Posts

Title: Top 5 Cybersecurity Threats to Watch Out for in 2025 Introduction: As technology continues to evolve, so do the threats targeting individuals and organizations online. Cybersecurity is no longer just an IT concern—it’s a critical part of business strategy and personal safety. In this post, we’ll explore the top cybersecurity threats you should be aware of in 2025 and how to protect yourself. 1. AI-Powered Phishing Attacks: Phishing has been around for decades, but cybercriminals are now using AI to create highly convincing emails and messages. These AI-generated attacks can mimic writing styles, company branding, and even personal relationships, making it harder for users to detect malicious intent. Tip: Always verify the sender’s email and avoid clicking links without confirming their authenticity. 2. Ransomware Evolution Ransomware attacks are becoming more sophisticated. Attackers are targeting not just personal devices but critical infrastructure and supply chains. In many c...

Replacing vROPS Certificates

Image
Issue:  When using default certificates in vROPS  Due to security requirements it was necessary to replace the default self-signed certificates with a trusted certificate signed by an internal CA. Unlike vCenter, vROPS uses a common name vc-ops-slice-1 followed by slice-2 for data and other node, where vCenter has SAN names in the default certificate so when you add the root of the local machine trusted store then the vCenter url shows secured. In order to make the secure SSL we have to generate the CSR and get it signed by any third party SSL vendors or our own Microsoft CA.  I will be generating a CSR and getting signed by internal Microsoft CA .We can refer this below article from VMware as reference.  https://kb.vmware.com/s/article/2046591?lang=en_us Steps:  1.The first step is to create a new private key from taking a SSH session to master node vROPS. openssl genrsa -out vrops.key 2048 2. Using the configuration file below make sure to provide de...

vCloud Usage Meter 4.3 DNS settings is not updated after the UM 4.3 ovf Deployment

Image
Issue: I had multiple occasions where the UM 4.3 is deployed using ovf template and DNS settings are provided during the deployment and later checked DNS settings rollbacks to default IP address Actions Performed : 1.Accesses the /op/vmware/share/vami/vami_config_net and updated the DNS settings but still it rollback to default  DNS IP address 2. Added the DNS domain server in /etc/resolv.conf file but after the reboot the DNS IP address is not persistent  Cause: We found the resolv.conf is pointing to runtime symbolic which is making not persistent after reboot Workaround 1:  Take an SSH/ console onto the Usage Meter appliance, and run the below commands. mv /etc/resolve.conf /etc/resolve.conf.bak vi /etc/resolve.conf chmod 644 resolve.conf Key in the DNS server info in the below format. I have attached a screenshot below. nameserver DNSIPAddress1 nameserver DNSIPAddress1 Quit out of the file, and perform a reboot. Workaround 2: Navigated to the file: /etc/systemd/netwo...

Usage Meter 4.3 Fails to connect to vRNI (Network Insight) fails with API ERROR

Image
 Usage Meter v4.3 is not able to connect to vRealize Network Insight (vRNI v5.1.0). Product status in UM = collection error Message Notification = Collection error: APIError                                                                                                                                                                       Resolution : In `conf` directory modify `vrnicollector_process.conf` file, add the following lines and restart the vRNI collector service. Ensure the backup the file before making the changes below.         -httpCon...

Unable to add vCenter to Usage Meter 3.6 after replacing the vCenter certificate

Image
 Issue: Unable to add the vCenter endpoint to the usage meter due to certificate error Error: There was a problem checking the certificate vCenter fqdn :443 .Unexpected exception :java.net.UnknownHostException: fqdn of vCenter Actions performed:  1.Checked the root certificate on the vCenter and machine SSL ,SAN names etc 2. Running an openssl command  from Usage meter using the IP address of the vCenter returns the certificate  3. Running and opnessl command from Usage meter using the vCenter FQDN fails to resolve and unable to fetch the vCenter certificate. Resolution : 1.SSH into the Usage Meter appliance using root 2.Took a backup of /etc/hosts file 3.Added the IP address and the FQDN of the vCenter after which vCenter was successfully added to the Usage Meter.

Top 20 articles for vRealize Operations Manager

Handy KB articles for recent issues in vROPS How to reset the root password in vRealize Operations How to reset the admin password in vRealize Operations Manager Adding additional storage to a node in vRealize Operations vRealize Operations Manager Sizing Guidelines Configure a Certificate For Use With vRealize Operations /storage/log is full on vRealize Operations Replace expired internal certificate in vRealize Operations Manager 6.3 and later Upgrade to vRealize Operations Manager 8.0 fails due to the admin or root account password Upgrade to vRealize Operations Manager 8.0 hangs on step 4 of 9 Shutdown and Startup sequence for a vRealize Operations Manager cluster Clearing the Alerts and Alarms Tables in vRealize Operations Upgrade to vRealize Operations Manager 8.x fails due to low space on /dev/sda Upgrade to vRealize Operations Manager 8.0 fails due to low space on /dev/sdc Continuous disk space alerts for /storage/archive Guest File System in vRealize Operations Manager Rebooti...
Image
Using Custom Certificates in Usage Meter 4.x As we get to move on with customers and service providers asking to implement to use a secure web browser access to Usage Meter .The old versions of UM has methods to replace the certificates. Beginning from 3.6.1 versions there is no official or supported methods to use a custom certificates for Usage Meter and we are still allowed with default certificates. Recently we are receiving request from customer using their own internal or custom signed certificates for Usage Meter 4.x versions. It still in the road map and i believe it will be taken care in the upcoming versions. I have tested in my lab since the Usage Meter 4.x version uses ngnix web servers so i found a possibility to replace the certificates. Note: Its official not supported and no supported documentation available at this moment  and you have to repeat ever time you upgrade or patch the Usage Meter appliance make sure to take a snapshot or a valid backup befo...