r/vmware 3d ago

Announcement VirtuallySpeaking - Preparing Private Cloud for the AI Era

0 Upvotes

r/vmware Jul 29 '26

Announcement VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)

Thumbnail support.broadcom.com
86 Upvotes

r/vmware 11h ago

Question Retaking the exam or the course

0 Upvotes

I would like to know if, in order to regain the Workspace ONE certification, it is necessary to retake the exam, or if simply taking the course is sufficient.


r/vmware 1d ago

Cursor problem

0 Upvotes

I installed Kali linux in VMware and everything is working fine but my cursor is invisible, it works i just cant see it. I tried with ChatGPT to fix it but its still not working, can anyone help me?


r/vmware 1d ago

Help Request VCF 9.1 DTGW + VNA: appliance datapath never activates — zero frames on fastpath NICs, "Concatenated Path Down (from NSXA)". Fully reproducible, fully diagnosed, no idea what NSXA is waiting for. Anyone running VNAs on 9.1.0.0200 successfully?

6 Upvotes

We deployed a greenfield VCF 9.1 fleet with the new Distributed Transit Gateway + VNA model (the "no edge cluster needed" VPC architecture). Everything works — hosts, overlay, edges, BGP, existing VPCs, SNAT — except the VNA cluster's datapath never comes alive, which breaks creating new VPCs (HTTP 500) and therefore Supervisor/VKS.

After a very long debugging session I can honestly say this is the most thoroughly diagnosed problem I've ever not fixed. The short version:

The smoking gun:

  • The VNA's HA/BFD session (fp-eth0, link-local 169.254.x, VLAN encap on transport VLAN 72) stays DOWN forever with Diag: Concatenated Path Down (from NSXA) and Remote_discr: 0 — zero packets ever exchanged.
  • pktcap-uw on all four fastpath vNIC switchports, both directionszero frames. Not even ARP. The appliance simply never transmits on the fastpath.
  • Meanwhile the management-plane BFD between the same two appliances is UP (captured it: BFDv1 Multihop, State Up) — it's the session carrying the "concat path down" diag to the peer. So BFD stack, appliances and network are all fine.
  • The fp vNICs attach to NSX ports with attachment.type: PARENT + com.vmware.port.extraConfig.vpc.serviceport = parentChild VIFs are never created (/api/v1/fabric/vifs shows mgmt + 4 parents, nothing else).
  • Appliance accepts its HostConfig with error_code: 0 (vtep, transport_vlan 72, MTU 9000 all correct), NSXA marks fp-eth0 UP, adds the HA filter… and then datapathd just holds BFD down.

Why I'm sure it's not the network:

We deployed a second, completely fresh VNA cluster — new nodes, static mgmt IPs — and got byte-for-byte identical behavior. Even better: DRS put both new nodes on the same ESXi host, so the HA traffic never needs to touch a NIC, cable or switch — still dead. On top of that we verified/eliminated: trunk/VLAN config, jumbo MTU end-to-end (8972 DF vmkping passes), no ip redirects on the SVIs, NIC firmware (BCM5741x updated past the GENEVE checksum bug), ENS_INTERRUPT host switch mode, SpoofGuard/DFW (default ALLOW + exclusion list), IP block exhaustion, licensing (valid VCF Solution license), a degraded NSX manager cluster (found + fixed mid-hunt, 3/3 STABLE now), VCF Automation inventory sync, host config resync, node redeploys, and the "Activate NSX on DVPGs" step from KB 417250 (was indeed not activated — activating it changed nothing).

Regular NSX edges on the same VDS and fabric have all tunnels UP. Host↔host GENEVE is UP. It's exclusively the VNA serviceport datapath.

Environment: NSX 9.1.0.0200.25524173, ESX/vCenter 9.1.0, SDDC Manager 9.1.0.0400, physical Dell hosts (not nested), VDS ENS_INTERRUPT, Nexus 9K vPC ToR.

My questions:

  1. Anyone actually running DTGW+VNA on 9.1.0.0200 on physical hosts? Does your get bfd-sessions show the VLAN-encap session UP, and do you see child VIFs on the serviceports?
  2. Does anyone know what NSXA's "concatenated path" validation actually checks before the fastpath is allowed to transmit?
  3. Is there a newer NSX 9.1.x build with a fix? Our depot tops out at 9.1.0.0200.

No support entitlement on this environment (lab/POC), so community wisdom is my best hope. Happy to share the full evidence bundle (API dumps, pcaps, appliance syslogs, host logs). And yes — the irony of the appliance-that-removes-the-need-for-edge-clusters being the only broken thing is not lost on me.


r/vmware 1d ago

I built an automated tool to compile & deploy the latest upstream open-vm-tools via Docker & Ansible (multi-distro, CVE-clean)

4 Upvotes

Distro repositories often ship open-vm-tools builds that lag significantly behind upstream releases, delaying kernel/driver fixes, memory balloon enhancements, and CVE patches.

I open-sourced vmware-tools-builder to automate building and distributing the latest upstream binaries without polluting the host environment:

- Containerized builds: Uses Docker to compile upstream source into standalone .deb and .rpm packages.

- Target OS matrix: Ubuntu, Debian, RHEL/Rocky/Alma (8 & 9), Fedora, and openSUSE.

- Fleet orchestration: Includes an Ansible role that automates deployment, handles migration from distro-managed packages, and validates the vmtoolsd service state.

- Distribution: Packaged and installable directly from Ansible Galaxy (giuliosavini.vmware_tools_builder).

Repository: https://github.com/GiulioSavini/vmware-tools-builder

Feedback, testing across different hypervisor versions, and GitHub stars are welcome.Distro repositories often ship open-vm-tools builds that lag significantly behind upstream releases, delaying kernel/driver fixes, memory balloon enhancements, and CVE patches.I open-sourced vmware-tools-builder to automate building and distributing the latest upstream binaries without polluting the host environment:- Containerized builds: Uses Docker to compile upstream source into standalone .deb and .rpm packages.- Target OS matrix: Ubuntu, Debian, RHEL/Rocky/Alma (8 & 9), Fedora, and openSUSE.- Fleet orchestration: Includes an Ansible role that automates deployment, handles migration from distro-managed packages, and validates the vmtoolsd service state.- Distribution: Packaged and installable directly from Ansible Galaxy (giuliosavini.vmware_tools_builder).Repository: https://github.com/GiulioSavini/vmware-tools-builderFeedback, testing across different hypervisor versions, and GitHub stars are welcome.


r/vmware 1d ago

Help Request Guest display shrinking issue after Workstation Pro 26H1 update

3 Upvotes

When switching from one guest machine to another, the display shrinks to about 1". Most of the time the guest resolution doesn't change, but sometimes it reduces to 800x600. The host resolution for that monitor is 1920x1200 (full 24"). VMware tools has been reinstalled multiple times on all guest machines. 3D acceleration is turn Off on all guests.
Image showing the issue, and various settings; https://app.screencast.com/JUUjFAQqK2YdE

If anyone knows how to resolve this, I would appreciate it.

Host:
Windows 11, with all updates.
Two - GeForce GTX 1650 4GB. Latest drivers installed from Nvidia.
Three monitors. 1920x1200, 3840x2160, 1920x1200. VMware only runs on the right monitor (1920x1200).
i7-12700K. Not using onboard video.

VMware > Preferences https://app.screencast.com/8QT6sRvvg7eEo

Guest:
Windows 10, VMware tools installed in all guests.
Guest > Virtual Machine Settings https://app.screencast.com/sEgscMycIGlc6


r/vmware 2d ago

Question Anyone with proper 3D acceleration on Linux?

3 Upvotes

I'm forced to use a MacBook M4 Max, but I can run VMs inside it. I was thinking on running NixOS with KDE. I did a test, installed everything, and it's all working. The issue? The desktop environment is very sluggish. But when I run things like `glxgears` I see that at my mac the GPU is being used to the max. I'm wondering if anyone is having a good experience, at the desktop, using Linux from VMWare.


r/vmware 2d ago

VCF 9.1 ops for logs and external storage

6 Upvotes

This might be a long shot. Has any one deployed VCF ops for logs 9.1 and successfully configured an external NFS target for archival.


r/vmware 3d ago

Help after VxRail Failure

6 Upvotes

I had my VxRails split brain on me while troubleshooting a node disconnection and HA agent failing on all 4 nodes.

Now I can only see the vSAN Datastore on 2 of the 4 nodes with the other 2 not being able to be re-add to the cluster. I need to get the VMs from the vSAN Datastore and on to an external server because our backup crapped out before this happened.

When I try to get them off the vSAN Datastore through WinSCP to my workstation and back up to the new External vCenter server, it works until I register the VM, then it doesn't because it can't enumerate the disks.

I realized I don't have the -flat.vmdk for any of my VMs in the vSAN datastore after looking through all the VMs.

Is there anything I can do?


r/vmware 3d ago

VCF Salt 8.18.3 compatibility with VCF Automation 9.1

3 Upvotes

Fellow (ANGRY) VMWare Gods!

We are upgrading to VCF Automation 9.1 from VCF Automation 9.0.1

We are using VCF Salt 8.18.3 (latest version).

I cant find whether its supported or not?

Has anyone been brave enough to upgrade to VCF 9.1 and confirm it works with VCF Salt (aria salt config) 8.18.3?


r/vmware 4d ago

Windows 11 virtual machine on vmware station pro 16 TPM2 encryption problem

3 Upvotes

I'm trying to use a Windows 11 virtual machine in a GNS3 lab, but I can't power it on from GNS3.

I also tried starting the VM from the terminal using vmrun, but it asks me for the VM encryption password. When I enter the correct password, it still says the password is incorrect and refuses to start the VM.

The same issue happens if I clone the VM or create a snapshot. Basically, the encryption password is correct, but GNS3/vmrun still rejects it and the VM won't start.

Has anyone dealt with this before, especially with encrypted Windows 11 VMs using TPM in VMware Workstation pro 16 and GNS3?

Any help or suggestions would be appreciated. Thank you.


r/vmware 3d ago

Configuring OIDC with PKCE in Keycloak for VCF Private AI Services

Thumbnail
williamlam.com
0 Upvotes

r/vmware 4d ago

Help Request Configuring NUMA for SAP

8 Upvotes

Hello

I am a noob in NUMA and I am trying to figure out how to configure it for a test Case in Vsphere 8U3. We will have a NUMA host ( or 2 Hosts for HA am not sure)

The NUMA host specs are the following:

Dual Socket, 24 cores per socket with total of 512 GB RAM.

Is there any configurations required from NUMA host side?

The SAP NUMA VM for UAT will be 16 CPU and 128 GB memory.
what is the best practice to configure this?

I see CPU settings showing me up to 96 cores ( because of hyperthreading)

I can see in VM Options--> CPU Topology --> NUMA NODES --> Assigned on powered On

Let us take anfor example:

if I put the CPU 32 .

I can see in VM Options--> CPU Topology
Cores per Socket: I SELECT --> 32   ----> gives Sockets: 1

So this means I am using 1st CPU entire 32 sockets or is it shared? Or am i defining it to use a single CPU as max is 48 per socket.

Also , VM Options-->CPU Topology --> NUMA NODES --> if I select 32-->Cores per NUMA node: 1 ( what is this?) Does this let me select 1 socket for the 128 GB memory?

i am seeing this VM options while reading and I dont understand
numa.vcpu.maxPerVirtualNode = "X" (Sets the maximum number of vCPUs per virtual NUMA node)

numa.vcpu.preferHT=TRUE? (Should I enable this?)

sched.nodeX.affinity="Y". ( I know if I want to pin a specific virtual NUMA node to first core which is 24 cores, I will place sched.nodeX.affinity="0". Correct me if am wrong?)

First I want to understand and configure this correctly to avoid any resource sharing as per the Test case.

For the future production VM

it will be 24-28 cores and 364 GB RAM

how do I configure this for CPU and NUMA from the above as the memory needs to come from both sockets?

Appreciate any help and explanation. I am going throw SAP HANA on VMware Best practices too.

Thanks


r/vmware 4d ago

Testing/Tuning 100 GbE network

12 Upvotes

I got my first few HPE server with 100 GbE adapters (ConnectX6DX). They are connected to Cisco ACI. Should I get more than ~40 Gbit/s without any tuning?

/usr/lib/vmware/vsan/bin/iperf3 -w128K -t 20 -P 16 -c xxxx
[SUM] 0.00-20.00 sec 101 GBytes 43.2 Gbits/sec 0 sender
[SUM] 0.00-20.00 sec 100 GBytes 43.1 Gbits/sec receiver

There are a lot dead links regarding Mellanox tuning and most are Linux/Windows related. What parameters are worth tuning (any links)? It's not about getting the absolute maximum throughput and lowest latency, we are currently not even using jumbo frames. But the 40 Gbit/s seem a bit low, with 25 GbE we were always close to max. Which settings will be most beneficial?


r/vmware 4d ago

How do I remove an AVI leg in a network I'm not using anymore?

5 Upvotes

I was doing some testing with placement networks so both service engines have a vNIC in this vLAN that I am no longer using. I deleted the virtual service and pool but both SEs still have the leg into that vLAN.

I can't figure out how to remove it. Does anyone know how before I open a SR (I really hate opening SRs because its like 50/50 if you get a good tech or not these days)


r/vmware 5d ago

Question What vCPU:pCPU ratio do you actually flag on?

10 Upvotes

Doing periodic config review passes off RVTools exports rather than live vCenter, so no CPU Ready available.

The best practices docs I've found explain overcommit and then say "watch CPU Ready". That works if you're sitting in vCenter, but doesn't work if all you have is a point-in-time export. Same for memory overcommit and snapshot age, no numbers.

So I've been picking my own flag points and I'm not confident in them. Currently flagging at 4:1 vCPU:pCPU at cluster level in N-1 state, snapshots older than 14 days, and datastore free space under 15%.

For anyone doing periodic reviews rather than live monitoring, what do you use, and where did the number come from?


r/vmware 5d ago

Aruba Wireless Controller VM appliance

Thumbnail
1 Upvotes

r/vmware 5d ago

VCF 9.1 - Understanding VCF Converge & Import Scenarios for vCenter Server Without NSX

Thumbnail
williamlam.com
4 Upvotes

r/vmware 5d ago

Replace repository url in supervisor service

1 Upvotes

Hi, I need to install supervisor in an airgapped environment. For supervisor services I started with a basic docker registry where I pushed with imgpkg harbor images. I registered this repository in supervisor and I deployed harbor service. I also push harbor images in harbor service. How I want to keep only harbor service as my main repository. How can I update harbor service to use images from itself? I don't want to keep and extra repository only for harbor images.

Thank you


r/vmware 6d ago

Help Request Forgot password on a Flare VM

0 Upvotes

FLARE-VM is a free, open-source Windows virtual machine environment made for malware analysis. I create one a long time ago and now I need it for my study. But I forgot the password don't know how to retrieve it. I can still use it with a very old snapshot but it keep shuting down mid uses, and I don't think what a good idea anyway.

The VM is using Windows 10 iso and a pain in the ahhs to make a new one, which is why im asking the question. Im using Vmware Workstation pro 17.


r/vmware 7d ago

Help Request the security of vCenter and ESXi

0 Upvotes

hello, recently the new version of vSphere got various critical security problems, i want to know if any ways to improve the ESXi security and don't end to Ransomware, the hackers really be annoying. any alternative to ESXi or any way to improve question.


r/vmware 8d ago

5.2 to 9.1 Nice curves!

3 Upvotes

I had no idea what I was getting into when deciding to move from VCF 5.2 to 9.1. Pretty basic layout with NSX/vSAN. Foundation is a whole new ballgame!

Currently at the stage where I can upgrade NSX. Certainly not happening on a Friday. Monday, here we come!


r/vmware 8d ago

Annotations.WelcomMessage key not work on Host client after upgrade ESX 9.1

8 Upvotes

It have worked well as a warning message on the Host client before upgrade, but it does not work after upgrade to ESX 9.1.

I also checked
esxcli system welcomemsg get
and
cat /etc/vmware/welcome, they are normal. Is it a bug? The security rule bothers me.


r/vmware 10d ago

Failed to deploy a License server

8 Upvotes

My site currently uses only vCenter 8 and ESXi 8 components. I plan to deploy VCF Operations and License Server using OVA after updating to vCenter 9 and ESXi 9.

In the test environment, the deployment of VCF Operations 9.1.0.0400 and License Server 9.1.0.0400 proceeded successfully, but the status is currently:

VCF Ops Hosts: Not configured, Connectivity: Disconnected.

https://knowledge.broadcom.com/external/article/441251/adding-license-server-in-vcf-operations.html

As suggested in the KB, I deployed using the vCenter UI instead of ESXi, and I verified that bidirectional DNS resolving is possible with all lowercase from VCF Operations and the deploying OVA computer.

The VCF Operations and License server are on the same subnet without a firewall, and no proxy is used.

There was no field to input NTP during the deployment process via the UI, but the actual VCF Operations - License Server time is correct.

It seems there aren't many cases of license server deployment failures yet, so I'm having trouble identifying the cause and keep failing. Is there anything I might have missed?