davidstamen.com

Updating Trend Micro Deep Security Manager Certificate

So going though v7, v8 and v9 of the certificate guides I continued to have some issues getting the certificate to work and the steps never included ways to add subject alternative names. Upon further research I have identified a good step by step to replace the trend micro DSM certificate and include subject alternative names using a Microsoft certificate authority. 1. Stop the “Trend Micro Deep Security Manager” service 2. If not already created, create a folder on the root of C:\ called “certs” 3. Go to C:\Program Files\Trend Micro\Deep Security Manager and create a new folder called “Backupkeystore” 4....

Cisco Champion 2015

I am honored to have been accepted as a Cisco Champion for 2015! I guess this means I will continue and post to expand content on Cisco UCS and Cisco IronPort.

Identify DirSync Distribution Groups in Office365

So after recently implementing directory sync i wanted to make sure any new groups were properly set up in active directory. Unfortunately i was unable to find any commands so thanks to MS Support I was able to find a way to identify these. You would think it would be under Get-DistributionGroup but it is actually under Get-MSolGroup. After connecting via remote powershell you can run the below command to see all that are not synced. Get-MsolGroup -All | Select DisplayName, LastDirSyncTime | Where-Object {$_.LastDirSyncTime -eq $null} Thanks for stopping by!

Horizon View 6 – Single Sign On with Published Applications

So I have been working in a few situations where i have wanted to use Horizon 6 published (RDS) applications but having to either launch the Horizon View client within a VDI or have users be forced to logon again has been a deal breaker. Upon further research i finally found the right combination of settings to allow users to launch the RDS Hosted Applications via a Shortcut and automatically login to the view client making this process seamless. For some reason when the Horizon View 3.0/3.1 client is installed within a VDI you are not given the option to...

Office 365/Exchange EAC Pop Ups not working with Chrome 37

Chrome depreciated one of the features that allowed these popups to work, here is a temporary workaround to get it working. Download the Chrome Policy Plugin Here. Open the zip file you just downloaded and locate the .ADM file that best matches your system: Extract the .ADM file to any folder on your hard drive Go to Start > Run, and run gpedit.msc Right-click Local Computer Policy > Computer Configuration > Administrative Templates, and select Add/Remove Templates: Add the adm template that you saved to disk earlier: You should now see the template underneath a Google > Google Chrome section...

vSphere Data Protection – Insufficient Disk Space for Upgrade

As I was upgrading my VDP-A environment from 5.5 to 5.8 the upgrade failed due to the following error. “Please make sure you have at least 20GB for repo, 10GB for var, and 1GB for root partition.” Upon further research there seems to be an issue from 5.5.1 and 5.5.5 appliances with the /space partition filling up due to PostGres events. The issue can be resolving by installing the following VDP patch (vdp_patch-5.5.5.190.) http://kb.vmware.com/kb/2067635 The installation is pretty straightforward. Download the patch VDP VDP-Advanced Copy the patch file to the VDP appliance and place it in the /root directory using...

Unable to Install .NET 3.5 on Server 2012R2

So upon trying to install .Net 3.5 on a new server today it would not allow me to, it kept telling me the source files were unavailable even after pointing to source directly to multiple ISO’s and copied the files locally. Upon further research I stumbled across this microsoft KB article and used it to ultimately find my fix.  http://support.microsoft.com/kb/2734782 Here are the full steps I followed to get .NET installed. 1. Open gpedit.msc to modify your local group policy. 2. Navigate to Computer Configuration/Administrative Tools/System and there should be an option for “Specify Settings for optional component installation.” Enable this...

Sysprep runs repeatedly on virtual machines deployed to ESXi 5.1 build 1743533

We had a strange issue that any time a VM was snapshotted it then forced a reboot and sysprep. Reviewing the customization logs(C:\windows\temp\vmware-imc\guestcust.log) I noticed the following error..Unable to set customization status in vmx. Upon further research it seems this is a known issue and is resolved in ESXi 5.1 Express Patch 5 as referenced in this article. http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2078352 However the hotfix only fixes future occurences, you still need to fix all the VMs affected. See below for the powercli script I created to connect to all my vcenters, get VM’s that are affected and then fix them. Please note as...

Configuring ESXi 5.5 Syslog Collector

Thank you to everyone who listened to me on the EMEA vBrownbag. Here are copies of documentation and scripts on how to configure ESXi to use the Syslog collector. Check the ESXi Syslog Collector Configuration Example: Foreach ($vmhost in (get-vmhost)){ $esxcli = Get-EsxCli -vmhost $vmhost $esxcli.system.syslog.config.get()} Setting the ESXi Syslog Collector Example: Foreach ($vmhost in (get-vmhost)){ $esxcli = Get-EsxCli -vmhost $vmhost $esxcli.system.syslog.config.set($null, $null, $null, $null,”udp://IPtoSyslogServer:514″) $esxcli.system.syslog.reload()} Post-Installation Changes If you wish to change the default port or maxsize of the syslog rotation, these can be changed by modifying the vmconfig-syslog.xml file. See below link with instructions on how to make the changes and restart...

Configuring ESXi 5.5 Dump Collector

Thank you to everyone who listened to me on the EMEA vBrownbag. Here are copies of documentation and scripts on how to configure ESXi to use the remote dump collector. Check the ESXi Dump Collector Configuration Example: Foreach ($vmhost in (get-vmhost)){ $esxcli = Get-EsxCli -vmhost $vmhost $esxcli.system.coredump.network.get()} Setting the ESXi Dump Collector Example: Foreach ($vmhost in (get-vmhost)) { $esxcli = Get-EsxCli -vmhost $vmhost $esxcli.system.coredump.network.set($null, “vmk0″, “IPtoDumpCollector″, “6500″) $esxcli.system.coredump.network.set($true)} Test Host by Causing PSOD Run the following command via SSH or Direct Shell. We can see that the server is now doing a network coredump. vsish -e set /reliability/crashMe/Panic 1 Post-Installation Changes If...