VMware vCenter Configuration ManagerAdministration GuidevCenter Configuration Manager 5.5This document supports the version of each product listed and
Technical Support and Education ResourcesThe following technical support resources are available to you. To access the current version of this bookand
Errors appear in red in the PowerShell window.5. If errors occur, resolve them.A valid script returns a set of XML content without any formatting, whi
When you use the script-based filter in a collection, the VCM Agent calls a script engine to run the script,parse the results to return the collected
Procedure1. On your VCM Collector, click Collect.2. On the Collection Type page, select Machine Data and click OK.3. On the Machines page, select the
Procedure1. On your VCM Collector, click Administration.2. Select Job Manager > History > InstantCollections > Past 24 Hours.3. In the Insta
Procedure1. On your VCM Collector, click Console.2. Select Windows > Operating System > Custom Information.3. Select a view of the collected WCI
PrerequisitesnVerify that your script runs in PowerShell. See "Verify that Your Custom PowerShell Script is Valid" onpage 99.nUnderstand the
vCenter Configuration Manager Administration Guide106VMware, Inc.
Configuring Linux and UNIX Machines8Configuring Linux and UNIX MachinesTo collect UNIX/Linux data and to manage your physical or virtual UNIX/Linux ma
Add UNIX/Linux MachinesAdd UNIX/Linux machines to the Available Machines list to make the machines available for licensing.If you add a large number o
What to do nextLicense the machine. See "License UNIX/Linux Machines" on page 109.License UNIX/Linux MachinesLicense UNIX/Linux machines bef
Getting Started with VCM1Getting Started with VCMWhen you use VCM, you must understand user access and how to start VCM from any physical or virtualma
PrerequisitesnVerify that the machine on which you intend to install the Agent has enough free disk space. For moreinformation, see the VCM Installati
To force an overwrite of any existing files, include the -o option. For example:/CMAgent.<version>.SunOS -o.The command and output is similar to
a. Run the chmod u+x csi.config command to add write file permissions if the file has only readpermissions set.b. Modify the csi.config file options b
drwxr-x--- 3 root cfgsoft 4096 Jul 2 17:34 Agentdrwxr-x--- 3 root cfgsoft 4096 Jul 2 17:34 CFC-rw-rw---- 1 root cfgsoft 49993 Jul 2 17:34 CSIRegistry-
Installation Options with DefaultValuesDescriptionWhen you install in trusted mode on HP-UX v1.0 (11.11), the usermust existon the target machine. If
Installation Options with DefaultValuesDescriptionCSI_CERTIFICATE_PATH=Specifies the path to Collector Certificates. The certificates specifiedat this
Collect UNIX/Linux DataWhen the UNIX/Linux machines are licensed and the Agent is installed, you collect data from thosemachines.Collecting data from
Option DescriptionConsole Displays dashboards and summary reports based on collected data. You use the Consoleto view data relevant to day-to-day oper
Discover Oracle InstancesTo discover Oracle instances, you run a collection on supported UNIX/Linux machines where Oracle isinstalled. The Oracle inst
PrerequisitesnAdd, license, and install the Agent on Solaris machines hosting Oracle instances. See "Configuring Linuxand UNIX Machines" on
nRemote command executionnChange actions against target managed machinesnChange rollbacknCompliance enforcementnPatch deploymentnSoftware deploymentnO
What to do nextnIf your target Oracle instance is Oracle 10g, you must set user permissions. See "Grant Permissions forthe Oracle Collection User
a. Type the configuration values.Option DescriptionOracle SID (Add only) Name or system ID of the Oracle instance, used to identify a particular datab
Procedure1. Click Administration.2. Select Machines Manager > Additional Components > VCM for Oracle.3. Click Config User.4. On the Select Machi
chmod o+r $ORACLE_HOME/ldap/mesg/*chmod o+rx $ORACLE_HOME/networkchmod o+rx $ORACLE_HOME/network/adminchmod o+rx $ORACLE_HOME/sqlpluschmod o+rx $ORACL
Oracle Collection ResultsYou use the collected Oracle data to manage your Oracle instances. The data is available for severalmanagement actions.The di
Configuring Mac OS X Machines9Configuring Mac OS X MachinesTo collect Mac OS X data and to manage your physical or virtual Mac OS X machines, you must
Procedure1. Click Administration.2. Select Machines Manager > Available Machines.3. Click Add Machines.4. On the Add Machines page, select Basic an
Procedure1. Click Administration.2. Select Machines Manager > Available Machines.3. Select the machines and click License.4. On the Machines page,
Procedure1. Copy the appropriate Agent binary installation package from the Collector to the machine on whichyou will install the Agent.The Agent pack
Option ActionSilent mode Run the # ./CSIInstall/InstallCMAgent -scommand.Install the Agent using the silent mode if youmanually edited the csi.config
Procedure1. To connect to VCM from a physical or virtual machine on your network, open Internet Explorer andtype http://<name-or-IP-address-of-Coll
drwxrwx--- 3 root cfgsoft 4096 Jul 2 17:34 ECMudrwxr-x--- 6 root cfgsoft 4096 Jul 2 17:34 installlrwxrwxrwx 1 root root 20 Jul 2 17:34 log -> /var/
Installation Options with DefaultValuesDescriptionGROUP=Y primary group for the CSI_USER.CSI_USER_PRIMARY_GID=501Keep the default value. Create user’s
Installation Options with DefaultValuesDescriptionCSI_PARENT_LOG_DIRECTORY=defaultSpecifies where agent operational log files are kept. The logdirecto
2. On the Collection Type page, select Machine Data and click OK.3. On the Machines page, select the machines from which you are collecting data and c
Option DescriptionConsole Displays dashboards and summary reports based on collected data. You use the Consoleto view data relevant to day-to-day oper
Patching Managed Machines10Patching Managed MachinesVCM Patching is the VCM patch assessment, deployment, and verification capability, which ensuresco
VCM Patching for UNIX and Linux MachinesVCM Patching for UNIX and Linux machines helps you deploy patches to bring UNIX and Linuxmachines into complia
Figure 10–1. UNIXand Linux Patch Assessment and Deployment ProcessTo verify that VCM supports your UNIX and Linux machines for patch deployment, see
The .pls files use new names. Red Hat file names include Red Hat instead of RH, and SUSE file namesinclude Novell SUSE instead of Novell Linux.Patch A
Procedure1. "Check for Updates to Bulletins" on page 139Use VCM Patching to check the Web for updates to patch bulletins, which you can use
nLog Out: Exits the Web Console. The Web Console closes and the VCM Logon screen appears.nAbout: Displays information about how to contact VMware Tech
Procedure1. On the toolbar, click Collect.2. Select the Windows machines from which to collect data.3. Select Select a Collection Filter Set to apply
10. On the VCM toolbar, verify that the correct Machine Group is selected.11. Click Patching and select Windows > Assessment Templates.12. Select t
VCM Patching ActionsThe following actions are available.nAgent Install: VCM Patching installs the Agent component to a machine the first time a patch
Machine Group MappingWhen you define an alternate patch location for a particular machine group, you must select that machinegroup in VCM before you d
Machine Group mappings are not inherited. For example, if under the machine group called UNIXMachines, you create a machine group called Solaris, the
Procedure1. Click Patching.2. Select Windows > Assessment Templates and select the template used for the assessment.3. Make sure the data grid view
Getting Started with VCM Patching for UNIX and Linux MachinesUse VCM Patching for UNIX/Linux to determine the patch status of UNIX and Linux machines
Collect Patch Assessment Data from UNIX and Linux MachinesCollect UNIX and Linux patch assessment data using bulletins, an assessment template, or the
7. On the toolbar, click Jobs and view the progress of the collection.The assessment on UNIX and Linux machines uses the Patch Assessment collection f
Icon Status DescriptionPatch-MachineMismatchThe patch OS version or hardware architecture does not match the machine.Patch NotNeededThe machine is up-
SlidersThe sliders on the left side of the Web Console include the items listed and described in the following table.The individual items that you see
Machine Group MappingWhen you define an alternate patch location for a particular machine group, you must select that machinegroup in VCM before you d
7. (Optional) If you need to specify commands to deploy the patches, on the Command Line Optionspage specify the options to use.8. (Optional) If you n
nManually update VCM Patching Windows content.nRun reports without Internet access.Customize Your Environment for VCMPatchingPerform routine maintena
Running and Enforcing Compliance11Running and Enforcing ComplianceUsing the Compliance module, you define a standard configuration for all machines or
vulnerabilitiesTo calculate CVSS scores that apply to your unique environment, go to the CVSS scoring Web site, fillin the form, and click the Update
Run an SCAP AssessmentRun an SCAP assessment that compares your managed machine configuration against a profile in astandard SCAP benchmark.Prerequisi
Upon successful export, VCM creates a file with a name based on the machine name, output format, andtime stamp in the following folder on the Collecto
Provisioning Physical or Virtual MachineOperating Systems12Provisioning Physical or Virtual MachineOperating SystemsOperating system (OS) provisioning
Figure 12–1. Relationship of OS Provisioning ComponentsPatching the Operating System Provisioning ServerExclude the OS Provisioning Server instances f
The discovered target machines appear in the Provisionable Machines data grid by MAC address.5. Use VCM to send the command that includes the provisio
Slider Actionobjects.nView Active Directory Schema information.ReportsnRun out-of-the-box reports against your collected data.nWrite your own SQL and
The OS Provisioning Server identifies provisionable physical or virtual machines in your environmentwhen the target machines are set to network boot a
Procedure1. Click Administration.2. Select Certificates.3. Select the OS Provisioning Server machines and click Change Trust Status.4. Add any additio
Procedure1. On target machines, configure the BIOS to network boot.2. Start the machines on your provisioning network.3. In VCM, click Administration.
nIdentify or create any postinstallation scripts that you want to run on the target machine after it isprovisioned with the new operating system. The
7. On the Select OS Distribution page, select the Windows operating system that you are installing on theselected machines and click Next.8. On the Se
Option DescriptionLicense these machines forVCMLicense the machines for VCM management.9. On the Machine-Specific Settings page, type the HostName and
You can install one OS distribution on one or more target machines. To install a different OS distribution,configure a new OS provisioning action.Prer
7. On the Select OS Distribution page, select the a Linux operating system that you are installing on theselected machines and click Next.8. On the Se
Option DescriptionnDuplicate mount points are not allowed.nFor a swap partition, the mount point and the file system type should beswap.nWhen naming m
Option DescriptionFile System Select the type of file system.For a swap partition, the mount point and the file system type should be swap.Supported F
nRoles and Rules: VCM roles and access rules work together to control user access to VCM. Forexample, you can create a role that allows a user to view
Option DescriptionGrow partition touse all remainingspaceSelect the option to allow the logical volume to fill available space up to themaximum size s
Procedure1. On the Linux machine, log in as root.2. Run the ntpdate -u <ntpserver> command to update the machine clock.For example, ntpdate -u n
Option DescriptionMachines > Licensed Windows Machines. The OS ProvisioningStatus column indicates whether the Windows machine wascreate using OS p
The OS Provisioning Server starts jobs for each of the selected machines. Each job creates a configuredsession for the specified machines. The configu
vCenter Configuration Manager Administration Guide174VMware, Inc.
Provisioning Software on ManagedMachines13Provisioning Software on Managed MachinesSoftware provisioning is the process you use to create software pac
Software Provisioning Component RelationshipsThe following diagram displays the general relationship between Package Studio, repositories, andPackage
nSoftware Repository for Windows: Installed on at least one Windows machine in your environment,and installed on the same machine with Package Studio.
Procedure1. Double-click Repository.msi.2. On the Welcome page, click Next.3. Review the license agreement, select the appropriate options to continue
Procedure1. Double-click PackageStudio.msi.2. On the Welcome page, click Next.3. Review the license agreement, select the appropriate options to conti
vCenter Configuration Manager Administration Guide18VMware, Inc.
The Package Studio is installed to the location specified during installation. The default location isC:\Program Files\VMware\VCM\Tools\Package Studio
PrerequisitesnVerify that the target machine meets the supported hardware, operating system, and softwarerequirements. See VCM Installation Guide for
a. Click Properties and type a Name, Version, Description, and select the Architecture. These fieldsare required. You have the option to update the ot
Procedure1. On a Windows 2008 machines, select Start > All Programs > VMware vCenter ConfigurationManager > Tools.2. Right-click Package Stud
PrerequisitesnPackage Manager is installed on the target machines. Package Manager is installed when you install theVCM 5.3 Agent or later. See "
6. On the Confirmation page, review the information, resolve any conflicts, and click Finish.You can monitor the process in the Jobs Manager. See &quo
d. Select the URI and click OK.e. Verify that the Platform name and the Section name are exactly the names used in the repository.6. On the Schedule p
5. On the Select Package page, select the package to install.6. Select one of the following version options.Option DescriptionInstall Version Installs
Related Software Provisioning ActionsYou can use the following management options in VCM when working with software provisioning.Option DescriptionCon
Create Compliance Rules Based on Software Provisioning DataA Compliance rule based on software provisioning data detects any packages or sources that
Installing and Getting Started with VCMTools2Installing and Getting Started with VCMToolsVCM Installation Manager installs several VCM components and
What to do nextAdd the rule to your template. When the Compliance Template is run, it checks the target machines todetermine if the repository source
f. Configure the version options to use the selected version, specify a different version, or install thelatest version.g. Specify the Security Option
vCenter Configuration Manager Administration Guide192VMware, Inc.
Configuring Active Directory Environments14Configuring Active Directory EnvironmentsVCM for Active Directory collects Active Directory objects across
5. "License Domain Controllers" on page 196To manage domain controllers, you must license them in VCM.6. "Install the VCM Windows Agent
Procedure1. Click Administration.2. Select Settings > Network Authority > Available Accounts.3. To add a new domain account, click Add.4. Type t
NOTE You can use the Discovered Machines Import Tool (DMIT), which imports machines discovered bythe Network Mapper (Nmap), to import many physical an
Procedure1. Click Administration.2. Select Machines Manager > Available Machines.3. Select the domain controllers to license.4. Click License.5. Ve
Procedure1. Click Administration.2. Select Machines Manager > Licensed Machines > Licensed Windows Machines.3. In the data grid, select one or m
Procedure1. On the VCM toolbar, click Collect.2. On the Collection Type page, select Machine Data and click OK.3. On the Machines page, select the dom
CopyrightYou can find the most up-to-date technical documentation on the VMware Web site at:http://www.vmware.com/support/The VMware Web site also pro
Procedure1. On the non-Collector Windows machine on which you want to install the tools, insert the installationCD.2. In Installation Manager, click R
PrerequisitesnDiscover, license, and install the VCM Windows Agent on your domain controllers. See "ConfigureDomain Controllers" on page 193
Run the Domain Controller Setup ActionVCM for Active Directory collects your Active Directory schema and structure as part of the domaincontroller set
PrerequisitesnInstall VCM for Active Directory. See "Configure VCM for Active Directory as an Additional Product"on page 199.nVerify that jo
Option DescriptionFrom the data grid view, you can enable or disable the summary to viewthe details immediately.Reports Provides Active Directory info
vCenter Configuration Manager Administration Guide204VMware, Inc.
Configuring Remote Machines15Configuring Remote MachinesThe VCM Remote client is the communication and management mechanism that you use to managemobi
Using Certificates With VCM RemoteThe use of certificates with VCMRemote ensures secure communication between VCM and the VCMRemote client when they
Procedure1. "Create Custom Collection Filter Sets" on page 207You create custom collection filter sets for Dial-up, Broadband, or LAN connec
What to do nextnRepeat the procedure for all the connection types for which you configure filter sets.nAssign the filter sets to the appropriate VCM R
Procedure1. Click Administration.2. Select Settings > General Settings > VCM Remote.3. On the VCM Remote Settings data grid, select each setting
Run the Import/Export ToolUse the Import/Export Tool to back up your VCM database business objects and import them into a newVCM database or into a re
n"Install the VCM Remote Client Manually" on page 210The manual installation of the VCM Remote client is a wizard-based process that you use
5. On the VCM Remote Client Information page, configure the options and click Next.Option DescriptionCollectorMachineNameName of the Windows machine o
Procedure1. On the target machine, create a folder and copy the files from the Collector to the target folder.File DescriptionCM Remote Client.msiLoca
Option Descriptionthe msiexec.exe was run.What to do nextConnect the remote machine to the network to ensure that VCM completes the installation proce
Sub DoWork()Set WshShell = CreateObject("WScript.Shell")sCollName = "YourCollectorName" 'Name of your VCM Collector machine i
End IfEcmScriptRuntime.CmdExecute Chr(34) & AppToRun & Chr(34), 10000End SubSub CheckVars()If sCollName = "" ThenWScript.QuitElsesCo
sAddRemove = Trim(sAddRemove)End Subc. Select the Certain file(s) are required to be on the target machine for this remote commandcheck box.d. Click N
VCM Remote Collection ResultsThe VCM Remote client-specific data is limited to administrative details. All other data collected from theremote machine
vCenter Configuration Manager Administration Guide218VMware, Inc.
Tracking Unmanaged Hardware and Soft-ware Asset Data16Tracking Unmanaged Hardware andSoftware Asset DataVCM management extensions for assets integrate
Procedure1. On the Collector, navigate to C:\Program Files (x86)\VMware\VCM\Tools.2. Copy the DeployUtility-<version>.zip file from the Collecto
Review Available Asset Data FieldsVCM for assets is populated with a short list of data fields to get you started. Examples include hardwaredata such
a. Select the way to populate the data.Manually: type free-form textLookup: select from a fixed or query-based list of valuesDynamically: query from o
You cannot change the data properties.8. Click Next.9. Select the roles that are allowed to edit the data.Only users assigned to these roles can edit
Procedure1. Click Administration.2. Select Settings > Asset Extensions Settings.3. Select one of the following nodes.Hardware Configuration Items &
Procedure1. Click Console.2. Select Asset Extensions > Hardware Configuration Items > VCM Devices.3. In the data grid, select the VCM machine.4.
PrerequisitesnHave an administrator configure the asset data fields that you need. See "Configure Asset Data Fields"on page 219.nLog in to V
Procedure1. Click Console.2. Select Asset Extensions > Hardware Configuration Items > Other Devices.3. In the data grid, select the asset.4. Cli
Configure Asset Data for SoftwareA user with a role that has permission to edit asset data can use VCM for assets to gather informationabout the softw
nSoftware Inventory (Windows): Select a product from the software inventory (SI) list.nRegistry (Windows): Type or select a Windows Registry path, key
Edit Asset Data for SoftwareUse VCM for assets to change your software asset records as your enterprise changes.PrerequisitesLog in to VCM with a role
Configuring VMware Cloud Infrastructure3Configuring VMware Cloud InfrastructureVCM collects information from your instances of vCenter Server, vCloud
Procedure1. Click Console.2. Select Asset Extensions > Software Configuration Items.3. In the data grid, select the software asset.4. Click Edit Va
Managing Changes with Service Desk Inte-gration17Managing Changes with Service DeskIntegrationVCM Service Desk Integration tracks planned and unplanne
Procedure1. Click Console.2. Select Service Desk.3. Under the Service Desk node, select any subnode.For example, click By RFC to view the data accordi
Index%%Systemroot% environment variable 79, 81AAbout Patching 135about this book 9access by user 11accessingcompliance content 21active directory(AD)
collectdomain controllers 198ESX logs 48, 53ESX service console operating system 48hosts, virtual machine 50package managers 183repositories 184vCente
discoveryprovisioning, operating system 161domain controllersadd network authority 194assign network authority 195available domains 194collect 198coll
software provisioning 176VCM for active directory 199integrationservice desk 231invalid certificate in vSphere Clienttroubleshooting 57Jjob manager 19
PowerShellexample script 92executing for WCI 92installation 100references 92script signing policies 91scripts, troubleshooting 104signing scripts for
script signingpolicies 91references 92scriptsPowerShell 88service desk integration 231adding 231console 231job manager 232set server trust statusprovi
VCM Summary and VCM Actiontroubleshooting 57VCM summary tabtroubleshooting 57verify PowerShell script 99virtual environmentsmanaging agent 29virtual e
Figure 3–1. Virtual Environments Configuration DiagramManaging AgentsThe Managing Agent machines must have the 5.5 Agent or later installed. They must
240VMware, Inc.vCenter Configuration Manager Administration Guide
CAUTION Do not use the Windows machines on which your vCenter Server instances are runningas Managing Agent machines.Managing vCenter Server Instances
Collect vCloud Director data so that you can identify and manage the guest operating systems of thevApp virtual machines.7. "Configure vShield Ma
Collect Machines Data From the Managing Agent MachinesCollect data from your Managing Agent machines to ensure that VCM identifies the Windows machine
Procedure1. Click Administration.2. Select Certificates.3. Select the Managing Agent machines and click Change Trust Status.4. Add any additional mach
Procedure1. Click Administration.2. Select Administration > Machines Manager > Licensed Machines > Licensed Windows Machiens.3. Select the Ma
ContentsAbout This Book 9Getting Started with VCM 11Understanding User Access 11Running VCM as Administrator on the Collector 12Log In to VCM 12Gettin
Configure vCenter Server Data CollectionsCollect data from your vCenter Server so that you can identify and manage your virtual environments,including
Option DescriptionDomain Domain to which the vCenter Server belongs.Type Domain type.Machine Type Select vCenter (Windows).6. Click Add.The machine in
Option DescriptionYou can use the Collector as your managingagent.Port Type the port used by the VMware InfrastructureSDK on the vCenter Server instan
What to do nextReview the collected virtualization data. Click Console and select Virtual Environments > vCenter.vCenter Server Collection ResultsT
nCollect vCenter Guests data from you vCenter Servers and manage the virtual Windows, Linux, orUNIX machines. See "Collect vCenter Server Virtual
5. On the Edit VMGuest Machine Info page, review the list and update or remove virtual machines, andclick Next.6. On the License VMGuests page, conf
PrerequisitesKnow the names and domain information for the instances of vCloud Director in your environment.Procedure1. Click Administration.2. Select
Procedure1. Click Administration.2. Select Machines Manager > Licensed Machines > Licensed Virtual Environments.3. Select the vCloud Director in
PrerequisitesConfigure the vCloud Director settings. See "Configure the vCloud Director Settings" on page 36.Procedure1. Click Administratio
Option DescriptionAdministration Displays managed vCloud Director instances from which you arecollecting data. Click Administration and select Machine
vCenter Configuration Manager Administration GuideConfigure vShield Manager Collections 45Configure ESX Service Console OS Collections 48Configure the
nVCM is located in the vApp with the virtual machines that it is managing.nThe vApp has a direct connection to the org network.nThe vApp has a direct
In a NATmapped network environment, your best practice is to install the Agent on the vApp templatemachines. You must manually install the Agent with
Option DescriptionnOrg:vDC:vApp:VCName: Name of the vCloud Director organization with thevirtual datacenter name, the name of the vApp that contains t
Option DescriptionUse aproxyserverSelect Yes if you use a proxy server for communication between the Collector andthe Agents on the virtual Windows ma
Option DescriptionDiscovers all virtual machines in the virtual datacenter.vAppNameFilterTo run the query against a vApp, type the name of the vApp.SQ
Configure vShield Manager CollectionsConfigure collections from your vShield Manager instances so that you can run reports on the collecteddata.Prereq
Option DescriptionMachine Name of the instance of vShield Manager.Domain Domain to which the instance of vShield Manager belongs.Type Domain type.Mach
Option DescriptionPort Type the port used by the API on the vShieldManager instances.The default value is 443.User ID Type a vShield Manager instance
What to do nextReview the collected virtualization data. Click Console and select Virtual Environments > vCloudDirector.Discover the vApp virtual m
4. "Collect ESX Logs Data" on page 53An initial collection of Virtual Environments data identifies your virtual machine hosts and their gues
ContentsWindows Custom Information Collection Results 103Run Windows Custom Information Reports 104Troubleshooting Custom PowerShell Scripts 104Config
d. Click Select Data Types to collect from these machines and click Next.e. On the Data Types page, expand the Windows tree and select Machines.f. Sel
5. Configure the settings on the Agent Proxy and Communication Setting page.Option DescriptionAgentProxyThe configured Agent Proxy used to manage the
For ESX machines, you import target machine information from VCM and copy the SSH public key file,the csiprep.py file, and the csiprep.config file to
nUse the same user name for both SSH and Web Services collections (ESX 3.x only).nUse the same password for all WebServices users.nApply the same user
Configure the vSphere Client VCM Plug-InThe vSphere Client VCM Plug-In provides contextual access to VCM change, compliance, andmanagement functions.
Procedure1. On the VCM Collector, browse to [path]\VMware\VCM\Tools\vSphere Client VCMPlugin\bin and double-click VCVPInstaller.exe.2. In the VCVP Plu
Procedure1. Select Administration > Settings > Integrated Products > VMware > vSphere Client VCM Plug-In.2. Select the setting that you wa
You can use troubleshooting options to identify and resolve any problems.Invalid Certificate on a vSphere ClientThe vSphere Client connects to the vCe
vCenter Configuration Manager Administration Guide58VMware, Inc.
Running Compliance for the VMwareCloud Infrastructure4Running Compliance for the VMware CloudInfrastructureCompliance templates evaluate the virtual e
vCenter Configuration Manager Administration GuideGetting Started with SCAP Compliance 153Conduct SCAP Compliance Assessments 154Provisioning Physical
4. "Preview Virtual Environment Compliance Rule Groups" on page 62Preview the rule group to ensure that your combination of rules and filter
Procedure1. Click Compliance.2. Select Virtual Environment Compliance > Rule Groups > rule group name > Rules.Guest Tools Running is the rule
Procedure1. Click Compliance.2. Select Virtual Environment Compliance > Rule Groups > rule group name > Filters.Guest Tools Running is the ru
Procedure1. Click Compliance.2. Select Virtual Environment Compliance > Rule Groups.Guest Tools Running is the rule group in this example.3. Select
What to do nextRun the template. See "Run Virtual Environment Compliance Templates" on page 64.Run Virtual Environment Compliance TemplatesR
Procedure1. Click Compliance.2. Select Virtual Environment Compliance > Templates > template name.3. Select the noncompliant result on which you
vCenter Configuration Manager Administration Guide66VMware, Inc.
Configuring vCenter Operations ManagerIntegration5Configuring vCenter Operations ManagerIntegrationIntegration of VCM with vCenter Operations Manager
vCenter Configuration Manager Administration Guide68VMware, Inc.
Auditing Security Changes in Your Envi-ronment6Auditing Security Changes in YourEnvironmentThe VCM Auditing capability tracks all changes in the secur
ContentsConfiguring VCMRemote Connection Types 205Using Certificates With VCM Remote 206Configure and Install the VCMRemote Client 206Configure the
vCenter Configuration Manager Administration Guide70VMware, Inc.
Configuring Windows Machines7Configuring Windows MachinesTo manage your virtual and physical Windows machines, you must verify domains and accounts, d
Continuous Windows machine management is based on the latest data you collect from target machines.You can view data and run actions, such as reports
What to do nextAssign the network authority account to the domain so that VCM can access the Windows machines in thedomain. See "Assign Network A
Procedure1. Click Administration.2. Select Machines Manager > Discovery Rules.3. Click Add to create a discovery rule.4. On the Discovery Rules pag
Procedure1. Click Administration.2. Select Machines Manager > Available Machines.3. Select the Windows machines to license.4. Click License.5. Veri
4. In the System Configuration dialog box, click the Tools tab.5. In the Tool Name list, select Disable UAC.6. Click Launch.7. When the command is fin
What to do nextInstall the VCM Windows Agent on licensed Windows machines in your environment, and then re-enablethe group policy on the domain contro
Option DescriptionHTTP Secure communication protocol for the Agent. Use HTTP, whichinstalls the HTTP Listener on the target machine and configures itt
nYou use the EXE file to install the Agent in unattended, silent mode. EXE files detect an existingsoftware version and provide the option to uninstal
vCenter Configuration Manager Administration Guide8VMware, Inc.
Option Action/s Indicates a silent install. When you run CMAgentInstall.exefrom the command line, VMware recommends that you installthe Agent in silen
Use the MSI File to Install the AgentYou can use the MSI file to manually install the VCM Windows Agent on a target machine. The directoriesspecified
Option Action/qn Runs the command in quiet mode without user interaction./i Runs the command as an installation./x Runs the command as an uninstall pr
The Windows Agent uninstall executable file exists on the VCM managed machine if you installed theAgent manually using CMAgentInstall.exe or CMAgentIn
Procedure1. On the Windows 2008 machine, click Start > Run.2. In the Run dialog box, type msconfig and click OK.3. In the User Account Control dial
To move all visible Windows machines to the selection window, 500 at a time, use the double arrow.4. On the Data Types page, select the Select All che
Option DescriptionnTo run assessments and patch your Windows machines, see the online help.Getting Started with Windows Custom InformationWindows Cust
1. "Collecting Windows Custom Information" on page 98To collect Windows Custom Information (WCI) using script-based filters, you create and
The WCI data type uses extensions to the VCM Windows Agent. The extensions allow the Agent toinvoke PowerShell scripts. Using the script-based collect
Challenges in PowerShell Scripting for WCIWhen you develop custom collection scripts, understand the challenges that you might encounter whilescriptin
About This BookAbout This BookThe VMware vCenter Configuration Manager Administration Guide describes the steps required to configureVCM to collect an
Column Names Include SpacesRunning the schtasks command without any options displays a column name of Next Run Time.Because this name includes spaces,
To preserve the user-friendly name, use the task name as the element name for the task rows. When youcreate a collection filter that uses your script,
nIn-line: The default WCI filter uses an in-line script to collect basic information about the PowerShellversion, .NET version, and execution policy s
The schtasks command returns basic information about scheduled tasks. The data returned byschtasks includes multiple rows. PowerShell structures the $
###########################################################################-##function ToCMBase64String([string]$input_string){return [string]("c
if (([string]$cols[$j]).toupper() -eq "HOSTNAME"){$hostcol = $j++}else{if (([string]$cols[$j]).toupper() -eq "TASKNAME"){$namecol
#some operating systems will return columns multiple timesin the result setif ($task[0] -ne $firstcol){#if we did not find a TaskName column, just tag
} #end data row that is not columns repeated} #end data row} #end row loop}$clTasks += ("</Scheduled_Tasks>")write-host $clTasks5. Aft
When the filters return data under the top-level element name and a managed machine starts to listenon port 80, each filter initially reports the data
Create Your Own WCI PowerShell Collection ScriptCreate or modify your Windows Custom Information (WCI) scripts to collect almost any data type that is
Comments to this Manuals