselines2. Notice that the current status indicates Unknown, this is a normal status when

you attach a new baseline. Update Manager has not yet scanned this host andcompared its current state to the baseline state.

In the next step, we will scan the host and see if it is in compliance with the attachedbaseline.

HOL-2011-91-SDC

Page 22HOL-2011-91-SDC

Page 23: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Scan the Host

We will now scan this host to see if it is compliant with the baseline.

1. Click the CHECK COMPLIANCE button2. You may receive a message in a blue bar at the top of your screen indicating a

refresh is needed, click the Refresh link to update the screen. After you clickRefresh, you can safely close the message window with the "X"

3. Notice the new status of this host. It is now "Compliant". This indicates that thehost meets the patch criteria selected in this baseline.

Had this host been missing any patches identified in the baseline criteria, the statuswould have shown "Not Compliant" indicating the host is missing a patch identified inthe baseline, you could then remediate this host using the Remediate option on thisscreen.

HOL-2011-91-SDC

Page 23HOL-2011-91-SDC

Page 24: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Video: Upgrading VMware Tools Using vSphere UpdateManager (5:14)

vSphere Update Manager can also be used to update the VMware tools on a virtualmachine. The following video outlines the process.

<div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><ahref="http://www.youtube.com/watch?v=HLZvcjH95mE" target="_blank">Try watching this video on www.youtube.com</a>, or enableJavaScript if it is disabled in your browser.</div></div>

HOL-2011-91-SDC

Page 24HOL-2011-91-SDC

Page 25: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Embedded Linked ModevCenter Embedded Linked Mode is enhanced linked mode support for vCenter ServerAppliance with an embedded Platform Services Controller. This lab is configured usingvSphere 6.7 Embedded Linked Mode.

With vCenter Embedded Linked Mode, you can connect multiple vCenter ServerAppliances with embedded Platform Services Controllers together to form a domain.vCenter Embedded Linked Mode is not supported for Windows vCenter Serverinstallations. vCenter Embedded Linked Mode is supported starting with vSphere 6.5Update 2 and suitable for most deployments.

Other features of vCenter Embedded Linked Mode include:

• No external Platform Services Controller, providing a more simplified domainarchitecture than enhanced linked mode.

• A simplified backup and restore process.• A simplified HA process, removing the need for load balancers.• Up to 15 vCenter Server Appliances can be linked together using vCenter

Embedded Linked Mode and displayed in a single inventory view.• For a vCenter High Availability (vCenter HA) cluster, three nodes are considered

one logical vCenter Servernode. This represents ten times the vCenter HAclusters in a vCenter Embedded Linked Mode for a total of 30 VMs.

Video - Embedded Linked Mode (4:03)

<div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><ahref="http://www.youtube.com/watch?v=46iAm_ddM0k" target="_blank">Try watching this video on www.youtube.com</a>, or enableJavaScript if it is disabled in your browser.</div></div>

HOL-2011-91-SDC

Page 25HOL-2011-91-SDC

Page 26: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Lightning Lab ConclusionYou have taken the Lightning Lab!

Thank you for taking the vSphere 6.7 Lightning Lab: Simple & Efficient Management atScale

Interested in learning what else you can do with vSphere 6.7? Explore the full lab:vSphere Platinum - Getting Started

• https://labs.hol.vmware.com

Lab SKU: HOL-2011-01-SDC

Below are the lab modules included in the complete vSphere Platinum - GettingStarted lab:

• Module 1 - vSphere 6.7 Overview (15 minutes) (Basic) - Brief overview ofwhat's new in the vSphere 6.7 Update 2 release.

• Module 2 - Simple and Efficient Management at Scale (60 minutes)(Basic) -Explore improvements and new features in ESXi and vCenter Servermanagement and lifecycle.

• Module 3 - Comprehensive Built-in Security (60 minutes) (Basic)Experience the improved VM Encryption workflow as well as added support forTPM 2.0, vTPM, and Virtualization Based Security.

• Module 4 - Universal Application Platform (15 minutes) (Basic) - Discovernew vSphere capabilities that make it the platform for all applications includingthe most mission-critical.

• Module 5 - Seamless Hybrid Cloud (15 minutes) (Basic) - Learn how vSphere6.7 Update 2 and VMware Cloud on AWS creates a seamless hybrid cloudexperience with easy visibility, migration, and management of workloadsbetween on-premises and public cloud.

• Module 6 - vSphere Platinum: AppDefense Configuration andManagement (15 minutes) (Basic) - This lab is an Interactive Simulation lab.In this lab, we will learn about vSphere Platinum and walk through thedeployment and configuration of AppDefense as well as learn how VMwareAppDefense uses VMware infrastructure to monitor processes that are running onapplications.

HOL-2011-91-SDC

Page 26HOL-2011-91-SDC

Page 27: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

How to End Lab

To end your lab, click on the END button.

HOL-2011-91-SDC

Page 27HOL-2011-91-SDC

Page 28: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Appendix - Lab GuidanceLocation of the Main Console

1. The area in the RED box contains the Main Console. The Lab Manual is on the tabto the Right of the Main Console.

2. A particular lab may have additional consoles found on separate tabs in the upperleft. You will be directed to open another specific console if needed.

3. Your lab starts with 90 minutes on the timer. The lab cannot be saved. All yourwork must be done during the lab session. But you can click the EXTEND toincrease your time. If you are at a VMware event, you can extend your lab timetwice, for up to 30 minutes. Each click gives you an additional 15 minutes.Outside of VMware events, you can extend your lab time up to 9 hours and 30minutes. Each click gives you an additional hour.

Alternate Methods of Keyboard Data Entry

During this module, you will input text into the Main Console. Besides directly typing itin, there are two very helpful methods of entering data which make it easier to entercomplex data.

HOL-2011-91-SDC

Page 28HOL-2011-91-SDC

Page 29: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Click and Drag Lab Manual Content Into Console ActiveWindow

You can also click and drag text and Command Line Interface (CLI) commands directlyfrom the Lab Manual into the active window in the Main Console.

Accessing the Online International Keyboard

You can also use the Online International Keyboard found in the Main Console.

1. Click on the Keyboard Icon found on the Windows Quick Launch Task Bar.

<div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><ahref="http://www.youtube.com/watch?v=xS07n6GzGuo" target="_blank">Try watching this video on www.youtube.com</a>, or enableJavaScript if it is disabled in your browser.</div></div>

HOL-2011-91-SDC

Page 29HOL-2011-91-SDC

Page 30: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Click once in active console window

In this example, you will use the Online Keyboard to enter the "@" sign used in emailaddresses. The "@" sign is Shift-2 on US keyboard layouts.

1. Click once in the active console window.2. Click on the Shift key.

Click on the @ key

1. Click on the "@ key".

Notice the @ sign entered in the active console window.

HOL-2011-91-SDC

Page 30HOL-2011-91-SDC

Page 31: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Look at the lower right portion of the screen

Please check to see that your lab is finished all the startup routines and is ready for youto start. If you see anything other than "Ready", please wait a few minutes. If after 5minutes your lab has not changed to "Ready", please ask for assistance.

HOL-2011-91-SDC

Page 31HOL-2011-91-SDC

Page 32: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Appendix - Enhanced vCenter ServerApplianceIn vSphere 6.7 Update 2, many of the new features and enhancements were developedaround the vCenter Server Appliance. This is the last release that will offer a Windowsinstallation of vCenter. The appliance has a new, simplified user interface, enhancedmonitoring of services, file-based backup and other great features.

Installation

One significant change for the vCenter Server Appliance is around simplifying thearchitecture. vSphere 6.7 Update 2 allows you to deploy the vCenter Server Appliancewith Embedded PSC with Enhanced Link Mode. Now all vCenter Server services arerunning on a single instance. Let's take a look at the benefits this deployment modelbrings:

• No load balancer required for high availability and fully supports native vCenterServer High Availability.

• SSO Site boundary removal provides flexibility of placement.• Supports vSphere scale maximums.• Allows for 15 deployments in a vSphere Single Sign-On Domain.• Reduces the number of nodes to manage and maintain.

Migration Tool

vSphere 6.7 is the last release to include vCenter Server for Windows. Customers canmigrate to the vCenter Server Appliance with the built-in Migration Tool. In vSphere 6.7Update 2, we can select how to import the historical and performance data during amigration:

• Deploy & import all data• Deploy & import data in the background

Customers will also get an estimated time of how long each option will take whenmigrating. Estimated time will vary based on historical and performance data size inyour environment. While importing data in the background, customers have the optionto pause and resume. This new ability is available in the vSphere ApplianceManagement Interface (VAMI). Another improvement to the migration process is supportof custom ports. Customers who changed the default Windows vCenter Server ports areno longer blocked.

HOL-2011-91-SDC

Page 32HOL-2011-91-SDC

Page 33: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Video - vCenter Server Appliance Migration (5:10)

We will now log into the vCSA and take a look at some of the enhancements

Open Chrome Browser from Windows Quick Launch TaskBar

1. Click on the Chrome Icon on the Windows Quick Launch Task Bar.

<div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><ahref="http://www.youtube.com/watch?v=m-Fu-_GTEvU" target="_blank">Try watching this video on www.youtube.com</a>, or enableJavaScript if it is disabled in your browser.</div></div>

HOL-2011-91-SDC

Page 33HOL-2011-91-SDC

Page 34: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Gain screen space in Chrome by zooming out

1. Select the Options menu in Chrome.2. Click the '-' button to zoom out to 90%

This will provide more viewing space while still allowing you to read the text.

Log in to Appliance Management UI

For this lab, we will log in with the root account.

HOL-2011-91-SDC

Page 34HOL-2011-91-SDC

Page 35: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

However, vSphere 6.7 Update 2 now allows local vSphere SSO users to log into theVAMI. The local vSphere SSO users must be a member of theSystemConfiguration.Administrators group. In addition, members of theSystemConfiguration.BashShellAdministrators group can use their local vSphere SSOaccount to log into the VCSA bash shell. From a security perspective, using a local SSOuser account to manage the VAMI makes it easier to audit the user who logged in andtrack actions performed by that user.

1. Click the HOL Admin bookmark2. Click the vcsa-01a Mgmt shortcut in the drop-down3. Type root for the username4. Type VMware1! for the password5. Click Login

A lot of investment went into improving monitoring for the vCenter Server Appliance. Wesaw these improvements starting in vSphere 6.5, and vSphere 6.7 Update 2 has addedseveral new enhancements. When accessing the vSphere Appliance ManagementInterface (VAMI) on port 5480, the first thing we notice is the VAMI has been updated to

HOL-2011-91-SDC

Page 35HOL-2011-91-SDC

Page 36: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

the Clarity UI. We also notice there are several new tabs on the left-hand side comparedto vSphere 6.5.

Monitoring and Management

There is now a tab dedicated to monitoring where we can see CPU, memory, disk,network, and database utilization.

1. From the menu on the left, click Monitor2. The default view should be the CPU & Memory tab. If not, click this tab.

Explore the graphs shown for these components.

HOL-2011-91-SDC

Page 36HOL-2011-91-SDC

Page 37: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

A new section of the monitoring tab called Disks is now available. Customers can nowsee each of the disk partitions for the vCenter Server appliance along with theremaining space available and utilization.

1. Click the Disks tab. Review the partitions and utilization of the disks for thevCenter Server appliance

2. Click the Network tab to see transfer rates for network packets3. Click the Database tab to see space utilization

Firewall

In vSphere 6.7 Update 2, firewall rules can be managed for the vCenter ServerAppliance directly from the VAMI. In the past, this functionality was only available usingthe VAMI APIs.

We will create a new firewall rule for the vCenter Server appliance.

1. From the menu on the left, click Firewall2. Click Add

HOL-2011-91-SDC

Page 37HOL-2011-91-SDC

Page 38: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Create New Firewall Rule

1. Enter 10.10.10.10 in the IP Address field2. Enter 24 in the Subnet Prefix Length field3. Select Accept from the Action drop-down menu4. Click Save

The firewall rule is now displayed. We will now delete this rule.

Delete Firewall Rule

1. In the Firewall section, click the radio button next to the firewall rule that will bedeleted

2. Click Delete

HOL-2011-91-SDC

Page 38HOL-2011-91-SDC

Page 39: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

1. Click Delete to confirm that you want to remove the firewall rule

Services

The Services tab is now located in the VAMI and provides out-of-band troubleshooting.All of the services that make up the vCenter Server Appliance, their startup type, health,and state are visible here. We are also given the option to start, stop, and restartservices if needed.

HOL-2011-91-SDC

Page 39HOL-2011-91-SDC

Page 40: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

While the Syslog and Update tabs are not new to the VAMI, there are improvements inthese areas. Syslog now supports up to three syslog forwarding targets. There is nowmore flexibility in patching and updating. From the Update tab, we will now have theoption to select which patch or update to apply. Customers will also have moreinformation including type, severity, and if a reboot is necessary. Expanding a patch orupdate in the view will display more information about what is included. Finally, we cannow stage and install a patch or update from the VAMI. This capability was previouslyonly available from the CLI.

File-Based Backup and Restore

In vSphere 6.7 Update 2, the vCenter Server Appliance (vCSA) has an out-of-the-box file-based backup and restore solution. You can back up all of vCenter Server’s coreconfiguration, inventory, and historical data to a single folder. The newest supportedprotocols for built-in file-based Backup and Restore include Network File System(NFS) & Samba (SMB). The addition of NFS and SMB now brings the protocol choicesup to 7 total (HTTP, HTTPS, FTP, FTPS, SCP, NFS, and SMB) when configuring a vCenterServer for file-based Backup or Restore. Currently supported versions of these newprotocols are NFSv3 and SMB2. When it is time to restore to a previous backup, you candeploy a new appliance, point to the folder location of the vCenter Server backup files,and restore all of the vCenter server's configuration and inventory data (with optionalhistorical data) from the backup. Improvements to the Backup functionality in vCenter6.7 Update 2 include a scheduling option!

HOL-2011-91-SDC

Page 40HOL-2011-91-SDC

Page 41: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Create Backup

1. From the menu on the left, select Backup2. Click Backup Now.

HOL-2011-91-SDC

Page 41HOL-2011-91-SDC

Page 42: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Backup Wizard

1. For Backup location, enter ftp://192.168.110.602. Enter root in the User name field3. Enter VMware1! in the Password field4. Ensure Stats, Events and Tasks is selected5. Enter HOL Test Backup in the Description field6. Click Start

HOL-2011-91-SDC

Page 42HOL-2011-91-SDC

Page 43: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Backup Status

This step provides a backup status summary which gives you a confirmation of yourbackup protocol, location, credentials, encryption, and optional data.

NOTE: Due to the lack of storage in the lab, the transfer will error out.

Configuring a Schedule in the Backup Wizard

New to vCenter 6.7 is the ability to create a recurring backup schedule. We will walkthrough setting up a schedule to finish off this part of the lab.

HOL-2011-91-SDC

Page 43HOL-2011-91-SDC

Page 44: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

1. Click Configure in the Backup Schedule section.

1. For Backup location, enter ftp://192.168.110.602. Enter root in the User name field3. Enter VMware1! in the Password field4. In the Schedule field, leave the default value5. In the Number of backups to retain field, leave the default value that is

selected6. Ensure Stats, Events and Tasks is selected7. Click Create

HOL-2011-91-SDC

Page 44HOL-2011-91-SDC

Page 45: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

Confirm the Schedule Creation

1. Click on the small chevron beside the Status to expand the Schedule selection.2. Confirm that the schedule has been created. You can use the Edit, Disable, or

Delete buttons to manage the scheduled backup job.

Click on the video to watch a video on scheduling a backup.

Video - File-Based Backup and Restore (4:29)

Cross-SSO Domain Repoint

The vCenter Server Appliance 6.7 Update 2 CLI also has some new enhancements. Herewe will discuss the repointing enhancements using cmsso-util. While not a new feature,it was not available in vSphere 6.5 and makes a return in vSphere 6.7.

Customers can now repoint their vCenter Server Appliance across vSphere SSOdomains. Can you say consolidation? The domain repoint feature supports bothembedded and external deployments running vSphere 6.7 Update 2. The domain

<div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><ahref="http://www.youtube.com/watch?v=r05k2AeQgcU" target="_blank">Try watching this video on www.youtube.com</a>, or enableJavaScript if it is disabled in your browser.</div></div>

HOL-2011-91-SDC

Page 45HOL-2011-91-SDC

Page 46: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

repoint feature has a pre-check option and it is highly recommended to use this. Thepre-check compares the two vSphere SSO domains and lists any discrepancies in a JSONfile. This provides the opportunity to resolve any discrepancies before running thedomain repoint tool. The repoint tool can migrate licenses, tags, categories, andpermissions from one vSphere SSO Domain to another.

HOL-2011-91-SDC

Page 46HOL-2011-91-SDC

Page 47: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

vCSA/PSC Batch Deployment

Another CLI enhancement includes using the CLI installer to manage the vCenter ServerAppliance lifecycle. The vCenter Server Appliance ISO file comes with JSON templateexamples. These JSON templates are a way to ensure consistency across installs,upgrades, and migrations. Usually, we would have to run the JSON template from theCLI installer one at a time in the correct order. This manual per-node deployment is nowa thing of the past with batch operations. With batch operations, several JSON templatescan be run in sequence from a single directory without intervention. Before running, usethe pre-checks option on the directory to verify the templates including sequence.

HOL-2011-91-SDC

Page 47HOL-2011-91-SDC

Page 48: Table of Contents - VMwaredocs.hol.vmware.com/HOL-2020/hol-2011-91-sdc_pdf_en.pdf1. Upgrade and Patch ESXi hosts. 2. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances.

ConclusionThank you for participating in the VMware Hands-on Labs. Be sure to visithttp://hol.vmware.com/ to continue your lab experience online.

Lab SKU: HOL-2011-91-SDC

Version: 20191021-175657

HOL-2011-91-SDC

Page 48HOL-2011-91-SDC