Table of Contents Lab Overview - - What's New: vsphere with Operations Management.. 2 Lab Guidance... 3 Module 1 - What's New in vsphere (90 minutes)... 9 vcenter Server Appliance (VSCA)... 10 vcenter Appliance Management... 11 Getting Started with Update Manager... 18 Content Library... 20 Storage IO Control (SIOC) Introduction... 47 HTML5 Host Client... 67 Encrypt VMs... 76 Page 1
Lab Overview - - What's New: vsphere with Operations Management Page 2
Lab Guidance This lab will introduce you to the new features in vsphere with Operations Management. This lab will walk you through step-by-step, so basic vsom experience is not necessary, but it is helpful. If you would like to learn the basics, VMware recommends also taking our lab titled "HOL-SDC-1710-1 " - Intro to vsphere with Operations Management - The Basics." This Hands-On Lab uses a beta version of vcenter, vsphere and ESXi, which is still undergoing development before final release. Product features that are included in this lab are subject to change and there is no commitment from VMware to deliver them in any generally available product. The lab contains one Module: Module 1 - What's New in vsphere(90 minutes - Basic) The latest version of vsphere includes many enhancements to mature features such as vmotion while also including several new features that continue to make vsphere stand apart from the competition. This module will describe these improvements and how they'll deliver value to VMware customers. Lab Captains: Kevin Steil, Sr. Technical Account Manager (Modules 1,2,3,4 & 5) This lab manual can be downloaded from the Hands-on Labs Document site found here: http://docs.hol.vmware.com This lab may be available in other languages. To set your language preference and have a localized manual deployed with your lab, you may utilize this document to help guide you through the process: http://docs.hol.vmware.com/announcements/nee-default-language.pdf Disclaimer This session may contain product features that are currently under development. This session/overview of the new technology represents no commitment from VMware to deliver these features in any generally available product. Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind. Page 3
Technical feasibility and market demand will effect final delivery. Pricing and packaging for any new technologies or features discussed or presented have not been determined. These features are representative of feature areas under development. Feature commitments are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind. Technical feasibility and market demand will affect final delivery. Learn More - External Labs Because you're one of the first people in the world to experience this new Technical Preview version of vsphere with Operations Management, we hope you'll understand that some things just weren't yet ready to show! Be sure to check back, as this lab will be updated when the new version is more complete. In the meantime, if you're interested in getting an introduction to the current vsphere with Operations Management, please check out HOL-SDC-1610: Virtualization 101: vsphere with Operations Management 6. Or, if you'd prefer to see how the current vsphere with Operations Management can help you accomplish more advanced goals inside your datacenter and beyond, please be sure to check out HOL-SDC-1602: vsphere with Operations Management 6: Advanced Topics. Page 4
Location of the Main Console 1. The area in the RED box contains the Main Console. The Lab Manual is on the tab to the Right of the Main Console. 2. A particular lab may have additional consoles found on separate tabs in the upper left. You will be directed to open another specific console if needed. 3. Your lab starts with 90 minutes on the timer. The lab can not be saved. All your work must be done during the lab session. But you can click the EXTEND to increase your time. If you are at a VMware event, you can extend your lab time twice, for up to 30 minutes. Each click gives you an additional 15 minutes. Outside of VMware events, you can extend your lab time up to 9 hours and 30 minutes. Each click gives you an additional hour. Alternate Methods of Keyboard Data Entry During this module, you will input text into the Main Console. Besides directly typing it in, there are two very helpful methods of entering data which make it easier to enter complex data. Page 5
Click and Drag Lab Manual Content Into Console Active Window You can also click and drag text and Command Line Interface (CLI) commands directly from the Lab Manual into the active window in the Main Console. Accessing the Online International Keyboard You can also use the Online International Keyboard found in the Main Console. 1. Click on the Keyboard Icon found on the Windows Quick Launch Task Bar. Page 6
Click once in active console window In this example, you will use the Online Keyboard to enter the "@" sign used in email addresses. The "@" sign is Shift-2 on US keyboard layouts. 1. Click once in the active console window. 2. Click on the Shift key. Click on the @ key 1. Click on the "@" key. Notice the @ sign entered in the active console window. Activation Prompt or Watermark When you first start your lab, you may notice a watermark on the desktop indicating that Windows is not activated. Page 7
One of the major benefits of virtualization is that virtual machines can be moved and run on any platform. The Hands-on Labs utilizes this benefit and we are able to run the labs out of multiple datacenters. However, these datacenters may not have identical processors, which triggers a Microsoft activation check through the Internet. Rest assured, VMware and the Hands-on Labs are in full compliance with Microsoft licensing requirements. The lab that you are using is a self-contained pod and does not have full access to the Internet, which is required for Windows to verify the activation. Without full access to the Internet, this automated process fails and you see this watermark. This cosmetic issue has no effect on your lab. Look at the lower right portion of the screen Please check to see that your lab is finished all the startup routines and is ready for you to start. If you see anything other than "Ready", please wait a few minutes. If after 5 minutes you lab has not changed to "Ready", please ask for assistance. Page 8
Module 1 - What's New in vsphere (90 minutes) Page 9
vcenter Server Appliance (VSCA) The next release of vcenter introduces a native option to protect a vcenter deployment from failures in hardware, hosts and vcenter Appliance services. vcenter High Availability The high availability setup involves deploying a vcenter passive node and a Witness node in addition to the vcenter active node that you are trying to protect. The three nodes form the vcenter HA cluster. Hands On Labs Interactive Simulation: vcenter High Availability This demo will walk you through the configuration of vcenter High Availability Page 10
vcenter Appliance Management The vcenter Server Appliance Management UI (formerly known as VAMI) serves as a control point to monitor and manage vcenter at the appliance level, even when the vsphere web client interface is down. In addition to configuring and editing network and time settings, checking for appliance updates automatically, and edit login credentials, you will be able to monitor resource utilization, monitor the vcenter database by data type, and be alerted when certain thresholds of database capacity are reached. The Appliance Management UI is entirely in HTML, with no dependencies on Flash plugins. In this lesson, you will accomplish two tasks: Monitor the health, resource utilization, and database usage of the vcenter Server Appliance Edit settings of the vcenter Server Appliance Page 11
Launch Google Chrome If Google Chromeis not already running, double click the Google Chromeicon on the Main Console Desktop or single click the icon on the Quick Launch bar. Page 12
Log into vcenter Appliance Management Console 1. Click on the "vcsa-01a Mgmt" Bookmark in HOL Admin folder. 2. Type root in the User name field. 3. Type VMware1! in the password field. 4. Click the "Login" button. Page 13
Monitor the health, resource utilization, and database usage of the vcenter Server Appliance Once you are logged in, you will see the Summary page of the Appliance Management UI. The summary page shows basic health information of the appliance, as well as the abilities to back up the appliance (see the Backup and Restore lab), create a support bundle, and perform power operations such as rebooting and shutting down the appliance. The health badges in the appliance are based on capacity reached in CPU, Memory, and Database. The overall health badge will also change to yellow or orange if an appliance update is available, depending on the severity of the update. Page 14
CPU and Memory 1. Click on the "CPU and Memory" tab in the navigation pane on the left. You can monitor appliance CPU and Memory utilization trends as far back as one quarter, which can be used to troubleshoot the appliance and vcenter Server resource usage. 2. Mouse over the CPU and Memory charts to see the usage (%) at a given date and time. Note: Graph may be different depending on utilization Page 15
Database 1. Click on the "Database" tab in the navigation pane. 2. The Appliance Management UI provides a dashboard for the vcenter Server Appliance s embedded Postgres database usage by data type, as well as space utilization trending with options to see any or all of the largest data types (Statistics, Events, Alarms and Tasks is know as SEAT data). You will also be alerted in the vsphere web client when certain capacity thresholds are reached. 3. Mouse over the current space utilization trending line graphs to see the breakdown of % utilization of the vcenter Postgres database by each data type. Note: Graph may be different depending on utilization Page 16
Networking 1. Click on the "Networking" section in the left navigation pane. 2. Select the Monitor tab to see network utilization. 3. You can adjust the duration to 1 day, 1 week, 1 month or 1 quater. Note: Graph may be different depending on utilization Page 17
Getting Started with Update Manager vsphere Update Manager Integration The next release of vsphere Update Manager is integrated with the vcenter Server Appliance and is delivered as an optional service. Starting in the next version of vsphere, you can no longer connect a vsphere Update Manager instance that is installed on a Windows Server machine with the vcenter Server Appliance. Attempts to connect vsphere Update Manager during installation on a Windows operating system to a vcenter Server Appliance fail with an error. To use the vsphere Update Manager server in the vcenter Server Appliance, start the VMware vsphere Update Manager Extension service. vsphere Update Manager deployed with the vcenter Server Appliance uses a PostgreSQL database. While vsphere Update Manager and the vcenter Server Appliance share the same PostgreSQL database instance, they use separate PostgreSQL databases which run on the vcenter Server Appliance. In case you need to reset the vsphere Update Manager database, the vcenter Server Appliance database remains intact. vsphere Update Manager enables centralized, automated patch and version management for VMware vsphere and offers support for VMware ESXi hosts, virtual machines, and virtual appliances. With vsphere Update Manager, you can perform the following tasks: Upgrade and Patch ESXi hosts. Install and update third-party software on hosts. Upgrade virtual machine hardware, VMware Tools, and Virtual Appliances. vsphere Update Manager Web Client View scan results and compliance states for vsphere Inventory Page 18
Video: Upgrading VMware Tools Using vsphere Update Manager (5:14) vsphere Update Manager can also be used to update the VMware tools on a virtual machine. The video outlines the process. Page 19
Content Library Content Library is a feature that was introduced with vsphere 6 and has been enhanced in the next version of vsphere. The Content Library provides a simple and effective way of managing content, such as VM templates, vapps, ISO images, and scripts. Enhancements to Content Library including ISO mount to a VM directly from Content Library, VM Guest OS customization, simplified library item update capabilities and optimizations in streaming content between vcenter Servers. Enhancements to Content Library in the next vsphere are planned to include: Mount an ISO to a VM directly from Content Library VM Guest OS customization Simplified library item update capabilities Optimizations in streaming content between vcenter Server In this lesson, you will complete the following goals: Deploy a VM with customized Guest OS via Content Library Sync your content quickly between vcenter Servers over HTTP Page 20
Launch Google Chrome If Google Chromeis not already running, double click the Google Chromeicon on the Main Console Desktop or single click the icon on the Quick Launch bar. Deploy a VM with customized Guest OS via Content Library You will use a VM template from a Content Library to deploy a virtual machine and do a Guest OS customization in the same wizard. Page 21
Log into vcenter Login in to RegionA vcenter 1. Click on "RegionA vcenter" in the bookmarks toolbar. 2. Type administrator@vsphere.local in the User name field. 3. Type VMware1! in the Password field. 4. Click the "Login" button. Page 22
Navigate to Content Library 1. Click on Home Icon on Top menu bar 2. Click on "Content Libraries" Select Content Library 1. Select the library "ContentLibraryA" in the left navigation pane. 2. Select the "Templates" Tab on the content pane. 3. Select the row for the "Tiny-VM" template, and try not to click on the "Tiny-VM" name, this will take you the templates summary page. Page 23
Deploy Virtual Machine 1. Select a "New VM from Library " action. New Virtual Machine from Content Library Wizard - Select name and location 1. Type Tiny-VM in the name field to specific a name for the newly created VM. 2. Select "RegionA01" for the datacenter or folder location. 3. Check the Customize the operating system checkbox at the bottom. 4. Click the "Next" button to advance to the next option. Page 24
New Virtual Machine from Content Library Wizard - Select a resource 1. Click Create a new specification icon at the top for a new specification. Note: This spawns the Guest Customization Wizard. Your other wizard is still running. Page 25
New VM Guest Customization Spec Wizard - Specify Properties 1. Type New Spec in the Name Customization Specification field and overwrite any existing text. The description field is option. 2. Click the "Next" button to advance to the next option. Page 26
New VM Guest Customization Spec Wizard - Set Computer Name 1. Select the "Use the virtual machine name" radio button for Computer Name. 2. Type corp.local in the Domain Name field. 3. Click the "Next" button to advance to the next option. Page 27
New VM Guest Customization Spec Wizard - Time Zone 1. Select "US" from the Area drop-down box. Once you click the drop-down arrow, you can type US to quickly location "US". 2. Select "Pacific" for Location. The default for "Hardware Clock Set To" should remain as UTC. 3. Click the "Next" button to advance to the next option. Page 28
New VM Guest Customization Spec Wizard - Configure Network 1. Confirm the "Use Standard network settings..." radio button is selected. 2. Click the "Next" button to advance to the next option. Page 29
New VM Guest Customization Spec Wizard - Enter DNS and Domain Settings 1. Type 192.168.110.10 in the Primary DNS field. The Secondary and Tertiary DNS fields can remain blank. 2. Type corp.local in the DNS Search Path field. 3. Click Add Button to add corp.local to the DNS Search Path, which will move "corp.local" to the box below. 4. Click the "Next" button to advance to the next option. Page 30
New VM Guest Customization Spec Wizard - Ready to complete 1. Review the wizard settings. 2. Click the "Finish" to save the changes. Note: This will complete the "New VM Guest Customization Spec" Wizard and return you to the "New Virtual Machine from Content Library" wizard. Page 31
New Virtual Machine from Content Library Wizard - Customize Guest OS - Continued.. 1. Select "New Spec", which is the newly created Custom Guest OS Specification. 2. Click the "Next" button to advance to the next option. Page 32
New Virtual Machine from Content Library Wizard - Select a resources 1. Select the "RegionA01-COMP01" cluster as the target location. 2. Click the "Next" button to advance to the next option. Note: This may take a few seconds to complete. Page 33
New Virtual Machine from Content Library Wizard - Review details 1. Review Details 2. Click the "Next" button to advance to the next option. Page 34
New Virtual Machine from Content Library Wizard - Select storage 1. Select "Thin Provisioned" from the "Select virtual disk format" drop-down. Due to lab storage constraints, we do not want either "Thick provision" option. 2. Click the "Next" button to advance to the next option. Page 35
New Virtual Machine from Content Library Wizard - Select networks 1. Leave "VM-RegionA01-vDS-COMP" as the default Destination Network. 2. Click the "Next" button to advance to the next option. Page 36
New Virtual Machine from Content Library Wizard - Select networks 1. Review the wizard settings. 2. Click the "Finish" to save the changes. Note: This completes the "New Virtual Machine from Content Library" wizard. Page 37
Check Status of Deployment 1. Locate and click on "Recent Tasks" in the content pane to check status of deployment. 2. Once Completed you will see an error. This is expected behavior because we can't add Linux Machines to the domain. Note: You have now deployed a VM from a Template in the Content Library. Check new VM 1. Click on "Home" button at the top of the vsphere Web client. 2. Select "VMs and Templates from the drop-down menu. Check New VM - Continued... 1. Select "vcsa-01a.corp.local" in left navigation pane. 2. Select the VMs tab in the content pane. 3. Confirm "Virtual Machines" is selected in the sub-menu. 4. You should see "Tiny-VM" in the list of VMs. Page 38
Note: This concludes the lesson on deploying a VM from the content library. Next we will synchronize content. Sync your content quickly between vcenter Servers over HTTP During this task, you will distribute the content between two vcenter Servers over HTTP by using Publish-Subscribe functionality of Content Libraries. First, you will do so by using a regular workflow. Second time, you will use an optimization that was created specifically to provide a better data streaming over HTTP. Finally, you will compare two runtimes of the data streaming to see the performance gain. This optimization option comes with limitations: Once a library is published as optimized for syncing over HTTP (streaming optimized), you cannot revert it back (unpublish) to a local library A streaming optimized published library cannot be used to deploy VMs. Page 39
Navigating to the Content Libraries 1. Select the "Home" icon from the top of the screen. 2. Select the "Home" icon in the drop-down. Navigating to the Content Libraries - continued... You should still be logged into vcenter. 1. Click the "Content Libraries" icon in the content pane. Page 40
Edit the ContentLibrary settings 1. Right-click on "ContentLibraryA" from the left Navigation pane. 2. Click "Edit Settings..." from the drop-down menu. Regular content library sync over HTTP 1. Click on "Copy Link" to place the URL for the Subscription URL in the clipboard. 2. Confirm that the "Authentication" checkbox is unchecked. 3. Click the "OK" button to save the changes. Page 41
Navigating to Create new content library wizard 1. Select "Content Libraries" in left Navigation pane, at Top. Your screen should match this one 2. Click the "Create new content Library"link. New Content Library wizard - Name and location 1. Type ContentLibrarySub in the Name field. The Notes field can remain blank. 2. Select "vcsa-01b.corp.local" from the vcenter Server drop-down. 3. Click the "Next" button to advance to the next option. New Content Library wizard - Configure content library 1. Select the "Subscribed content library radio button. Page 42
2. Press the "Control" and "V" keys together while hovering your mouse over the Subscription URL field. 3. Select the Download all library content immediately radio button. 4. Click the "Next" button to advance to the next option. Page 43
New Content Library wizard - Add storage 1. Select the "Select a datastore" radio button. 2. Select the "RegionB01-ISCSI01-COMP01" radio button. 3. Click the "Next" button to advance to the next option. Page 44
New Content Library wizard - Ready to complete 1. Review the wizard settings. 2. Click the "Finish" to save the changes. Note: This completes the "New Content Library" wizard. Create Content Library for vcenter B 1. Select "ContentLibrarySub" in the left navigation pane. 2. You should now see the summary for "ContentLibrarySub" and notice "Subscribed" in the "Type" column. Page 45
Conclusion This concludes this lesson. In this lesson you learned how to deploy a VM with customized Guest OS setting via Content Library and Synchronize your content quickly between vcenter Servers over HTTP. We will now end this module: 1. Click on the down arrow beside the logged in user name. 2. Select "Logout" from the drop-down menu. Page 46
Storage IO Control (SIOC) Introduction This module will cover some new policy based management integration with Storage IO Control. Through this integration you can define IO limits, reservations, and shares as part of your storage policies and apply them to your virtual machines. In this lesson you will go through some of the key screens for these new functionalities and become familiar with these new capabilities. You will create three storage policies and then configure a VM to use a policy. Page 47
Launch Google Chrome If Google Chromeis not already running, double click the Google Chromeicon on the Main Console Desktop or single click the icon on the Quick Launch bar. Log into vcenter Log into RegionA vcenter 1. Click on "RegionA vcenter" in the bookmark toolbar. 2. Type administrator@vsphere.local in the User name field. Page 48
3. Type VMware1! in the Password field. 4. Click the "Login" button. Page 49
Navigate VM Storage Policies 1. Click on Home Icon 2. Click on "Policies and Profiles" Navigate VM Storage Policies 1. Click on "VM Storage Policies" on the top of the left navigation panel 2. Click on Create VM Storage Policy icon on the top of the middle navigation panel Page 50
Create Storage IO Control Policies In this task you will create a storage policy for Storage IO Control. You will be creating three storage policies named: Preferred IO Standard IO Restricted IO 1. Select vcsa-01a.corp.local in the vcenter Server drop down box. Page 51
Create Storage IO Control Policies 1. Enter a name of " Preferred IO" and a description of your choosing 2. Click Next. Page 52
Create Storage IO Control Policies 1. Click Next Page 53
Create Storage IO Control Policies 1. Click check box for 'Use common rules in the VM storage policy' 2. In the common rules section click on the "Add Component" button and hover over the "Storage I/O Control" component from the IO Control category and select "High IO shares allocation" 3. Then Click Next Page 54
Create Storage IO Control Policies 1. Uncheck the box for 'Use rule-sets in the storage policy' 2. Click Next Page 55
Storage compatibility 1. Click Next Click Finish on the Ready to Complete Page Page 56
Create Standard IO and Restricted IO 1. Repeat steps 2-7 to create a new policy "Standard IO" with the "Normal IO shares allocation" component 2. Repeat steps 2-7 to create a new policy "Restricted IO" with the "Low IO shares allocation" component 3. Verify that you have created the three policies Page 57
Provision a Virtual Machine with "Standard IO" Policy Use the policies that were created: 1. Click on the Home Icon on top of Page 2. Click on "VMs and Templates" Page 58
Provision a Virtual Machine with "Standard IO" Policy We will now deploy a VM from the Template Library using the Standard IO Policy 1. Expand navigation tree under "vcsa-01a.corp.local" by clicking triangle on the left. 2. Right Click on "RegionA01" 3. Click on "New Virtual Machine" 4. Click on "New VM from Library" This will bring up a window to select a Template from vcenters Content Library Page 59
Select a Template to deploy 1. Select "Tiny-VM" 2. Click Next Page 60
Select Name and Location of VM 1. Name the VM "sioc-001" 2. Select the "RegionA01" cluster 3. Click Next Page 61
Configure "sioc-001" 1. Select arrow next to"regiona01-comp01" 2. Select esx-01a.corp.local 3. Click Next Page 62
Configure "sioc-001" 1. Click Next Page 63
Select Storage 1. Select virtual disk format: Thin provision 2. Select VM storage policy: Standard IO 3. Datastores: Leave RegionA01-ISCSI-COMP01 Selected (Only option anyways) 4. Click Next Page 64
Select Network 1. Make sure network is "VM-RegionA01-vDS-COMP" 2. Click Next On Summary Screen Click Finish. Page 65
Storage Policies Storage policies are defined on a disk level. This allows you to define different storage policies for each disk a VM has. If the "sioc-001" machine had multiple disks, you could choice a different policy for each disk as this screen capture shows. Page 66
HTML5 Host Client The HTML5 Host Client is a new product designed to replace the host client functionality of the original C# Client. The layout of the H5 UI is similar to the vsphere Web Client to remain consistent in workflow navigation while simplified in areas where vcenter functionality is not required. In the following tasks, we will go through some of the main screens of the new Host Client to have you get acquainted with the new tool. Connect to ESXi Host 1. Open Google Chrome browser by double clicking on "Google Chrome" icon on desktop Page 67
Login to ESXi Host 1. Click book mark Folder "HOST-HTML5" 2. Click on esx-01a to login to esx-01a 3. Login with the following credentials 4. Click "Log in" User name: root Password: VMware1! Page 68
Confirmation Page Click on "Ok" Page 69
Inventory Tree You will see the basic Host resources displayed in a tree format on the left hand side of the UI, listing: Host, Virtual Machines, Storage and Networking. Left-Clicking on each resource type will display information regarding each resource in the main-context menu on the left. For example, the host resource pane describes information about the CPU type, memory configuration, and basic performance information. Similarly, left clicking the Virtual Machine resource type will bring up a list of the VMs currently being hosted on the machine. Page 70
Managing Resource Types 1. Right-click the Host resource type to display a list of actions that can be performed on the Host 2. Below each resource type are also listed additional functionality. For example, left clicking on the Manage link below the Host resource will display additional configuration tabs such as Advanced settings, Hardware, Licensing, etc. TROUBLESHOOTING TASKS One of the main use cases for the Host Client is in troubleshooting the virtual infrastructure, particularly when vcenter Server and the vsphere Web Client are temporarily unavailable to do the remediation. In these situations, the key task is to examine the host running critical applications, examine associated logs and events, and potentially act on the host or VM to bring it back online. Page 71
Monitoring Resource Types Left-clicking on the Monitor link will display information regarding the resource s performance, events, tasks, and logs pertaining to the resource type Page 72
Task 1. Reviewing host logs, events and tasks 1. From the left hand navigator, select Host, then select Monitor 2. Select the Logs tab to see a list of logs available for viewing. 3. Select /var/log/vpxa.log to see messages regarding the vcenter daemon. As a UI aid, you can right click the vpxa.log and select Open in new window to see additional rows of the log. This screen can now also be searched by using the browser s search capabilities (ie: Control-F). 4. Similar to Logs, a list of Events and Tasks related to the Host can also be displayed. Select Events to see the most recent Events, select the down arrow in the Events column icon, then select Filter, change the criteria to contains, and enter logged in to display the most recent login events occurring on the Host. Page 73
Generating the GSS Support Bundle Often GSS will ask that a support bundle be generated to help troubleshoot SRs. The support bundle includes a snapshot of the current host state, configuration parameters, and relevant logs. 1. Select Host from the left hand navigator 2. Select Monitor 3. Select the Logs tab 4. Select Generate support bundle (Note: it may take several minutes to generate the large bundled log files) Generating the GSS Support Bundle Progress will be displayed in the Recent Tasks screen at the bottom of the UI Page 74
Confirmation of Support Bundle Once the Support bundle is completed, you will be prompted to either Download or you can dismiss and download later. Page 75
Encrypt VMs This module will walk through the following senarios: Add a Key Management Server to vcenter Server. Create an encryption storage policy. Create an encrypted VM and encrypt existing VM. Decrypt multiple encrypted VMs simultaneously. Launch Chrome 1. Open Google Chrome browser by double clicking on "Google Chrome" icon on desktop Page 76
Login Into vcenter Login in to RegionA vcenter 1. Click on link in Favorites Bar - RegionA vcenter 2. Login: administrator@vsphere.local 3. Password: VMware1! 4. Click Login Page 77
Key Server Setup We will add a Key Server to vcenter for RegionA01. 1. Click on the Home Icon 2. Click Global Inventory Lists Page 78
Navigate to vcenter List 1. Under resources, click on vcenter Servers Page 79
Select vcsa-01a.corp.local 1. Select vcsa-01a.corp.local in left Navigation Menu 2. Then select the Configure tab 3. Then select the Key Management Servers section 4. Click on the Add Server Icon (has green plus sign) Page 80
Add KM Server Input the field on the Add KM server screen using this information: 1. Key server cluster: <Create new cluster> 2. Cluster Name: Key Server Cluster 3. Server Alias: KeyServer 4. Server Address: kms-01a.corp.local 5. Server Port:5696 6. Then Click OK Set default KMS cluster Select Yes to make this your Default KMS Server Page 81
Trust Certificate Now we will trust the certificate presented by the KMS Server 1. Click Trust Page 82
KM Server Configured You should now see a screen that shows your KM Server status is Normal and Certificate Status is valid. You many need to adjust the column widths or scroll to the right to see all columns. Create Encryption Policy 1. Click on the Home Icon on the top of the page 2. Click on "Policies and Profiles" Page 83
Select vcsa-01a.corp.local 1. From the vcenter Server drop-down menu, select 'vcsa-01a.corp.local' Navigate to Storage Policies 1. Click on VM Storage Policies Page 84
Navigate VM Storage Policies 1. Click on "VM Storage Policies" on the top of the left navigation panel 2. Click on "Create VM Storage Policy" on the top of the middle navigation panel Page 85
Create new VM Storage Policy 1. Select vcsa-01a.corp.local in the dropdown for vcenter 2. Name: My Encryption Policy 3. Click Next Page 86
Policy Structure 1. This is just an informational page, click Next Page 87
Common Rules This screen has multiple steps, so please don't hit Next. 1. Select Check Box Use common rules in the VM storage policy 2. Click on Green Plus Sign 3. Click on Encryption 4. Click Next Page 88
2b Rules-Set1 1. Uncheck Use rules-sets in the storage policy 2. Click Next Page 89
Storage compatibility This is a summary page, showing all storage that is compatible with the policy we created. 1. Click Next Page 90
Ready to Complete 1. Click Finish Page 91
Encrypting VMs Now let's see the encryption policy we just created in use. We will create a VM. 1. Click on the Home Button 2. Click on Global Inventory Lists Page 92
Navigate to Create VM 1. Click on Virtual Machines Create VM 1. Click on Create new VM icon Page 93
Create VM 1. Select Create a new virtual machine from list 2. Click Next Page 94
Select a name and folder 1. Name your vm MyEncryptedVM 2. Select RegionA01 under location 3. Click Next Page 95
Select compute resource 1. Select RegionA01-COMP01 as your compute resource (no other choice) 2. Click on Next Notice the green check under Compatibility Page 96
Select Storage This is where we select the Encryption policy that was created. 1. In the VM storage policy, drop down the box and select My Encryption Policy 2. Select RegionA01-ISCSI01-COMP01 for location 3. Click on Next Page 97
Select compatibility 1. Leave selection at ESXi 6.5 and later 2. Click Next Page 98
Select a guest OS 1. Leave selections default and click next Page 99
Customize hardware 1. Expand the Detail of the New Hard Disk 2. Change the size of the disk to 1GB (We will have capacity issues in the pod if we don't shrink it) 3. Validate that My Encryption Policy is selected - There should be a Pad Lock next to the Disk before you expanded the details Page 100
Customize Hardware 1. Click on VM Options 2. Expand details on Encryption 3. You can see Encryption is required for vmotion too 4. Click Next Page 101
Ready to complete Now we are ready to create this VM 1. Click Finish Page 102
Conclusion Thank you for participating in the VMware Hands-on Labs. Be sure to visit http://hol.vmware.com/ to continue your lab experience online. Lab SKU: Version: 20170502-054921 Page 103