Thursday, June 11, 2015

Disable mob, security hardening for vmware hosts

I seriously do not know why there is no option to disable a critical security threat from powercli on esxi hosts. You have to ssh to the hosts, use vcli or a better way is to use the plink to do your ssh. Once again this is all manual. Imagine an environment of 100 hosts and you have to do it on all of them. What a bummer isn't it. Well, not anymore. Here is a simpler way of doing it.
Thanks to alan from http://the.earth.li/~sgtatham/putty/latest/x86/plink.exe
for bringing this to the community.

Here is the link about what is mob and why should you disable it.
 http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1016039

Here is the script to get it done on my github repository.
https://github.com/gajuambi/vmware 

Tuesday, June 9, 2015

Set Disk.SchedNumReqOutstanding on all naa.* of all hosts

So once again we have a new task on our datacenters that we are building for our clients and we have to set Disk.SchedNumReqOutstanding against all naa.* of the ESXi host of the entire production line.
Here is a less tedious way (plan to make it much easier when i get more time) way of doing it.


Enable Vaai on multiple esxi hosts

So if you ever felt sad for having to enable VAAI on 100s of hosts then feel sad no more.
Here is a nifty script to do it for you, especially for me.

Monday, June 8, 2015

update windows DNS via powershell script

want to update dns on 1000s of VMs using pssession or just one?
then here you go. A nifty powershell arrow to shoot it on the dot.
https://github.com/gajuambi/windows/blob/master/winDNS

Friday, June 5, 2015

SSH for powershell

Finally microsoft announced SSH for powershell but there is a nifty free module for powershell called Posh-SSH and it is just awesome. I have just made a tiny script to install it on your PC. Make sure you replace
<user> with your username in the script.
This SSH will be useful for messing with ESXi soon. hopefully....
go get it ssh for powershell.

VM Security Settings Hardening for vSphere 5.x

Every now and then we all have wondered about security hardening of our environment and it seems it is never enough. you can never be too secure.
In that direction here is a cent of mine. few security hardening settings for your virtual machines of your vmware infrastructure. There are many i have left out and if you wan to add more then go visit these links.
My VMSecurityHardening script
https://github.com/gajuambi/vmware/blob/master/VMSecurityHardening
Inspired by
www.stigviewer.com/stig/vmware_esxi_version_5_virtual_machine/2013-12-18/
https://toti3.wordpress.com/tag/get-advancedsetting/