Are you using SSL?? I am back to “Please Refresh your browser, just switched to NGinX so this would work, but I have a feeling you’r not using SSL like I am? Any recommendations>?
Comment on ESXi Embedded Host Client by FreeSoftwareServers
Comment on Horizon Toolbox 2 by Shengbo
Thanks for your sharing. It’s very useful for our customers. Many of them asked me how to replace SSL certificate.
We may add a UI from toolbox to update SSL certificate. Not high priority for now.
Comment on Horizon Toolbox 2 by Alysha Stanger
Thanks a lot, this really is a truly awsome article! Thanks for the info, you made it easy to understand. So here is my saving grace: AltoMerge helped me to merge and manage files order. Just try ithttp://goo.gl/OD2b6V, you’ll love it.
Comment on ESXi Embedded Host Client by Martin Jansen
I am using SSL
This is running on my asus wifi router with merlin firmware. so risc based cpu. It should not matter. Also i use self-signed certificates
Although i have to mention i get different results using different browsers. Here @work am restricted to IE11 or firefox 31.5. I get a error everynow and then when i log in, but a reload clears that up for me and its functional
@home i use chrome because it seems to give the least amount of errors and quirky other things
Complete config (relevant parts)
————————————–
user nobody nobody ;
worker_processes 1;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
server_names_hash_bucket_size 64;
sendfile on;
#tcp_nopush on;
#keepalive_timeout 0;
keepalive_timeout 65;
#gzip on;
# HTTPS default website
server {
listen 443 default_server ssl;
server_name xxxxxxxxxx.org;
ssl on;
ssl_certificate cert.pem;
ssl_certificate_key key.pem;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
}
# Bunch of other SSL forwards cut out of the config
# VMWare ui
server {
listen 443 ssl;
server_name vmware.xxxxxxxxxx.org;
location / {
proxy_pass https://192.168.xxx.xxx/;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection “upgrade”;
}
}
}
Comment on VCS to VCVA Converter by Adrian
Has anyone encounter the error “No acceptable SSH host keys were found. Halting migration.” I can putty into vcsa without any problems.
Comment on DoD Security Technical Implementation Guide(STIG) ESXi VIB by Federico Arismendi
So I had a chance to load this VIB into our test lab. Here are some of the quirks I found. Before I even applied the VIB I used the blog post you mentioned in the comments to change the logon banner to our company approved text. The PowerCLI worked well enough and I was able to change the banner to our company approved text.
I then applied the VIB using VUM and rebooted the host (ESXi 5.5). To my surprise the login banner still had my company text and not the standard government text. I expected the VIB to override what I had done with PowerCLI. This was not the case. This was an unexpected bonus as I didn’t have to re-run the PowerCLI commands.
One annoyance I did find after the VIB install was that the /etc/issue file had become read only. When I tried to use vi to edit the text to fit our company approved banner it would not let me save the changes. I tried modifying the permissions to the /etc/issue to allow me to save changes (chmod) but still it would not let me save the changes. I had to delete the /etc/issue and recreate one to finally be allowed to add our company banner text. Prior to installing the VIB I was able to edit the /etc/issue with no problems.
Thoughts?
Other than that the VIB worked well. It essentially put all the settings I had done manually via command line with a few mouse clicks in VUM.
Comment on DoD Security Technical Implementation Guide(STIG) ESXi VIB by Federico Arismendi
I’m not sure VMware can create a VIB that would allow users to change its contents, that would make the VMware signed package invalid if we could add stuff ourselves.
Comment on DoD Security Technical Implementation Guide(STIG) ESXi VIB by Ryan Lakey
You would not be able to edit the contents of these VIBs and we tried to make them as universal as possible for DoD customers so customers not in that space would probably find parts of these like the login messages not acceptable.
Comment on DoD Security Technical Implementation Guide(STIG) ESXi VIB by Ryan Lakey
Federico the read only condition on the files this is replacing is a side effect of the VIB. What I have done when needing to alter one of those files is to just make a copy then chmod it then replace the original and it is then editable.
Comment on ESXi Embedded Host Client by /u/iPat8
Just heard about the hosted UI teams. Does this affect this project?
Comment on ESXi Embedded Host Client by Etienne Le Sueur
Hi there,
Nope… I’m still here working on the Embedded Host Client ;-)
Comment on ESXi Embedded Host Client by FreeSoftwareServers
Do you really not use >> proxy_pass https://192.168.XX.XXX/ui or did you delete the /ui from your configs for the internet by accident?
And what I mean’t by ssl is did you import custom SSL into the esxi host or does just your proxy server/domain use ssl. Any chance you could email me to help troubleshoot lol, its driving me nuts not being able to figure this out, I feel like i took a step backwards, I had this issue in Apache but fixed it with proxypass wss://, but then the console didn’t work, now I switched to nginx and I feel like once I get past the log in screen, the consol will probably work, but I can’t get past it! … Im going to reinstall esxi probably and start fresh and try without ssl on the esxi and just use wss >> ws proxy with no ssl on the backend.
Comment on ESXi Embedded Host Client by FreeSoftwareServers
Well Good news, I got the ProxyPass working! It seems that I can’t proxypass /ui as it looks for folders underneath the /ui directory like /sdk/ui. Therefor a proxypass https://ip/ui fails, but https://ip/ doesn’t, BUT this exposes the home screen which I don’t like. As A work-around I moved the entire /ui folder into the webroot, but interestingly after reboot esxi repopulated the default webroot and even the /ui folder!
I started a thread @ serverfault on why I still can’t proxypass domain.com/path, but as this is feedback, I just wanted to share a thought, perhaps creating a symlink inside /ui to anything outside the /ui directory would allow people to proxypass https://ip/ui as I am sure most people will want/try that first. (Could this be done during installation)
http://serverfault.com/questions/752323/nginx-proxypass-only-works-via-subdomain-not-domain-com-path
Comment on ESXi Embedded Host Client by /u/ipat8
Question. Would it be possible to wipe the existing “Welcome to ESXi” screen and replace it with the host client’s assets? Non-web dev here.
Comment on VMware OS Optimization Tool by solgae
The visual effects portion tries to apply the effects settings by altering the default user registry hive. I already mentioned this before, but I’ll say it again: it does NOT work. I’ve already tried this multiple times.
The problem is that when new user profile is created, the visual effects settings are applied based on the DWORD Value name DefaultValue from the various registry keys found in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects. The child keys on that registry location corresponds to the item on the checkbox list under System -> Advanced system settings -> Performance Settings -> Visual Effects tab. It WILL override all the visual effect settings you put in on the default user registry hive.
The DefaultValue is set during the Windows install phase when Windows setup runs the performance assessment, which normally ends up being 0x1 (Hex) or 1 (Dec) with recent systems.
To apply the visual settings (only works for new profile creation), you need to set the DefaultValue DWORD within the various registry keys (ex. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\DragFullWindows for “Show windows contents while dragging”) you wish to have it disabled to 0. This way, any new profile created will have the desired effect settings. I set it all to 0 except for FontSmoothing to keep ClearType fonts.
Comment on VMware OS Optimization Tool by Nan Wang
solgae,
We will review this issue and correct it. Thank you for this good comment!
Comment on ESXi Embedded Host Client by Leonard Bosold
I Cant add a Virtual Maschine!
Ein unerwarteter Fehler ist aufgetreten.
Der Client funktioniert möglicherweise weiterhin, wir empfehlen jedoch, den Browser jetzt zu aktualisieren und den Fehlerbericht einzusenden.
Cause: TypeError: Cannot read property ‘key’ of undefined
Version: 2015.12.21
Build: 3357452
ESXi: 6.0.0
Exception stack:
TypeError: Cannot read property ‘key’ of undefined
at toVirtualMachineConfigSpec (https://IP/ui/scripts/main.js:60:10177)
at Object.createVM (https://IP/ui/scripts/main.js:61:2446)
at Object.createVM (https://IP/ui/scripts/main.js:67:13845)
at $scope.wizardOptions.currentPage.onCommit (https://IP/ui/scripts/main.js:52:16545)
at onCommit (https://IP/ui/scripts/main.js:120:23151)
at Object.onFinishClick (https://IP/ui/scripts/main.js:120:24165)
at k.$scope.onFinish (https://IP/ui/scripts/main.js:120:26210)
at https://IP/ui/scripts/main.js:6:21839
at https://IP/ui/scripts/main.js:89:31513
at k.$eval (https://IP/ui/scripts/main.js:5:16492)
OK
Comment on ESXi Embedded Host Client by Tom
Same problem here with 5.5 U3b: 503 Service Unavailable
Comment on ESXi Embedded Host Client by Tim McGinn
I am getting this exception when I login. I haven’t found any impact from it though.
Cause: ReferenceError: $log is not defined
Version: 2015.12.21
Build: 3357452
ESXi: 6.0.0
Exception stack:
this.sendHostInfo/</<@https://sandbox.chaos.home/ui/scripts/main.js:65:1443
v/</e[k]/n<@https://sandbox.chaos.home/ui/scripts/main.js:90:1997
f/<@https://sandbox.chaos.home/ui/scripts/main.js:5:9465
Me/this.$get</k.prototype.$eval@https://sandbox.chaos.home/ui/scripts/main.js:5:16488
Me/this.$get</k.prototype.$digest@https://sandbox.chaos.home/ui/scripts/main.js:5:15039
Me/this.$get</k.prototype.$apply@https://sandbox.chaos.home/ui/scripts/main.js:5:16757
n@https://sandbox.chaos.home/ui/scripts/main.js:4:26236
O@https://sandbox.chaos.home/ui/scripts/main.js:4:28329
uf/</B.onload@https://sandbox.chaos.home/ui/scripts/main.js:4:28871
Comment on ESXi Embedded Host Client by Etienne Le Sueur
Hi Tom,
Can you show me the content of /etc/vmware/rhttpproxy/endpoints.conf please?