{"id":10467,"date":"2022-06-03T06:00:52","date_gmt":"2022-06-02T20:00:52","guid":{"rendered":"https:\/\/www.penguinpunk.net\/blog\/?p=10467"},"modified":"2022-06-03T17:50:58","modified_gmt":"2022-06-03T07:50:58","slug":"vmware-cloud-on-aws-tmcham-part-5-vm-management","status":"publish","type":"post","link":"https:\/\/www.penguinpunk.net\/blog\/vmware-cloud-on-aws-tmcham-part-5-vm-management\/","title":{"rendered":"VMware Cloud on AWS &#8211; TMCHAM &#8211; Part 5 &#8211; VM Management"},"content":{"rendered":"<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2019\/11\/VMware-Logo-200x200-01-1024x1024.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-8656 size-medium\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2019\/11\/VMware-Logo-200x200-01-1024x1024-300x76.png\" alt=\"\" width=\"300\" height=\"76\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2019\/11\/VMware-Logo-200x200-01-1024x1024-300x76.png 300w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2019\/11\/VMware-Logo-200x200-01-1024x1024-768x194.png 768w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2019\/11\/VMware-Logo-200x200-01-1024x1024.png 1012w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/04\/IMG_0009.jpeg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10471 size-medium\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/04\/IMG_0009-300x154.jpeg\" alt=\"\" width=\"300\" height=\"154\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/04\/IMG_0009-300x154.jpeg 300w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/04\/IMG_0009-768x395.jpeg 768w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/04\/IMG_0009.jpeg 1024w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>In this edition of Things My Customers Have Asked Me (TMCHAM), I&#8217;m going to delve into some questions around managing VMs running on the VMware-managed <a href=\"https:\/\/www.vmware.com\/products\/vmc-on-aws.html\">VMware Cloud on AWS<\/a> platform, and talk about vCenter plugins and what that looks like when you move across to VMware Cloud on AWS.<\/p>\n<p><strong>How Can I Access vCenter?<\/strong><\/p>\n<p><a href=\"https:\/\/www.vmware.com\/au\/products\/vcenter-server.html\">VMware vCenter<\/a> has been around since Hector was a pup, and the good news is that it can be used to manage your VMware Cloud on AWS environment. It&#8217;s accessible via <a href=\"https:\/\/docs.vmware.com\/en\/VMware-Cloud-on-AWS\/services\/com.vmware.vmc-aws.getting-started\/GUID-C057DF7D-8016-45C4-AE12-56490E013F95.html\">a few different methods<\/a>, including PowerCLI. If you want to access the HTML5 UI via the cloud console, you&#8217;ll need to ensure there&#8217;s a firewall rule in place to allow access via your Management gateway &#8211; the official documentation is <a href=\"https:\/\/docs.vmware.com\/en\/VMware-Cloud-on-AWS\/services\/com.vmware.vmc-aws-networking-security\/GUID-2D31A9A6-4A80-4B5B-A382-2C5B591F6AEB.html\">here<\/a>. If the rule has already been created and you just need to add your IP to the mix, here&#8217;s the process.<\/p>\n<p>The first step is to find out your public IP address. I use <a href=\"https:\/\/www.whatismyip.com\">WhatIsMyIP.com<\/a> to do this.<\/p>\n<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/05\/WhatIsMyIP.com_.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10513 size-medium\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/05\/WhatIsMyIP.com_-300x209.png\" alt=\"\" width=\"300\" height=\"209\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/05\/WhatIsMyIP.com_-300x209.png 300w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/05\/WhatIsMyIP.com_-768x534.png 768w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/05\/WhatIsMyIP.com_.png 958w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>In your console, go to Networking &amp; Security -&gt; Inventory -&gt; Groups.<\/p>\n<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_001.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10514\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_001.png\" alt=\"\" width=\"800\" height=\"757\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_001.png 1000w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_001-300x284.png 300w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_001-768x727.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>Under Groups, make sure you select Management Groups.<\/p>\n<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_002.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10515\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_002.png\" alt=\"\" width=\"800\" height=\"302\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_002.png 1250w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_002-300x113.png 300w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_002-1024x387.png 1024w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_002-768x290.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>You&#8217;ll find a Group that was created that stores the IP information of folks wanting to access vCenter. In this example, we&#8217;ve called it &#8220;SET Home IP Addresses&#8221;.<\/p>\n<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_003.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10516\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_003.png\" alt=\"\" width=\"800\" height=\"67\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_003.png 1250w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_003-300x25.png 300w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_003-1024x85.png 1024w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_003-768x64.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>Click on the vertical ellipsis and click Edit.<\/p>\n<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_004.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-10517\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_004.png\" alt=\"\" width=\"496\" height=\"202\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_004.png 496w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_004-300x122.png 300w\" sizes=\"auto, (max-width: 496px) 100vw, 496px\" \/><\/a><\/p>\n<p>Click on the IPs section.<\/p>\n<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_005.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10518\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_005.png\" alt=\"\" width=\"800\" height=\"366\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_005.png 852w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_005-300x137.png 300w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_005-768x352.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>You&#8217;ll then see a spot where you can enter your IP address. You can do a single address or enter a range, as shown below.<\/p>\n<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_006.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10519\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_006.png\" alt=\"\" width=\"800\" height=\"490\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_006.png 2322w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_006-300x184.png 300w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_006-1024x627.png 1024w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_006-768x470.png 768w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_006-1536x941.png 1536w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_006-2048x1254.png 2048w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>Click Apply and then click Save to save the rule. Now you should be able to open vCenter.<\/p>\n<p><a href=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_007.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10520\" src=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_007.png\" alt=\"\" width=\"800\" height=\"90\" srcset=\"https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_007.png 2600w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_007-300x34.png 300w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_007-1024x116.png 1024w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_007-768x87.png 768w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_007-1536x174.png 1536w, https:\/\/www.penguinpunk.net\/blog\/wp-content\/uploads\/2022\/06\/vCenter_Access_007-2048x232.png 2048w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p><strong>Can I run RVTools and other scripts on my VMC environment?<\/strong><\/p>\n<p>Yes, you can run <a href=\"https:\/\/www.robware.net\/rvtools\/\">RVTools<\/a> against your environment. In terms of privilege levels with VMware Cloud on AWS, you get CloudAdmin. The level of access is outlined <a href=\"https:\/\/docs.vmware.com\/en\/VMware-Cloud-on-AWS\/services\/com.vmware.vsphere.vmc-aws-manage-data-center-vms.doc\/GUID-DFB3C048-5728-4DE9-9380-7240748875C3.html\">here<\/a>. It&#8217;s important to understand these privilege levels, because some things will and won&#8217;t work as a result of these.<\/p>\n<p><strong>Can I lockdown my VMs using PowerShell?<\/strong><\/p>\n<p>You will have the ability to set these advanced settings on your VMs in the SDDC, but this is limited to per-VM, rather than on a per-cluster basis. So if you normally ran a script on a pre-VM basis to harden the VM config, you&#8217;d need to run that on each VM individually, rather than on a per-cluster level.<\/p>\n<p><strong>What about vCenter plugins?<\/strong><\/p>\n<p>We don&#8217;t have a concept of vCenter plugins in VMware Cloud on AWS, so there are different ways to get the information you&#8217;d normally need.\u00a0vROps, for example, has the ability to look at VMware Cloud on AWS, using either the on-premises version or the cloud version. There&#8217;s information on that <a href=\"https:\/\/docs.vmware.com\/en\/vRealize-Operations\/8.6\/com.vmware.vcom.core.doc\/GUID-5964C8B1-738D-4949-B9E9-CECF34D372E6.html\">here<\/a>, but note that the plugin isn\u2019t supported with VMC vCenter.<\/p>\n<p>What about my Site Recovery Manager plugin? The mechanism for managing this will change depending on whether you&#8217;re using SRaaS or VCDR to protect your workloads. There\u2019s some good info on SRaaS <a href=\"https:\/\/core.vmware.com\/resource\/vmware-site-recovery-technical-overview#section2\">here<\/a>, and some decent VCDR information <a href=\"https:\/\/docs.vmware.com\/en\/VMware-Cloud-Disaster-Recovery\/services\/vmware-cloud-disaster-recovery\/GUID-FD70D07B-7433-41FF-B316-59CBA07DDDB3.html\">here<\/a>. Again, there is no plugin available, but the element managers are available via the cloud console.\u00a0<span class=\"Apple-converted-space\">\u00a0<\/span><\/p>\n<p>What about NSX-V? VMware Cloud on AWS is all NSX-T, and you can access the NSX Manager via the cloud console.<\/p>\n<p><strong>Conclusion<\/strong><\/p>\n<p>A big part of the reason people like VMware Cloud on AWS is that the management experience doesn&#8217;t differ significantly from what you get VMware Cloud Foundation of VMware Validated Designs on-premises. That said, there are a few things that do change when you move to VMware Cloud on AWS. Things like plugins don&#8217;t exist, but you can still run many of the scripts you know and love against the platform. Remember, though, it is a fully managed service, so some of the stuff you used to run against your on-premises environment is no longer necessary.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this edition of Things My Customers Have Asked Me (TMCHAM), I&#8217;m going to delve into some questions around managing VMs running on the VMware-managed VMware Cloud on AWS platform, and talk about vCenter plugins and what that looks like when you move across to VMware Cloud on AWS. How Can I Access vCenter? VMware [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[874,1377,4],"tags":[1048,1393,312,216,1389,798,322,1144,786,1028],"class_list":["post-10467","post","type-post","status-publish","format-standard","hentry","category-cloud","category-vmconaws","category-vmware","tag-management","tag-rvtools","tag-site-recovery-manager","tag-srm","tag-vcdr","tag-vcenter","tag-virtual-machine","tag-vmconaws","tag-vmware","tag-vmwonaws"],"_links":{"self":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/10467","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/comments?post=10467"}],"version-history":[{"count":10,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/10467\/revisions"}],"predecessor-version":[{"id":10538,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/10467\/revisions\/10538"}],"wp:attachment":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/media?parent=10467"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/categories?post=10467"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/tags?post=10467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}