Tag: Vcf

As part of the VMware Cloud Foundation (VCF) 9.1.1 release, consuming NSX Virtual Private Cloud (VPC) has gotten simpler, especially for environments using traditional VLAN-backed networks. In VCF …

If you have used Claude Code, Cursor, or OpenAI Codex, you have already experienced Agentic AI, whether it is coding an application, creating a quick script, or debugging an issue. The use cases ar…

Given the current security threats from Frontier AI, vDefend Security Services Platform (SSP) was top of mind for many attendees at the recent VMware Explore 2026. Since it had been some time since…

Learn how to setup Confidential Compute with Intel TDX in VCF 9.1 offering data in-use protection for critical workloads.

Many readers may have read this blog article on Native Object Storage from my good pal, Pete Koehler. In that post, which was published back in May of this year and coincided with the VMware Cloud Foundation (VCF) version 9.1 release, Pete talked about a tech preview of Native Object Storage. Well, with the release of VCF 9.1.1, the tech preview has now begun. Although the tech preview of Native Object Storage is not open to everybody, we will be working with a select set of customers and gathering critical feedback. Our objective is to have a robust Native Object…

One feature in VMware Cloud Foundation (VCF) 9.1.1 that I am personally excited about is the new AI Assistant for VCF. It is great to see AI being integrated directly into VCF for infrastructure te…

Fun with certificates - we've all been there, right? In this - perhaps brief - blog post, I'll explain how to automate the whole process and use Let's Encrypt. Since this post contains a lot of code, I've decided to publish it all in my public GitHub repo.

VMware provides first-class developer tooling such as VCF PowerCLI for PowerShell users and the VCF SDK offering Java and Python bindings.

When VCF Management Services (VCFMS) was introduced in VCF 9.1.0, its virtual machine sizing was optimized to accommodate the largest optional Day-N service. This reduced the likelihood of requirin…

Last Updated September 3, 2026

There’s a moment when the question stops being “what’s new?” and becomes “what does this version let me do next?” VMware Cloud Director 10.6.2 is that moment.  We’re excited to announce that VMware Cloud Director 10.6.2 is now generally available. If we had to sum up this release in one sentence, it’s all about getting … Continued

This has been an exciting week as VMware Explore 2026 takes place in Las Vegas, where I have been meeting with customers and partners while delivering several technical breakout sessions and worksh…

Broad based performance improvements with VCF 9.1 CPU scheduler enhancements are seen in many workloads as shown with examples.

How I deployed a complete VCF 9.1 management domain in a nested homelab, recovered orphaned NSX transport nodes, and fixed VCF Automation.

When converging or importing a vCenter Server environment that does not already include NSX, VMware Cloud Foundation (VCF) will automatically deploy NSX as part of the converge or import workflow. …

Following the deployment of VMware Cloud Foundation, it is crucial to configure SFTP backup locations for VCF management services, SDDC Manager, and vCenter. Regular backups safeguard against data …

We run NSX with Avi Load Balancer, and every so often the Avi Controller manages to lock the NSX admin account. Usually it is credential drift somewhere. The Controller keeps…

Similar to Configuring vSphere Supervisor to use VMware Cloud Foundation (VCF) Identity Broker (IDB) for external identity federation, Harbor also supports OpenID Connect (OIDC) identity providers …

In this short blog post, I'd like to briefly describe how to build an offline repository for VCF 9.1 or earlier, from start to finish.

Deploy Headlamp as a VKS add-on for a modern, extensible Kubernetes UI. Streamline monitoring, RBAC, and cluster management in VMware VKS.

Welcome back!!! We are at Part 2 of the blog series on VMware vDefend License Hub where we focus on the transition process from legacy License Hub 5.1.2 to version 2.0 in a brownfield environment. …

Starting with VCF 9.1, activation of vDefend components no longer accepts the 25-character license keys and requires subscription-based license files with periodic reporting of license usage inform…

With VMware Cloud Foundation (VCF) 9.1, the Distributed Transit Gateway (DTGW) connectivity model now supports NSX stateful network services through the Virtual Network Appliance (VNA) cluster. Thi…

Prior to VMware Cloud Foundation (VCF) 9.1, users could choose whether to apply an ESX update across all or a selected set of vSphere Clusters, but there was no additional granularity for selecting…

I tested vSphere Supervisor backup and restore in my VCF 9.1 lab, including what happened after deleting a Namespace and adding a VKS node volume after backup. Here is what vCenter rebuilt, how the…

The post outlines the process of upgrading the VMware Cloud Foundation (VCF) Fleet Lifecycle through its public API. It details steps for authentication, retrieving the latest target version, confi…

AMD Zen4/Zen5 processors have been known to have slower entropy generation, which can lead to higher CPU utilization for workloads that depend on random number generation. I recently learned from a…

When it comes to VMware Cloud Foundation (VCF) capabilities such as the new unified Fleet Management, it is important to distinguish between the deployment type and the deployment entitlement. Depl…

NSX 4.x DFW memory exhaustion explained: the commands to confirm it, why rebooting makes it worse, and the paced migration that recovers hosts live.

Compare VCF 9.1 import, convergence, and side-by-side rebuild paths for brownfield vSphere, with NSX, storage, rollback, and validation guidance.

📢 🆕 Express Patches for #VCF & #VVF 9.x addressing various CVEs, see 📔 below:

VMware Cloud Foundation (VCF) 9.1 Single Sign-On (SSO) not only provides a unified login experience across all VCF components, but it also enables organizations to easily add multi-factor authentic…

Introducing VCF Inspector: a standalone, zero-footprint diagnostic tool for VCF 9.1 and VCF Management Services. Available now as a free download on VMware Flings.

The post explains how to enhance the availability of metric and log collection in VMware Cloud Foundation by deploying additional Cloud Proxies and creating a Cloud Proxy Group. It details the step…

If you've deployed VMware Cloud Foundation 9.1, you've met the VCF Service Runtime — the Kubernetes cluster quietly running the entire management plane. Broadcom calls the platform underneath it VMSP…

The Core Pain Point: Centralized Bridging BottlenecksThe Architectural ChallengeThe VCF 9.1 Solution: Out-of-Path Distributed BridgingPerformance & Resource DividendsThe Modern Fix: VNA-Driven …

IntroductionFeature Progression: VCF 9.0 vs. VCF 9.1 EVPN ArchitectureControl Plane Mechanics: The Interface-less IP-VRF ProcessingPhysical Interoperability & Platform Deployment PrerequisitesD…

IntroductionFeature Progression: VCF 9.0 vs. VCF 9.1Architectural Typologies: The Three Log Management ModelsDeep-Dive: Design Boundaries of the Simple ModelProduction Implementation Constraints &a…

IntroductionVNA Stateful Services SeriesArchitectural Dependencies Checklist Supported NAT Capabilities Matrix in VCF 9.1 VNADeep Dive: Default Auto SNAT vs. User-Defined SNATThe Default SNAT Verif…

TheVCF Infrastructure Services (VIS) Applianceis an Ubuntu-based virtual appliance that provides key infrastructure services for accelerating VMware Cloud Foundation (VCF) 9.1 lab and proof-of-concept

In VMware Cloud Foundation (VCF) 9.1, users can configure scheduled backups for all VCF Management components, including the new VCF Management Services (VCFMS), through the Fleet LCM capability in…

The VCF Download Tool (VCFDT) is the recommended utility for downloading binaries for VMware Cloud Foundation (VCF) deployments and upgrades. However, because Express Patches (EPs) are versioned an…

The article discusses enhancing VMware Cloud Foundation platforms with VCF Operations for Networks, which provides insights into network health. It outlines the deployment process via public APIs, …

VMware Cloud Foundation 9.1 introduces Real-time metrics capabilities to gather detailed performance data from its infrastructure. The data is collected from components like vCenter and stored in a…

As I discussed in my previous blog post, Understanding VCF Express Patches (EPs), Express Patches are designed to deliver security fixes as soon as they become available. As a by-product of this fa…

If you’re managing Kubernetes alongside traditional virtual machines, vSphere Supervisor in vSphere 9.0+ and VMware Cloud Foundation (VCF) 9.0+ serves as your unified control plane. But when it comes to setting up the infrastructure, one question always comes up from teams designing these environments:  “Which load balancers are supported, and how do I choose the … Continued

An interesting set of deployment scenarios has been coming up as customers begin planning their upgrade to VMware Cloud Foundation (VCF) 9.1. Customers' existing deployments are often the result of…

In this article, I’ll take another look at VPCs and the VNA. This time, the VNA acts as the route controller, and the VPC is connected via VXLAN/EVPN using Type 5 routes.

You might have noticed that vCenter administrator cannot perform vMotion of Supervisor control plane VMs or VMs managed by the VM Service operator. There is a good reason for this as these VMs are …

After deploying the VCF fleet, users can enhance the VMware Cloud Foundation by configuring Log Management, which now operates as a containerized service. The process involves using APIs for authen…

AI has fundamentally changed the software industry through its ability to discover software vulnerabilities at an unprecedented pace. This has driven software vendors to adopt faster release cadenc…

Debug the VCF Management Service in VCF 9.1. Learn its architecture, node roles, and how to use kubectl to troubleshoot pods and logs efficiently.

VMware Cloud Foundation (VCF) first introduced the Brownfield Import capability in VCF 5.2, making it easy for customers to onboard their existing vSphere environments into a VCF deployment. While …

vSphere Configuration Profiles, first introduced in VMware vSphere 8.0, allows VMware Cloud Foundation administrators to manage the ESX host configuration at a cluster level. In this article, we will discuss how this feature compares to Host Profiles, and how to transition from Host Profiles to vSphere Configuration Profiles in vSphere 9. In this blog we … Continued

When deploying a new VMware Cloud Foundation (VCF) 9.1 Fleet, users specify either a Simple or High Availability (HA) deployment model along with the desired deployment size: Small, Medium or Large…

VMware Cloud Foundation 9.1 ships with ESX 9.1 and a tightly integrated NSX/vSAN stack, and that integration makes your NIC firmware matter more than it used to. RDMA over Converged…

VCF 9.1 introduces VCF Management Services - but what is it and why do I need it

VCF Automation (VCFA) is the new cloud management layer on top of VCF. Which brings the question how can you import legacy VM workloads under VCF Automation management? VCFA provides infrastructure…

explaining the different alert types, and how they are sent to email addresses of the different personas within DSM

Learn how VCF Edge 9.1 automates bare-metal ESX host deployment at remote sites with Zero Touch Provisioning. No onsite expertise required.

As part of deploying the new VCF Management Services (VCFMS) component, a pool of IP addresses is provided to support the automatic deployment and scale-out of additional worker nodes for Day-N ser…

Editorial note: This blog was originally published on January 15, 2025 and has been updated to reflect VCF 9.1 updates. Are you planning on deploying or have you already stood up your VMware Cloud Foundation (VCF) private cloud using VMware vSAN? If you have deployed or are thinking of deploying your VCF environment using vSAN, … Continued

The VMware Cloud Foundation (VCF) 9.x Installer includes a built-in resource calculator that automatically determines the required compute and storage resources, along with the estimated number of …

During the deployment of an additional VCF 9.1 component, the precheck failed with the following platform health error: Platform Health Check Error
[platform-statefulsets-core : 1 of 10 resources are not ok:logging-operator-fluentd: wrong resource state: InProgress - Ready: 0/1;][VCFMS-HEALTH-002]

Historically, enabling NVMe Tiering prior to VMware Cloud Foundation (VCF) 9.1 was not very user friendly, as it required users to remember three distinct ESXCLI commands. # Enable or Disable NVMe …

Introduction Architectural Comparison: SSPI, SSP 5.1.1, and SSP 5.1.2Centralized Licensing Policies and Compliance MechanicsEnvironmental Dependencies and Deployment SequencePhase 1: Core Virtualiz…

There are a number of new capabilities in VMware Cloud Foundation (VCF) 9.1 that can be deployed as Day-N operations after the initial VCF Fleet deployment, including: Integrated Log Management (fo…

After completing a VMware Cloud Foundation (VCF) 9.1 deployment using the VCF Installer UI, users can view and download the auto-generated passwords for all VCF components before exiting the deploy…

Thanks to a fellow colleague, Abdullah, who reached out after coming across my blog posts (HERE and HERE) on how to deploy VCF Management Services (VCFMS) and VCF Automation (VCFA) on a non-managem…

IntroductionArchitectural Shift: VCF 9.0 vs. VCF 9.1The Four Connectivity PosturesA. Community Policy (Group-Based Segmentation)B. Promiscuous Policy (Shared Services Baseline)C. Isolated Policy (S…

In VCF 9.1 Log Management is fully integrated into VCF Operations and has its own dedicated section in the VCF Operations UI. In older releases, VCF Operations for logs was a standalone product wit…

IntroductionThe Architectural Breakthrough: Moving from Software to SiliconVCF 9.0 : Software-Defined EncryptionVCF 9.1: Silicon-Layer Hardware OffloadControl-Plane Encryption: vSphere NKPDeep Dive…

The majority of VMware Cloud Foundation 9.1 components can automatically be configured when enabling VCF Single Sign-On (SSO), with the exception of VCF Operations HCX, Log Management (formally VCF…

I wanted to test organization-level OIDC authentication in VCF Automation 9.1 using Keycloak from my Provider Box setup. It worked in the end, but a few small details around group claims and claims…

Using Kasm as a browser-based access layer in front of a VCF lab turned out to be a useful pattern. With Keycloak providing authentication for both Kasm and VCF SSO, the lab gets a cleaner access f…

Self-service without guardrails is just delegated infrastructure access with a nicer interface. In this post I look at guardrails in the VCF Automation 9.1 All Apps model, and how organizations, qu…

I recently started rolling out the latest VMware Cloud Foundation (VCF) 9.1 Express Patch 1 (9.1.0.0100) into my lab environment, and everything had been going quite smoothly. After successfully up…

With the first Expression Patch (9.1.0.0100) now available for VMware Cloud Foundation (VCF) 9.1, I was wondering about version selection behavior (UI and API/JSON) within the VCF Installer. The VC…

Here's a description of how to configure TGWEVPN/VXLAN in the new VCF 9.1 version. I encourage you to read on. Implementing this isn't difficult.

Just recorded a new demo for VCF 9.1 Protection and Recovery, or VMware Live Recovery as it was called previously. In this demo I show the recovery process after a ransomware attack! I just love how easy it is with this platform, and how it includes integration with either Carbon Black or CrowdStrike.

VCF Automation, Monitoring, more...

Similar to VCF Management Services (VCFMS), VCF Automation (VCFA) can also be deployed to a non-management network using an API workflow. A typically deployment workflow is to first upgrade to VCF …

VMware Cloud Foundation 9 combined with centralized vCenter Linking empowers you to embrace true fleet management.

VMware Cloud Foundation (VCF) 9.1 has released tons of great new features! This blog focuses on an exciting feature update to VMware Cloud Foundation Automation 9.1: the ability to capture a vsphere namespace and then redeploy that environment as a catalog item. Generally developers require sandboxes that mirror production complexity, QA teams need clean, isolated … Continued

As part of upgrading an existing VMware Cloud Foundation (VCF) deployment from either VCF 5.x or 9.0.x to VCF 9.1, one of the required steps is deploying the new VCF Management Services (VCFMS) com…

The idea of a programmable infrastructure actually boils down to one key aspect: the pivoting away from managing cloud resources to the ability to write code that defines those resources using the same programming language constructs an application is written in. It is the realization that a virtual network, storage or a VKS cluster instance should be treated no differently than a class or a function in a developer IDE.

This is follow up to my previous blog post Deploying VCF 9 in a Minilab – I have made some changes in my lab and upgraded to VCF 9.1. My original HW BOM: Two GMKtec K8 Plus mini PCs. One with…

In Data Services Manager version 9.1, MySQL databases can now leverage the the new snapshot capability in vSAN ESA.

When you upgrade VCF Automation to version 9.1, new VCF Services Runtime consumption cluster (internally called VMSP = VMware Management Services Platform) is deployed and the old one is left behin…

In VCF Automation 9.1 we can assign External IP to a particular VM that is connected to private or transit subnets and access it directly via that IP. This is similar to assigning public floating I…

a very powerful solution for customers who wish to offer data services to their users, all the while maintaining multi-tenancy controls through VCF Automation

IntroductionArchitectural Pillar: The 9.0 vs. 9.1A. Distributed Model: VCF 9.0 vs. VCF 9.1B. Centralized Model: VCF 9.0 vs. VCF 9.1Deep Dive: The Virtual Network Appliance (VNA)Decentralizing State…

Some notes and screenshots of my experience upgrading VCF 9.0.2 to VCF 9.10.

Nested ESX continues to be a popular way to explore and learn about VMware Cloud Foundation (VCF), it is also the basis for the VCF Holodeck solution. With the release of VCF 9.1, Nested ESXi VMs c…

About two years ago I wrote blog post on how to create self-contained lab in VMware Cloud Director cloud environment with equivalent functionality to physical lab that can be rapidly deployed with …

With the announcement of VMware vSphere Foundation (VVF) and VMware Cloud Foundation (VCF) 9.1, I know many of you are eager to start planning for 9.1 and get it into your lab environment for hands…

With the announcement of VMware vSphere Foundation (VVF) and VMware Cloud Foundation (VCF) 9.1, I know many of you are eager to start planning for 9.1 and get it into your lab environment for hands…

VMware Cloud Foundation 9.1 was just announced, and that means a lot of new functionality has been released. Some of the features you already knew about, others may come as a surprise. I know Pete Koehler has a whole series he is going to release, so I am just going to introduce a couple of […]

In the VCF 9.1 full deployment guide we cover everything in the private cloud platform, and adding workload domains, hosts, clusters and scaling your fleet

How do you actually expand a management domain in VCF9, and what do I need to keep in mind? A quick guide.

Transitioning your VMware vSphere environment to VMware Cloud Foundation (VCF) is a strategic move that shifts your infrastructure from a collection of managed silos to a unified private cloud.  In my recent webinar with Brent Douglas where we dove deep into the converge process, the turnout was massive. Below are the Top 10 “must-know” questions … Continued

The most customer and partner related meetings I have participated in lately where around the VMware Cloud Foundation 9.0 topic. And I feel that there is a bit of misconception when it comes down t…

After deploying a new VMware Cloud Foundation environment in my lab, I typically apply a set of post-deployment configurations across components such as vCenter and NSX, depending on the specific s…

VCF Automation (VCFA) provides very easy way to deploy vSphere Kubernets Service (VKS) Clusters in a multitenant environments. This can be done via UI, Kubernetes API or CLI. This is in my opinion …

A quick introduction to VCF 9 Automation in All Apps mode

Over the holidays, I was testing some new VMware Cloud Foundation (VCF) upgrade flows in my lab environment, where I ended up bricking SDDC Manager, which was completely my fault! While I had backu…

In previous blog post here, VMware vCloud Foundation 9 – Licensing Part 1 We talked about registering VCF Operations on the Broadcom Portal and applying licenses to VCF Operations. Let’s conti…

VCF 9 adopts a streamlined, subscription-based licensing model that simplifies management and compliance: Single license file replaces multiple component-specific keys (vCenter, ESXi, NSX, etc.) Li…

vSphere Zones in VMware Cloud Foundation (VCF) 9.0 have been enhanced to offer greater flexibility in resource consumption and isolation for both vSphere Supervisor Control Plane VMs (Management), …

For resource constrained environments, deploying VMware Cloud Foundation (VCF) can take longer, especially when deploying on top of a Nested ESXi configuration. However, the VCF Installer does prov…

✳️ IntroductionWith the release of VMware Cloud Foundation 9 (VCF 9), VMware has introduced a major architectural evolution—consolidating Day-2 operations, automation, and lifecycle tasks into VCF Operations (VCF OPS).One of the most notable changes is how Workload Domains (WLDs) are created. Previously, administrators used the SDDC Manager GUI to provision a new WLD. In VCF 9, this process now happens exclusively through VCF OPS, offering more flexibility, automation, and integration with moder

In the previous post, I deployed a VCF Operations for Logs appliance, but initial configuration still needs to completed. In this post, I will first enable Log Collection and then replace self-signed certificate with a CA-signed certificate. To use VCF Operations for logs, you must integrate it with a vCenter instance of version 9 that is licensed with a VMware […]

When users log in to a vCenter Server to manage roles and permissions within a VMware Cloud Foundation (VCF) 9.0 environment, they may notice several accounts that already have vSphere permissions …

Maintaining availability of data and the applications that produce or consume that data might be the most important responsibility of data center administrators. Capabilities like high performance or special data services mean very little if the applications and the data they produce or consume is not readily available. Ensuring availability is a complex topic, as … Continued

When deploying a new VMware Cloud Foundation (VCF) Fleet, users can choose from two different deployment models: Simple (one-node) or High-Availability (3-node) within the VCF Installer, which appl…

I just re-deployed my VMware Cloud Foundation (VCF) 9.0.1 lab setup this evening, and after configuring configuring VCF Networking with VPC, I proceeded with vSphere Supervisor enablement using VPC…

An hour after celebrating a successful validation in the VCF 9.0 installer and getting ready for real deployment testing (which I made a short LinkedIn post about yesterday), things went sideways. …

The VMware Cloud Foundation (VCF) Installer (Day 0) and SDDC Manager (Day N) supports two common methods for downloading VCF software into a users environment. Connect to Broadcom's online depot (s…

A brief guide to upgrading from VCF5.X to VCF9 on a brownfield site.

Good news here for customers who use iSCSI in their current vSphere environments and are looking to move to VCF

This post is part of a short series that builds on our minimal VMware Cloud Foundation (VCF) 9.0 deployment (2x Minisforum MS-A2) and showcases how to fully leverage the exciting new capabilities i…

The monitoring and analysis of a complex data center can be much easier with the right tools. The right tool for VMware Cloud Foundation (VCF) is VCF Operations. It gathers the extraordinary amount of metrics generated within the environment, and distills it down into meaningful and actionable information for your optimization, troubleshooting, and planning efforts. … Continued

This post is part of a short series that builds on our minimal VMware Cloud Foundation (VCF) 9.0 deployment (2x Minisforum MS-A2) and showcases how to fully leverage the exciting new capabilities i…

This post is part of a short series that builds on our minimal VMware Cloud Foundation (VCF) 9.0 deployment (2x Minisforum MS-A2) and showcases how to fully leverage the exciting new capabilities i…

VMware Cloud Foundation (VCF) 9.0 continues to support one of the most popular and powerful load balancer, VMware Avi Load Balancer. When you deploy a new VMware Avi Load Balancer within a given VC…

In the DSM 9.0 Release Notes, the following item about metrics is listed in the What’s New section: You can use the VMware Data Services Manager API to publish PostgreSQL and MySQL metrics to VMware Cloud Foundation 9.0 (VCF) Operations and Prometheus [..] enabling better visibility, alerting, and performance management for all databases that VMware Data Services manages. In this post, I will show how to configure DSM 9.0 to send Postgres and MySQL database metrics to VCF 9.0 Operations. While this process is rather manual in VCF 9.0, we plan to significantly improve this overall experience for users going forward.…

A brief guide on how to switch from a VCF9 Operations instance to a central VCF Operations instance.

One of the ways how to start using VMware Cloud Foundation 9 is to convert existing vSphere environment. Let’s have a look what is the process. VCF Fleet VCF consists of a Fleet Management wi…

DSM is providing is the DBaaS solution for VCF. In this post, I will attempt to highlight the overall benefits of DSM. I will do this for three different personas; the VI Admin, the DBA and the end-user/developer.

By default, the VMware Cloud Foundation (VCF) 9.0 Installer requires a minimum of 3 ESXi hosts when you select vSAN (OSA or ESA) for storage or 2 ESXi hosts when you choose to use external storage …

Data Services Manager is the DBaaS for VMware Cloud Foundation (VCF), offering multi-tenanted data services to your end users on-premises, on vSphere.

VMware Cloud Foundation 9 (VCF 9) has been released and with it comes brand new Cloud Management Platform – VCF Automation (VCFA) which supercedes both Aria Automation and VMware Cloud Direct…

Part 2 VCF Import Cluster with NFS and activating the overlay.

Whether you are configuring vSAN Express Storage Architecture (ESA) directly from vCenter Server or from VMware Cloud Foundation (VCF), the underlying ESXi hardware is automatically validated again…