Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
|
|
- Arron Bryant
- 6 years ago
- Views:
Transcription
1 STO1960BU vsphere Encryption for Virtual Machines and vsan Encryption Deep Dive VMworld 2017 Content: Not for publication Jase McCarty & Mike Foley #VMworld #STO1960
2 Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitment from VMware to deliver these features in any generally available product. Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind. Technical feasibility and market demand will affect final delivery. Pricing and packaging for any new technologies or features discussed or presented have not been determined. #STO1960BU CONFIDENTIAL 2
3 VMware Data At Rest Encryption Choices vsphere SAN VM Encryption NAS Shared Storage Storage vsan vsphere vsan Encryption vsan Datastore vsan 3
4 VM Encryption
5 VM Encryption Manageability Encryption managed via Storage Policies Scalable & Easy to Manage Encryption No modification within the Guest. VM Agnostic Guest OS VM Hardware version Datastore Independent NFS, iscsi, VMFS, vsan Encrypts both VMDK and VM files No access to encryption keys by the Guest Full support of Encrypted vmotion Encrypted VM = vmotion is ALWAYS encrypted Not Deduplication/Compression friendly 5
6 VM Encryption How it works HA Cluster VM Encryption Module VM Encryption Module VM Encryption Module ESXi ESXi ESXi DEK: XTS-AES-256 KEK: AES-256 VM Encryption Module IOIO IOIO IOIO ESXi *&* %*^ $&*( vcenter 3 rd Party KMIP-Compliant KMS Previously encrypted VM - Data Encryption Key (DEK) is created by host. DEK encrypted with Key Encryption Key (KEK) from the KMS Encrypted VM is powered on vcenter requests KEK from Key Management Server Key Manager returns the KEK to vcenter which passes it to all hosts in an HA cluster (KEK is not persisted in vcenter!) KMIP-provided KEK used to decrypt DEK Hypervisor level Encryption and Decryption begins without Guest OS modification or knowledge! 6
7 VM Encryption ESXi Key Cache and HA behavior HA Cluster Key Cache Key Cache Key Cache 7
8 Data Encryption Key (DEK).vs. Key Encryption Key (KEK) KMS Cluster Alias and KEK key ID are stored with the VM vcenter reads encryption.keysafe to find out where to get the KEK scsi0:0.present = "TRUE" scsi0:0.redo = "" tools.synctime = "FALSE" extendedconfigfile = "Centos 7.vmxf" migrate.encryptionmode = "disabled" encryption.keysafe = "vmware:key/list/(pair/(fqid/<vmware- NULL>/KMS01/5,HMAC%2dSHA%2d256,MhtSNrQA8FC9DehrUiiw2SPjamJpfk5x5FNbYcvRgKpJFaWw7iHDeaxFBHLXAU8OQdVoSLJW%2f wosellr7ktx9etzlb63rssetceu%2banx4e2ighbybkjilnlwugabzmjjhqnl%2bl6jxl2fu5e8bm2dq%2boiezyn9rcqceoy8svdorg%3 d))" encryption.data = "k3oonxfhkgeg4vrsk+aeamuxpaobvbi4wwdr26vjkyb6+tjioizcbf7klpou3hcufopzmhsc7cguxwyoqcm2+fbhsu/huh1qkhomyrdwg nb05vll9n2e4/8pzhynwmmrwtv51exfuch6z9n0ivt0wcyvvxsfm/eohf2/l8+ef32/psnn8mmlt99652aespqn0mqduumwhj/fch8wvz9 /BFHbsXQoK1EHKt1gH5zmA/UDXhlYXC+E9TV4xgfI/ID8u48M7e5SuTdJumWPNcaO+1Y7LTuOzFc+iNJ5Y8yksLR8bLXYb3Bca19EZYcbz Dj6nEw0rQ8uyo4v7zd1WANBKEfvqm+F1qAE7bNl5p/MR8c=" VMworld 2017 Content: Not for publication DEK is stored with the VM and encrypted with the KEK provided by the KMS and stored in the ESXi key cache 8
9 UI Encrypt / Decrypt demo UI Enable-Disable Encryption video 9
10 VM Data is Protected by Customer Provided Key Encryption Keys KEK KMS provided Key Encryption Key Protected by customer s Key Management Server DEK - ESXi generated data encryption key Protected by a KMS Key Encryption Key VM Data Protected by an ESXi generated DEK that is encrypted by the KMS provided KEK Only the holder of the KMS provided key can access the VM data! KMS Keys (KEK) do NOT persist in vcenter Customers are responsible for managing the lifecycle of KMS keys! 10
11 vsan Encryption
12 Secure Data with Software Encryption for Data at Rest vsphere vsan Datastore vsan Protect against unauthorized access and transfer drives safely with software data-atrest encryption Set at the cluster level for simplified operations and rekeying for greater security Control costs and choice by selecting industry-standard flash or magnetic drives Support space efficiency features, like deduplication and compression Integrate with all major key management technologies that are KMIP 1.1 compliant
13 vsan Encryption Overview Encryption managed at the cluster level One-Click Datastore Encryption Encrypts entire vsan datastore All objects No modification within the Guest. VM Agnostic Guest OS HW Version No access to encryption keys by Guests Encryption Compatible with All-Flash or Hybrid architectures Dedupe/Compression only on All-Flash Requires Disk Format Change (DFC) and v5 On-Disk Format 13
14 vsan Encryption Setup vsphere vsan vsan Datastore KMS Connection Setup in vcenter KEK, Cluster KEK ID, HostKey created KMS Connection, Cluster KEK ID & Host Key pushed to hosts Rolling Disk Format Change Across Disk Groups KMS vsan is Encrypted 14
15 vsan Encryption - Ingesting Writes Disk Group Cache Tier Capacity Tier Write I/O broken into 64K chunks Checksum performed on 4K blocks Encryption performed on 2K blocks Lands in buffer Decrypt performed on 4K blocks Dedupe performed on 4K blocks Compression performed on 4K blocks Encryption performed on 2-4K blocks Lands in persistent tier (capacity) 15
16 vsan Encryption Rekey Operations Rekeying managed at the cluster level Simple Datastore Rekeying Shallow Rekey Key Encryption Keys (KEK) No impact to storage operations Automatically rekeyed from KMS Deep Rekey Disk Encryption Keys (DEK) Disks can be re-encrypted Requires data evacuation from disk Rolling process similar to enabling/disabling encryption May need Reduced Redundancy Entirely dependent on Storage Policies 2 Node or 3 Node configurations 16
17 Cryptographic Operations Considerations
18 Common Libraries, Common Setup of KMS 18
19 New Role: No Cryptography Administrator Most of the same privileges as Administrator VM Operations Power On/Off Boot Shutdown vmotion vsan Operations Manage vsan normally Does not include any Cryptographic Operations No Encrypt / No Decrypt No Enabling/Disabling of vsan Encryption No Console Access to Encrypted virtual machines No ability to download encrypted VM s No ability to add hosts to vcenter 19
20 Encryption Nitty-Gritty Keys, Algorithms, etc. VM and vsan Encryption XTS-AES-256 length keys for data Key generated by the ESXi host Referred to as the Data Encryption Key or DEK AES-128 or AES-256 for key encryption Key generated by the KMS. Referred to as the Key Encryption Key or KEK KEK key length is configured on the KMS, not on vcenter vmotion Encryption keys Generated by vcenter, not KMS One Time Use Only! AES-256 key 64-bit Nonce 20
21 Key Management Configuration 21
22 Key Manager The next datacenter requirement Encryption is becoming pervasive Regulatory requirements for encryption are growing Key Manager availability is a business critical requirement Not unlike DNS or NTP! Plan like your life depends on this Do you have just one DNS server? No! What if it goes down? THAT is how you should plan key management! 22
23 Key Manager Topology KMS Cluster/Alias KMS A KMS B KMS C vsphere Datastore 23
24 Multi-Site Key Manager Topology Site A KMS Cluster/Alias KMS Cluster/Alias KMS A KMS B KMS CD KMS E KMS F vsphere VMworld 2017 Content: Not for vsphere Site B publication Datastore Datastore 24
25 Multi-Site Key Manager Topology Order is important Site A KMS Cluster /Alias Site B KMS-A KMS-B KMS-C KMS-D KMS-E KMS-F vsphere Datastore SITE A KMS Order KMS-A KMS-B KMS-C KMS-D KMS-E KMS-F SITE B KMS Order KMS-D KMS-E KMS-F KMS-A KMS-B KMS-C vsphere Datastore 25
26 Comparisons Between VM Encryption & vsan Encryption
27 VM Encryption & vsan Comparison Encryption Point: One Key Per VM Key Manger Support: Multiple via API vsphere SAN Encrypted vc/psc: Not Supported NAS Shared Storage Storage vsan vsphere Encrypted vc/psc: Supported vsan Datastore vsan or Encryption Point: One Key Per vsan Cluster distribution Key Manger Support: One per vsan Cluster VM Encryption Datastore Support: Any vsphere Datastore Datastore Support: vsan Datastore vsan Encryption 27
28 VM Encryption & vsan Encryption Use Cases Multi-Tenancy vsan VDI Tenant A Tenant C Tenant B Tenant D SAN NAS vsan vsan Storage Mobility Virtual Desktops VDI Deduplication & Compression
29 But what about performance?!?!?! It s not just the speed of encryption The speed of AES-NI (processor generation/model specific) Important to consider but not biggest factor How much and what type of I/O a VM is generating? How many encrypted VM s per host Storage infrastructure? Consider storage speed / bandwidth / protocol Different media types (HDD, SDD, NVME) each have a different impact on performance Initial Encryption vs. Steady State Understand your workloads, use vrops! VM Encryption: Existing vs. New Application Deployment Encrypt BEFORE installing OS & S/W! 29
30 VM Encryption Performance Whitepaper Performance Whitepaper Highlights Impact on I/O performance is minimal when using enterprise-class SSD or VMware vsan storage Locally attached NVME drives can introduce per-i/o latencies which could affect performance Storage layer has just as much if not more impact on total performance Encryption will introduce a high CPU utilization 30
31 PowerCLI Automation with VM & vsan Encryption VMworld 2017 Content: Not for publication
32 PowerCLI for VM Encryption: Disk encryption Tasks $vmname = Tiny #Encrypt a VM Get-VM -Name $vmname Enable-VMencryption #Shallow Re-Key of a VM Get-VM -Name $vmname Set-VMEncryptionKey -KMSClusterId NewKMS # Encrypt just the Home object $EP = Get-SpbmStoragePolicy -Name "Encryption Policy Get-VM -Name $vmname Enable-VMEncryption -Policy $EP -SkipHardDisks #Decrypt a VM Get-VM -Name $vmname Disable-VMencryption 32
33 PowerCLI for VM Encryption: Report on Encryption status 33
34 What KMS is providing the host keys? 34
35 PowerCLI: vsan Encryption Rekey Examples $Cluster = Get-Cluster -name Cluster # Get the vsan Cluster Configuration $VsanVcClusterConfig = Get-VsanView -Id VsanVcClusterConfigSystem-vsan-cluster-config-system # Perform a Deep Rekey $VsanVcClusterConfig.VsanEncryptedClusterRekey_Task($Cluster.ExtensionData.MoRef,$true,$false) # Perform a Shallow Rekey $VsanVcClusterConfig.VsanEncryptedClusterRekey_Task($Cluster.ExtensionData.MoRef,$false,$false) # Get vsan Cluster Encryption State $VsanVcClusterConfig.VsanClusterGetConfig($Cluster.ExtensionData.MoRef).DataEncryptionConfig 35
36 PowerCLI: vsan Encryption Report Sample.\Vsan-EncryptionReport.ps1 -vcenter vcsa.vcorp.com -Clustername 36
37 PowerCLI: vsan Encryption Report Sample.\Vsan-EncryptionReport.ps1 -vcenter vcsa.vcorp.com -Clustername 37
38 Summary
39 Summary Ease of Operations and Deployment PowerCLI and other API support for automation Ease of Manageability No change to individual virtual machine operating systems Common encryption solution across all virtual machines Flexibility Encrypt based on workload type and security requirements Choice Standards Based Key Management Secure AES-XTS-256 encryption using modules that are FIPS evaluated 39
40 Questions?
41 Other sessions to consider: #SER1361BU Security Operations for VMware vsphere with VMware vrealize Log Insight #SER1848BU vsphere Platform Security Update #STO1960BU vsphere Encryption for Virtual Machines and vsan Encryption Deep Dive VMworld 2017 Content: Not for publication #GRC2226BU Operate Clouds at Least Privilege
42
43
Current Issues
SER1848BE vsphere Platform Security Update Mike Foley Technical Market Architect vsphere Security Abhijat Singh Product Manager vsphere Security #VMworld #SER1848BE Current Issues Current Issues: SMB v1
More informationvsphere Platform Security Update Day 2 Security Operations VMworld 2017 Content: Not for publication
SER1848BU vsphere Platform Security Update Mike Foley #VMworld #SER1848BU vsphere Platform Security Update Day 2 Security Operations VMworld 2017 Content: Not for publication Current Issues Current Issues:
More informationvsan Data Encryption at Rest January 18, 2018
January 18, 2018 1 Table of Contents 1. Introduction 1.1.An introduction to Data at Rest Encryption 2. Overview 2.1.Common Terminologies 2.2.vSAN Data at Rest Encryption Specifics 3. Architecture of vsan
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
STO1926BU A Day in the Life of a VSAN I/O Diving in to the I/O Flow of vsan John Nicholson (@lost_signal) Pete Koehler (@vmpete) VMworld 2017 Content: Not for publication #VMworld #STO1926BU Disclaimer
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
STO1794BE Evolution of vsan Vijay Ramachandran Sr.Director, Product Management Christos Karamanolis VMware Fellow & CTO of Storage & Availability #VMworld #STO1794BE Disclaimer This presentation may contain
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
STO1515BU Extreme Performance Series: vsan Performance Troubleshooting Amitabha Banerjee and Suraj Kasi #VMworld #STO1515BU Disclaimer This presentation may contain product features that are currently
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
NET2896BU Expanding Protection Across the Software Defined Data Center with Encryption VMworld 2017 Chris Corde Senior Director, Security Product Management Content: Not for publication #VMworld #NET2896BU
More informationVMware Virtual SAN. Technical Walkthrough. Massimiliano Moschini Brand Specialist VCI - vexpert VMware Inc. All rights reserved.
VMware Virtual SAN Technical Walkthrough Massimiliano Moschini Brand Specialist VCI - vexpert 2014 VMware Inc. All rights reserved. VMware Storage Innovations VI 3.x VMFS Snapshots Storage vmotion NAS
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
STO1206BU Interpreting performance metrics in your vsan environment Pete Koehler (@vmpete) Bradley Mott #VMworld #STO1206BU Disclaimer This presentation may contain product features that are currently
More informationWHITE PAPER DECEMBER VMWARE vsphere VIRTUAL MACHINE ENCRYPTION. Virtual Machine Encryption Management
WHITE PAPER DECEMBER 2017 VMWARE vsphere VIRTUAL MACHINE ENCRYPTION Virtual Machine Encryption Management Contents Executive Summary.... 3 Traditional Encryption Solutions.... 3 In-Guest Encryption....
More informationVMWARE VSAN LICENSING GUIDE - MARCH 2018 VMWARE VSAN 6.6. Licensing Guide
- MARCH 2018 VMWARE VSAN 6.6 Licensing Guide Table of Contents Introduction 3 License Editions 4 Virtual Desktop Infrastructure... 5 Upgrades... 5 Remote Office / Branch Office... 5 Stretched Cluster with
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
STO1297BE Stretched Clusters or VMware Site Recovery Manager? We Say Both! Jeff Hunter, VMware, @jhuntervmware GS Khalsa, VMware, @gurusimran #VMworld Disclaimer This presentation may contain product features
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
PBO1221BE Beginners Guide to the Software-Defined Data Center Kyle Gleed, Group Manager, Technical Marketing Ben Sier, Staff Architect, Technical Marketing #VMworld #PBO1221BE Disclaimer This presentation
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
SER2779BE What s New in vcenter Server Madhup Gulati Director, Product Management VMware VMworld 2017 Content: Not for publication #VMworld #SER2779BE Disclaimer This presentation may contain product features
More informationVMware vsphere APIs for I/O Filtering (VAIO) November 14, 2017
VMware vsphere APIs for I/O Filtering (VAIO) November 14, 2017 1 Table of Contents 1. Introduction to vsphere APIs for I/O Filtering 1.1.Introduction to vsphere APIs for I/O Filtering 2. VAIO Technical
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
SER1906BU VMware and Chef - Leveraging the vsphere API Together #VMworld #SER1906BU Disclaimer This presentation may contain product features that are currently under development. This overview of new
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
STO1500BU A Real-World Demonstration of Assessing and Sizing a Customer Environment for vsan VMworld 2017 Aparna Somaiah Product Manager Ankur Huralikoppi Sr. MTS Content: Not for publication #VMworld
More informationEncryption First Published On: Last Updated On:
First Published On: 10-27-2017 Last Updated On: 04-27-2018 1 Table of Contents 1. VM and vsan Encryption 1.1.Key Manager Concepts and Topology Basics for VM and vsan Encryption 1.2.vSphere Virtual Machine
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
STO1498BU Tech Preview: Disaster Recovery with ware Cloud on AWS world 2017 Content: Not for publication Ben Meadowcroft, ware @BenMeadowcroft GS Khalsa, ware @gurusimran #world #STO1498BU Disclaimer This
More informationDetail the learning environment, remote access labs and course timings
Course Duration: 4 days Course Description This course has been designed as an Introduction to VMware for IT Professionals, but assumes that some labs have already been developed, with time always at a
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
LHC1882BE Service Overview for VMware Cloud on AWS Marc Umeno #VMworld #LHC1882BE Disclaimer This presentation may contain product features that are currently under development. This overview of new technology
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
SER2342BU What s New with vsphere? Mike Adams Sr. Director CPBU madams@vmware.com #VMworld #SER2342BU Disclaimer This presentation may contain product features that are currently under development. This
More informationModern hyperconverged infrastructure. Karel Rudišar Systems Engineer, Vmware Inc.
Modern hyperconverged infrastructure Karel Rudišar Systems Engineer, Vmware Inc. 2 What Is Hyper-Converged Infrastructure? - The Ideal Architecture for SDDC Management SDDC Compute Networking Storage Simplicity
More informationIOmark-VM. VMware VSAN Intel Servers + VMware VSAN Storage SW Test Report: VM-HC a Test Report Date: 16, August
IOmark-VM VMware VSAN Intel Servers + VMware VSAN Storage SW Test Report: VM-HC-160816-a Test Report Date: 16, August 2016 Copyright 2010-2016 Evaluator Group, Inc. All rights reserved. IOmark-VM, IOmark-VDI,
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
SER2734BU Extreme Performance Series: Byte-Addressable Nonvolatile Memory in vsphere VMworld 2017 Content: Not for publication Qasim Ali and Praveen Yedlapalli #VMworld #SER2734BU Disclaimer This presentation
More informationVMware vsan 6.6. Licensing Guide. Revised May 2017
VMware 6.6 Licensing Guide Revised May 2017 Contents Introduction... 3 License Editions... 4 Virtual Desktop Infrastructure... 5 Upgrades... 5 Remote Office / Branch Office... 5 Stretched Cluster... 7
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
SER1815BU DRS Advancements: What's New and What Is Being Cooked Up in Resource Management Land VMworld 2017 Thomas Bryant, VMware, Inc - @kix1979 Maarten Wiggers, VMware, Inc Content: Not for publication
More informationVMware Virtual SAN Technology
VMware Virtual SAN Technology Today s Agenda 1 Hyper-Converged Infrastructure Architecture & Vmware Virtual SAN Overview 2 Why VMware Hyper-Converged Software? 3 VMware Virtual SAN Advantage Today s Agenda
More information2014 VMware Inc. All rights reserved.
2014 VMware Inc. All rights reserved. Agenda Virtual SAN 1 Why VSAN Software Defined Storage 2 Introducing Virtual SAN 3 Hardware Requirements 4 DEMO 5 Questions 2 The Software-Defined Data Center Expand
More informationVMware Cloud Foundation Real-World Success with Professional Services
VMware Cloud Foundation Real-World Success with Professional Services Jonathan McDonald, VMware, Inc. Tom Stephens, VMware, Inc. #vmworld PRV1669BU #PRV1669BU Disclaimer This presentation may contain product
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
ADV1593BE Horizon Apps and JMP: Technical Deep Dive Barak Nissim Systems Engineer - EUC Practice, VMware Hilko Lantinga Technical Marketing Architect EUC, VMware #VMworld #ADV1593BE Disclaimer This presentation
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
LHC2384BU VMware Cloud on AWS A Technical Deep Dive Ray Budavari @rbudavari Frank Denneman - @frankdenneman #VMworld #LHC2384BU Disclaimer This presentation may contain product features that are currently
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
SER2540BU vsphere HA: Leverage Its Full Potential Roman Konarev Aalap Desai #VMworld #SER2540BU Disclaimer This presentation may contain product features that are currently under development. This overview
More informationVMWARE VIRTUAL SAN: ENTERPRISE-GRADE STORAGE FOR HYPER- CONVERGED INFRASTRUCTURES CHRISTOS KARAMANOLIS RAWLINSON RIVERA
VMWARE VIRTUAL SAN: ENTERPRISE-GRADE STORAGE FOR HYPER- CONVERGED INFRASTRUCTURES CHRISTOS KARAMANOLIS RAWLINSON RIVERA Copyright 2016 EMC Corporation. All rights reserved. 2 Agenda 1 Virtual SAN Overview
More informationWhat's New in VMware vsan 6.6 First Published On: Last Updated On:
First Published On: 04-10-2017 Last Updated On: 11-28-2018 1 Table Of Contents 1. Introduction 1.1.Enterprise-Class Storage for HCI 2. Security 2.1.Native Encryption 2.2.Compliance 3. Management 3.1.Proactive
More informationDelivering HCI with VMware vsan and Cisco UCS
BRKPAR-2447 Delivering HCI with VMware vsan and Cisco UCS Bhumik Patel Director, Technical Alliances, VMware bhumikp@vmware.com 2 Blistering Pace of vsan Adoption Fastest since ESX 10,000 Customers $300M
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
SER3052BU How VMware vsphere and NVIDIA s Accelerate Your Organization Raj Rao, NVIDIA GRID Product Management Ziv Kalmanovich, vsphere ESXi Product Management #VMworld #SER3052BU Disclaimer This presentation
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
SER1912BE VMware Open-Source SDKs From Getting Started to Web App in One Hour Alan Renouf Sr Product Line Manager, Vmware Steve Trefethen Sr. Manager R&D, VMware VMworld 2017 Content: Not for publication
More informationTECHNICAL WHITE PAPER - JANUARY VMware Horizon 7 on VMware vsan Best Practices TECHNICAL WHITE PAPER
TECHNICAL WHITE PAPER - JANUARY 2019 VMware Horizon 7 on VMware vsan Best Practices TECHNICAL WHITE PAPER Table of Contents Introduction 3 Purpose... 3 Audience... 3 Technology Overview and Best Practices
More informationVMware vsphere Clusters in Security Zones
SOLUTION OVERVIEW VMware vsan VMware vsphere Clusters in Security Zones A security zone, also referred to as a DMZ," is a sub-network that is designed to provide tightly controlled connectivity to an organization
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
STO2591BU Amplifying VMware vsan Performance: A Deep Dive into Testing and Tuning (with Lessons Learned) by Western Digital Jonathan Flynn Virtualization Technologist, Western Digital Twitter: @levelrage
More informationvsan Security Zone Deployment First Published On: Last Updated On:
First Published On: 06-14-2017 Last Updated On: 11-20-2017 1 1. vsan Security Zone Deployment 1.1.Solution Overview Table of Contents 2 1. vsan Security Zone Deployment 3 1.1 Solution Overview VMware vsphere
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
MGT1758BE Effectively Operating an Automated Cloud Jad El-Zein @virtualjad Vincent Meoc @vmeoc #VMworld #MGT1758BE Disclaimer This presentation may contain product features that are currently under development.
More informationBraindumpsIT. BraindumpsIT - IT Certification Company provides Braindumps pdf!
BraindumpsIT http://www.braindumpsit.com BraindumpsIT - IT Certification Company provides Braindumps pdf! Exam : 2V0-602 Title : VMware vsphere 6.5 Foundations Vendor : VMware Version : DEMO Get Latest
More informationRun Stateful Apps on Kubernetes with PKS: Highlight WebLogic Server
CNA2009BU Run Stateful Apps on Kubernetes with PKS: Highlight WebLogic Server Rahul Srivastava, VMware, Inc. Simone Morellato, VMware, Inc. #vmworld #CNA2009BU Disclaimer This presentation may contain
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
LHC2103BU NSX and VMware Cloud on AWS: Deep Dive Ray Budavari, Senior Staff Technical Product Manager NSX @rbudavari #VMworld #LHC2103BU Disclaimer This presentation may contain product features that are
More informationWhat's New in vsan 6.2 First Published On: Last Updated On:
First Published On: 07-07-2016 Last Updated On: 08-23-2017 1 1. Introduction 1.1.Preface 1.2.Architecture Overview 2. Space Efficiency 2.1.Deduplication and Compression 2.2.RAID - 5/6 (Erasure Coding)
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
PBO3328BUS Tech Preview: Deliver a dynamic virtual workspace with VMware Horizon and HPE s Composable Infrastructure built on HPE Synergy & VMware Cloud Foundation VMworld 2017 Bhumik Patel Technical Alliances,
More informationvsan Remote Office Deployment January 09, 2018
January 09, 2018 1 1. vsan Remote Office Deployment 1.1.Solution Overview Table of Contents 2 1. vsan Remote Office Deployment 3 1.1 Solution Overview Native vsphere Storage for Remote and Branch Offices
More informationCompute - 36 PCPUs (72 vcpus) - Intel Xeon E5 2686 v4 (Broadwell) - 512GB RAM - 8 x 2TB NVMe local SSD - Dedicated Host vsphere Features - vsphere HA - vmotion - DRS - Elastic DRS Storage - ESXi boot-from-ebs
More informationNative vsphere Storage for Remote and Branch Offices
SOLUTION OVERVIEW VMware vsan Remote Office Deployment Native vsphere Storage for Remote and Branch Offices VMware vsan is the industry-leading software powering Hyper-Converged Infrastructure (HCI) solutions.
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
NET1949BU Seamless Network Connectivity for Virtual and Bare-metal s with NSX Suresh Thiru Sridhar Subramanian VMworld 2017 Content: Not for publication VMworld 2017 - NET1949BU Disclaimer This presentation
More informationIOmark- VM. HP HP ConvergedSystem 242- HC StoreVirtual Test Report: VM- HC b Test Report Date: 27, April
IOmark- VM HP HP ConvergedSystem 242- HC StoreVirtual Test Report: VM- HC- 150427- b Test Report Date: 27, April 2015 Copyright 2010-2015 Evaluator Group, Inc. All rights reserved. IOmark- VM, IOmark-
More informationVxRail: Level Up with New Capabilities and Powers
VxRail: Level Up with New Capabilities and Powers Piotr Karaszewski Jakub Bałchan GLOBAL SPONSORS HCI and CI Tu r n k e y e x p e r i e n c e Engineered Manufactured Managed Supported Sustained APPLIANCES
More informationExam Questions 1V0-621
Exam Questions 1V0-621 VMware Certified Associate 6 Data Center Virtualization https://www.2passeasy.com/dumps/1v0-621/ 1.. What is the option to increase CPU resources for a virtual machine (VM)? A. decreases
More informationHedvig as backup target for Veeam
Hedvig as backup target for Veeam Solution Whitepaper Version 1.0 April 2018 Table of contents Executive overview... 3 Introduction... 3 Solution components... 4 Hedvig... 4 Hedvig Virtual Disk (vdisk)...
More informationIntroduction to Virtualization
Introduction to Virtualization Module 2 You Are Here Course Introduction Introduction to Virtualization Creating Virtual Machines VMware vcenter Server Configuring and Managing Virtual Networks Configuring
More informationTable of Contents HOL SLN
Table of Contents Lab Overview - - Modernizing Your Data Center with VMware Cloud Foundation... 3 Lab Guidance... 4 Module 1 - Deploying VMware Cloud Foundation (15 Minutes)... 7 Introduction... 8 Hands-on
More information[VMICMV6.5]: VMware vsphere: Install, Configure, Manage [V6.5]
[VMICMV6.5]: VMware vsphere: Install, Configure, Manage [V6.5] Length Delivery Method : 5 Days : Instructor-led (Classroom) Course Overview This five-day course features intensive hands-on training that
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
STO1193BU A Closer Look at vsan Networking Design and Configuration Considerations Cormac Hogan Andreas Scherr VMworld 2017 Content: Not for publication #VMworld #STO1193BU Disclaimer This presentation
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
PBO1295BU VMware Validated Design for Remote/Branch Office Technical Overview VMworld 2017 Content: Not for publication ##VMworld #PBO1295BU Disclaimer This presentation may contain product features that
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
MGT3166BU A Simplified Approach to Lifecycle Management for vrealize Suite Ganesh Subramaniam Group Product Line Manager, VMware Gopal Srinivasan Director Engineering, VMware #VMworld #MGT3166BU Disclaimer
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
STO2451BU Automating Disaster Recovery Operations in the SDDC with SRM, vrealize Automation, and NSX VMworld 2017 Shobhan Lakkapragada Director of Product Management Stefan Tsonev Director of Engineering
More informationVMware vsphere 5.5 Professional Bootcamp
VMware vsphere 5.5 Professional Bootcamp Course Overview Course Objectives Cont. VMware vsphere 5.5 Professional Bootcamp is our most popular proprietary 5 Day course with more hands-on labs (100+) and
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
LHC1753BU Case Study: How VMware NSX Is Empowering a Service Provider to Help Customers Achieve and Maintain Industry Compliance VMworld 2017 Content: Not for publication #VMworld #LHC1753BU Disclaimer
More information"Software-defined storage Crossing the right bridge"
Navigating the software-defined storage world shaping tomorrow with you René Huebel "Software-defined storage Crossing the right bridge" SDS the model and the promises Control Abstraction The promises
More informationNET1821BU THE FUTURE OF NETWORKING AND SECURITY WITH NSX-T Bruce Davie CTO, APJ 2
NET1821BU The Future of Network Virtualization with NSX-T #VMworld #NET1821BU NET1821BU THE FUTURE OF NETWORKING AND SECURITY WITH NSX-T Bruce Davie CTO, APJ 2 DISCLAIMER This presentation may contain
More informationIntroduction to Virtualization. From NDG In partnership with VMware IT Academy
Introduction to Virtualization From NDG In partnership with VMware IT Academy www.vmware.com/go/academy Why learn virtualization? Modern computing is more efficient due to virtualization Virtualization
More informationIT Challenges - DC Track
IT Challenges - DC Track Hyperconverged infrastructure : architecture of the datacenter for the future Stefan Verbist VMware Territory SE sverbist@vmware.com 2014 VMware Inc. All rights reserved. The Convergence
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
NET1192BE Multisite Networking & Security with Cross-vC NSX Josh Coulling Networking & Security Senior System Engineer #VMworld #NET1192BE Disclaimer This presentation may contain product features that
More informationConfiguration Maximums. Update 1 VMware vsphere 6.5 VMware ESXi 6.5 vcenter Server 6.5
Configuration s Update 1 VMware vsphere 6.5 VMware ESXi 6.5 vcenter Server 6.5 Configuration s You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/
More informationVMware Virtual SAN. High Performance Scalable Storage Architecture VMware Inc. All rights reserved.
VMware Virtual SAN High Performance Scalable Storage Architecture 2014 VMware Inc. All rights reserved. Agenda Importance of Software Defined approach for Storage Introduction VMware Virtual SAN Key Properties
More informationvsan All Flash Features First Published On: Last Updated On:
First Published On: 11-07-2016 Last Updated On: 11-07-2016 1 1. vsan All Flash Features 1.1.Deduplication and Compression 1.2.RAID-5/RAID-6 Erasure Coding Table of Contents 2 1. vsan All Flash Features
More informationvsan Management Cluster First Published On: Last Updated On:
First Published On: 07-07-2016 Last Updated On: 03-05-2018 1 1. vsan Management Cluster 1.1.Solution Overview Table Of Contents 2 1. vsan Management Cluster 3 1.1 Solution Overview HyperConverged Infrastructure
More informationVMware vsphere 5.5 Advanced Administration
Format 4-day instructor led training Course Books 630+ pg Study Guide with slide notes 180+ pg Lab Guide with detailed steps for completing labs vsphere Version This class covers VMware vsphere 5.5 including
More informationVirtual Volumes FAQs First Published On: Last Updated On:
First Published On: 03-20-2017 Last Updated On: 07-13-2018 1 Table of Contents 1. FAQs 1.1.Introduction and General Information 1.2.Technical Support 1.3.Requirements and Capabilities 2 1. FAQs Frequently
More informationVxRail: Level Up with New Capabilities and Powers
VxRail: Level Up with New Capabilities and Powers Sasho Tasevski Senior Manager, Systems Engineering Dell EMC SEE GLOBAL SPONSORS Increasing complexity of application ecosystems is driving IT transformation
More informationVMware vsphere: Install, Configure, Manage plus Optimize and Scale- V 6.5. VMware vsphere 6.5 VMware vcenter 6.5 VMware ESXi 6.
VMware vsphere V 6.5 VMware vsphere: Install, Configure, Manage plus Optimize and Scale- V 6.5 vsphere VMware vsphere 6.5 VMware vcenter 6.5 VMware ESXi 6.5 VMware vsphere vcenter ESXi ESXi VMware vcenter
More informationStorage Strategies for vsphere 5.5 users
Storage Strategies for vsphere 5.5 users Silverton Consulting, Inc. StorInt Briefing 2 Introduction VMware vsphere is the number one hypervisor solution in the world with more than 500,000 customers worldwide.
More informationVMware vsphere Customized Corporate Agenda
VMware vsphere Customized Corporate Agenda It's not just VMware Install, Manage, Configure (Usual VCP Course). For working professionals, just VCP is not enough, below is the custom agenda. At the outset,
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
SER1534BU vsphere Performance Troubleshooting and Root Cause Analysis Brett Guarino, VMware, Inc Steve Baca, VMware, Inc VMworld 2017 Content: Not for publication #VMworld #SER1534BU Disclaimer This presentation
More informationACCELERATE THE JOURNEY TO YOUR CLOUD
ACCELERATE THE JOURNEY TO YOUR CLOUD With Products Built for VMware Rob DeCarlo and Rob Glanzman NY/NJ Enterprise vspecialists 1 A Few VMware Statistics from Paul Statistics > 50% of Workloads Virtualized
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
STO3308BES NetApp HCI. Ready For Next. Enterprise-Scale Hyper Converged Infrastructure Gabriel Chapman: Sr. Mgr. - NetApp HCI GTM #VMworld #STO3308BES Disclaimer This presentation may contain product features
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
SER1086BU Manage Health, Performance and Capacity in Your Data Center, Using vsphere with Operations Management (vsom) 6.5 Himanshu Singh Kyle Ruddy VMworld 2017 Content: Not for publication #VMworld #SER1086BU
More informationWhat's New in vsphere?
INF1502 What's New in vsphere? Michael Adams, Vmware madams@vmware.com Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents
More informationDisclaimer CONFIDENTIAL 2
Disclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitment from VMware to deliver these features in any generally
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
ADV1582BE Solve your Citrix Problems with VMware Technologies Nick Jeffries, Senior Solutions Architect, VMware Sebastian Brand, Lead Systems Engineer, VMware #VMworld #ADV1582BE Disclaimer This presentation
More informationVMWARE EBOOK. Easily Deployed Software-Defined Storage: A Customer Love Story
VMWARE EBOOK Easily Deployed Software-Defined Storage: A Customer Love Story TABLE OF CONTENTS The Software-Defined Data Center... 1 VMware Virtual SAN... 3 A Proven Enterprise Platform... 4 Proven Results:
More informationDisclaimer This presentation may contain product features that are currently under development. This overview of new technology represents no commitme
SAI2803BU The Road to Micro- Segmentation with VMware NSX #VMworld #SAI2803BU Disclaimer This presentation may contain product features that are currently under development. This overview of new technology
More informationDeep Dive on SimpliVity s OmniStack A Technical Whitepaper
Deep Dive on SimpliVity s OmniStack A Technical Whitepaper By Hans De Leenheer and Stephen Foskett August 2013 1 Introduction This paper is an in-depth look at OmniStack, the technology that powers SimpliVity
More informationvrealize Operations Management Pack for vsan 1.0 Guide
vrealize Operations Management Pack for vsan 1.0 Guide This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To
More informationTable of Contents HOL HCI
Table of Contents Lab Overview - - vsan v6.6.1 - Getting Started... 2 Lab Guidance... 3 Module 1 - vsan 6.6.1 Setup and Enablement (15 Minutes,Beginner)... 9 Introduction... 10 VMware vsan Overview...
More informationHCI mit VMware vsan Radikal einfach und vollständig in die SDDC Strategie integriert
HCI mit VMware vsan Radikal einfach und vollständig in die SDDC Strategie integriert Februar 2018 Falko Lucas SDS Technical Specialist flucas@vmware.com Digitalisierung als Treiber für die Transformation
More informationVMware vsan Ready Nodes
VMware vsan Ready Nodes Product Brief - August 31, 2017 1 of 7 VMware vsan Ready Nodes Hyperconverged Infrastructure Appliance August 2017 Making the best decisions for Information Management 2017 Evaluator
More informationDumpExam. The best exam dump, valid dumps PDF, accurate exam materials provider
DumpExam http://www.dumpexam.com The best exam dump, valid dumps PDF, accurate exam materials provider Exam : 2V0-602 Title : VMware vsphere 6.5 Foundations Vendor : VMware Version : DEMO Get Latest &
More informationVMware vsphere with ESX 4.1 and vcenter 4.1
QWERTYUIOP{ Overview VMware vsphere with ESX 4.1 and vcenter 4.1 This powerful 5-day class is an intense introduction to virtualization using VMware s vsphere 4.1 including VMware ESX 4.1 and vcenter.
More informationExpert Reference Series of White Papers. Five Reasons Why You Should Pair VSAN and View
Expert Reference Series of White Papers Five Reasons Why You Should Pair VSAN and View 1-800-COURSES www.globalknowledge.com Five Reasons Why You Should Pair VSAN and View Matt Feeney, VCI, VCP5, VCP-DT,
More informationPBO1064BU VxRack SDDC Deep Dive: Inside VxRack SDDC Powered by VMware Cloud Foundation Jason Marques, Dell EMC Georg Edelmann, VMware VMworld 2017 Con
PBO1064BU VxRack SDDC Deep Dive: Inside VxRack SDDC Powered by VMware Cloud Foundation Jason Marques, Dell EMC Georg Edelmann, VMware VMworld 2017 Content: Not for publication #VMworld #PBO1064BU PBO1064BU
More informationActual4Test. Actual4test - actual test exam dumps-pass for IT exams
Actual4Test http://www.actual4test.com Actual4test - actual test exam dumps-pass for IT exams Exam : 2V0-622PSE Title : VMware Certified Professional 6.5 - Data Center Virtualization (6.5) Exam Vendor
More informationDell EMC Ready Solution for VMware vcloud NFV 3.0 OpenStack Edition Platform
Dell EMC Ready Solution for VMware vcloud NFV 3.0 OpenStack Edition Platform Deployment Automation Architecture Guide for VMware NFV 3.0 with VMware Integrated OpenStack 5.0 with Kubernetes Dell Engineering
More information