vSphere Installation and
Setup
Update 1
Modified on 04 DEC 2017
VMware vSphere 6.5 VMware ESXi 6.5 vCenter Server 6.5
vSphere Installation and Setup
You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/
If you have comments about this documentation, submit your feedback to docfeedback@vmware.com
VMware, Inc.
3401 Hillview Ave. Palo Alto, CA 94304 www.vmware.com
Copyright © 2009–2017 VMware, Inc. All rights reserved. Copyright and trademark information.
VMware, Inc. |
2 |
About vSphere Installation and Setup |
5 |
Updated Information for the vSphere 6.5 Installation and Setup 6 |
|
1 Introduction to vSphere Installation and Setup 7 |
|
Overview of the vSphere Installation and Setup Process 7 |
|
vCenter Server Components and Services |
10 |
Overview of the vCenter Server Appliance |
13 |
vCenter Server and Platform Services Controller Deployment Types 14 |
|
Understanding vSphere Domains, Domain Names, and Sites 17 |
|
Deployment Topologies with External Platform Services Controller Instances and High Availability 18 |
|
Enhanced Linked Mode Overview 21 |
|
About ESXi Evaluation and Licensed Modes |
22 |
2 Installing and Setting Up ESXi |
23 |
|
|
|
ESXi Requirements 23 |
|
|
|
|
Preparing for Installing ESXi 30 |
|
|
|
|
Installing ESXi |
82 |
|
|
|
Setting Up ESXi 194 |
|
|
|
|
After You Install and Set Up ESXi |
215 |
|
|
|
3 Deploying the vCenter Server Appliance and Platform Services Controller |
|
|||
Appliance |
219 |
|
|
|
System Requirements for the vCenter Server Appliance and Platform Services Controller |
|
|||
Appliance |
220 |
|
|
|
Preparing for Deployment of the vCenter Server Appliance and Platform Services Controller |
|
|||
Appliance |
230 |
|
|
|
Prerequisites for Deploying the vCenter Server Appliance or Platform Services Controller |
|
|||
Appliance |
232 |
|
|
|
GUI Deployment of the vCenter Server Appliance and Platform Services Controller Appliance |
233 |
|||
CLI Deployment of the vCenter Server Appliance and Platform Services Controller Appliance |
257 |
|||
4 Installing vCenter Server and Platform Services Controller on Windows |
273 |
|
||
vCenter Server for Windows Requirements 274 |
|
|
||
Preparing for Installing vCenter Server and Platform Services Controller on Windows |
285 |
|
||
Required Information for Installing vCenter Server or Platform Services Controller on Windows |
307 |
|||
Installing vCenter Server and Platform Services Controller on Windows 309 |
|
|
VMware, Inc. |
3 |
vSphere Installation and Setup
5 After You Install vCenter Server or Deploy the vCenter Server Appliance 318
Log in to vCenter Server by Using the vSphere Web Client 318 Install the VMware Enhanced Authentication Plug-in 319 Collect vCenter Server Log Files 320
|
Repoint vCenter Server to Another External Platform Services Controller |
321 |
|
|||
|
Reconfigure a Standalone vCenter Server with an Embedded Platform Services Controller to a |
|||||
|
vCenter Server with an External Platform Services Controller |
323 |
|
|
|
|
6 |
File-Based Backup and Restore of vCenter Server Appliance |
|
327 |
|
||
|
Considerations and Limitations for File-Based Backup and Restore 328 |
|
|
|||
|
Back up a vCenter Server Appliance by Using the vCenter Server Appliance Management |
|||||
|
Interface 331 |
|
|
|
|
|
|
Restore a vCenter Server Appliance from a File-Based Backup |
333 |
|
|
|
|
7 |
Image-Based Backup and Restore of a vCenter Server Environment |
340 |
||||
|
Considerations and Limitations for Image-Based Backup and Restore |
341 |
|
|||
|
Use vSphere Data Protection to Back Up a vCenter Server Environment |
344 |
|
|||
|
Use vSphere Data Protection to Restore a vCenter Server Environment |
349 |
|
|||
8 |
Troubleshooting ESXi Booting |
381 |
|
|
|
|
|
Host Stops Unexpectedly at Bootup When Sharing a Boot Disk with Another Host |
381 |
||||
|
Host Fails to Boot After You Install ESXi in UEFI Mode 382 |
|
|
|
|
|
9 |
Troubleshooting vCenter Server Installation or Deployment |
383 |
|
|||
|
Collecting Logs for Troubleshooting a vCenter Server Installation or Upgrade 383 |
|||||
|
Attempt to Install a Platform Services Controller After a Prior Installation Failure |
385 |
||||
|
Microsoft SQL Database Set to Unsupported Compatibility Mode Causes vCenter Server |
|||||
|
Installation or Upgrade to Fail |
386 |
|
|
|
|
10 |
Decommissioning ESXi and vCenter Server 387 |
|
|
|
|
|
|
Decommission an ESXi Host 387 |
|
|
|
|
|
|
Uninstall vCenter Server 387 |
|
|
|
|
|
VMware, Inc. |
4 |
vSphere Installation and Setup describes how to install and configure VMware vCenter Server®, deploy the VMware vCenter® Server Appliance™, and install and configure VMware ESXi™.
Intended Audience
vSphere Installation and Setup is intended for experienced administrators who want to install and configure vCenter Server, deploy and configure the vCenter Server Appliance, and install and configure ESXi.
This information is written for experienced Windows or Linux system administrators who are familiar with virtual machine technology and data center operations. The information about using the Image Builder and VMware vSphere® Auto Deploy™ is written for administrators who have experience with Microsoft PowerShell and VMware vSphere® PowerCLI™.
vSphere Web Client and vSphere Client
Task instructions in this guide are based on the vSphere Web Client. You can also perform most of the tasks in this guide by using the new vSphere Client. The new vSphere Client user interface terminology, topology, and workflow are closely aligned with the same aspects and elements of the
vSphere Web Client user interface. You can apply the vSphere Web Client instructions to the new vSphere Client unless otherwise instructed.
Note Not all functionality in the vSphere Web Client has been implemented for the vSphere Client in the vSphere 6.5 release. For an up-to-date list of unsupported functionality, see Functionality Updates for the vSphere Client Guide at http://www.vmware.com/info?id=1413.
VMware Technical Publications Glossary
VMware Technical Publications provides a glossary of terms that might be unfamiliar to you. For definitions of terms as they are used in VMware technical documentation, go to http://www.vmware.com/support/pubs.
VMware, Inc. |
5 |
This vSphere Installation and Setup is updated with each release of the product or when necessary. This table provides the update history of the vSphere Installation and Setup .
Revision Description
04 DEC 2017 Added consideration item for SCP protocol in Considerations and Limitations for File-Based Backup and Restore.
EN-002587-01 Initial release.
VMware, Inc. |
6 |
Introduction to vSphere |
1 |
Installation and Setup |
vSphere 6.5 provides various options for installation and setup. To ensure a successful vSphere deployment, understand the installation and setup options, and the sequence of tasks.
The two core components of vSphere are ESXi and vCenter Server. ESXi is the virtualization platform on which you can create and run virtual machines and virtual appliances. vCenter Server is a service that acts as a central administrator for ESXi hosts connected in a network. vCenter Server lets you pool and manage the resources of multiple hosts.
You can install vCenter Server on a Windows virtual machine or physical server, or deploy the
vCenter Server Appliance. The vCenter Server Appliance is a preconfigured Linux-based virtual machine optimized for running vCenter Server and the vCenter Server components. You can deploy the
vCenter Server Appliance on ESXi hosts 5.5 or later, or on vCenter Server instances 5.5 or later.
Starting with vSphere 6.0, all prerequisite services for running vCenter Server and the vCenter Server components are bundled in the VMware Platform Services Controller™. You can deploy vCenter Server with an embedded or external Platform Services Controller, but you must always install or deploy the Platform Services Controller before installing or deploying vCenter Server.
This section includes the following topics:
nOverview of the vSphere Installation and Setup Process
nvCenter Server Components and Services
nOverview of the vCenter Server Appliance
nvCenter Server and Platform Services Controller Deployment Types
nUnderstanding vSphere Domains, Domain Names, and Sites
nDeployment Topologies with External Platform Services Controller Instances and High Availability
nEnhanced Linked Mode Overview
nAbout ESXi Evaluation and Licensed Modes
vSphere is a sophisticated product with multiple components to install and set up. To ensure a successful vSphere deployment, understand the sequence of tasks required.
Installing vSphere includes the following tasks:
VMware, Inc. |
7 |
vSphere Installation and Setup
Figure 1 1. vSphere Installation and Setup Workflow
Small envrionment with one vCenter Server Instance
Start the vSphere installation and setup
Install ESXi
on at least one host
Set up ESXi
Deploy or install vCenter Server with an embedded Platform Services Controller
Log in to the vSphere Web Client to create and organize your vCenter Server inventory
End of the vSphere installation and setup
1Read the vSphere release notes.
Large envrionment with multiple vCenter Server Instances
Start the vSphere installation and setup
Install ESXi
on at least one host
Set up ESXi
Deploy or install the Platform Services Controller instances in a sequence
Deploy or install the vCenter Server instances and register them with the external Platform Services Controller instances
Log in to the vSphere Web Client to create and organize your vCenter Server inventories
End of the vSphere installation and setup
2Install ESXi.
a Verify that your system meets the minimum hardware requirements. See ESXi Requirements. b Determine the ESXi installation option to use. See Options for Installing ESXi.
VMware, Inc. |
8 |
vSphere Installation and Setup
cDetermine where you want to locate and boot the ESXi installer. See Media Options for Booting the ESXi Installer. If you are using PXE to boot the installer, verify that your network PXE infrastructure is properly set up. See PXE Booting the ESXi Installer.
dCreate a worksheet with the information you will need when you install ESXi. See Required Information for ESXi Installation.
eInstall ESXi.
n Installing ESXi Interactively
n Installing or Upgrading Hosts by Using a Script
Note You can also provision ESXi hosts by using vSphere Auto Deploy, but vSphere Auto Deploy is installed together with vCenter Server. To provision ESXi hosts by using Auto Deploy, you must deploy the vCenter Server Appliance or install vCenter Server.
3Configure the ESXi boot and network settings, the direct console, and other settings. See Setting Up ESXi and After You Install and Set Up ESXi.
4Consider setting up a syslog server for remote logging, to ensure sufficient disk storage for log files. Setting up logging on a remote host is especially important for hosts with limited local storage. See Required Free Space for System Logging and Configure Syslog on ESXi Hosts.
5Determine the vCenter Server and Platform Services Controller deployment model that is suitable for your environment.
vCenter Server with an embedded Platform Services Controller deployment is suitable for small-scale environments. vCenter Server with an external Platform Services Controller deployment is suitable for environments with several vCenter Server instances. See vCenter Server and Platform Services Controller Deployment Types.
6Deploy or install vCenter Server and Platform Services Controller.
You can deploy the vCenter Server Appliance or Platform Services Controller appliance on an ESXi host or vCenter Server instance, or you can install vCenter Server and Platform Services Controller on a Windows virtual machine or physical server.
You can deploy or install multiple vCenter Server instances connected in Enhanced Linked Mode configuration by registering them to a common or different joined Platform Services Controller instances.
n Deploy the vCenter Server Appliance or Platform Services Controller appliance.
1 Review the topics in System Requirements for the vCenter Server Appliance and Platform Services Controller Appliance and verify that your system meets the hardware and software requirements for deploying the appliance.
2Determine the deployment method to use.
You can use the GUI method to deploy the appliance interactively. You can use the CLI method to perform a silent deployment of the appliance. See GUI Deployment of the vCenter Server Appliance and Platform Services Controller Appliance and CLI Deployment of the vCenter Server Appliance and Platform Services Controller Appliance.
VMware, Inc. |
9 |
vSphere Installation and Setup
3Use the topic Required Information for Deploying a vCenter Server Appliance or Platform Services Controller Appliance to create a worksheet with the information you need for the GUI deployment, or use the topic Prepare Your JSON Configuration File for CLI Deployment to create your JSON templates for the CLI deployment.
4Deploy the appliance.
nInstall vCenter Server or Platform Services Controller on a Windows virtual machine or physical server.
1Verify that your system meets the hardware and software requirements for installing vCenter Server. See vCenter Server for Windows Requirements.
2(Optional) Set up an external vCenter Server database. See Preparing vCenter Server Databases for Install.
For an environment with up to 20 hosts and 200 virtual machines, you can use the bundled PostgreSQL database. For production and large scale environments, set up an external database, because the migration from the embedded PostgreSQL database to an external database is not a trivial manual process.
3Create a worksheet with the information you need for installation. See Required Information for Installing vCenter Server or Platform Services Controller on Windows.
4Install vCenter Server with an embedded Platform Services Controller,
Platform Services Controller, or vCenter Server with an external Platform Services Controller.
7Connect to vCenter Server from the vSphere Web Client. See Chapter 5 After You Install vCenter Server or Deploy the vCenter Server Appliance.
8Configure the vCenter Server Appliance or vCenter Server instance. See vCenter Server Appliance Configuration and vCenter Server and Host Management.
vCenter Server provides a centralized platform for management, operation, resource provisioning, and performance evaluation of virtual machines and hosts.
When you install vCenter Server with an embedded Platform Services Controller, or deploy the vCenter Server Appliance with an embedded Platform Services Controller, vCenter Server, the
vCenter Server components, and the services included in the Platform Services Controller are deployed on the same system.
When you install vCenter Server with an external Platform Services Controller, or deploy the vCenter Server Appliance with an external Platform Services Controller, vCenter Server and the vCenter Server components are deployed on one system, and the services included in the Platform Services Controller are deployed on another system.
The following components are included in the vCenter Server and vCenter Server Appliance installations:
nThe VMware Platform Services Controller group of infrastructure services contains vCenter Single Sign-On, License service, Lookup Service, and VMware Certificate Authority.
VMware, Inc. |
10 |
vSphere Installation and Setup
nThe vCenter Server group of services contains vCenter Server, vSphere Web Client, vSphere Auto Deploy, and vSphere ESXi Dump Collector. vCenter Server for Windows also contains the VMware vSphere Syslog Collector. The vCenter Server Appliance also contains the VMware vSphere Update Manager Extension service.
Note Starting with vSphere 6.5, all vCenter Server services and some Platform Services Controller services run as child processes of the VMware Service Lifecycle Manager service.
Services Installed with VMware Platform Services Controller
vCenter Single Sign-On |
The vCenter Single Sign-On authentication service provides secure |
|
authentication services to the vSphere software components. By using |
|
vCenter Single Sign-On, the vSphere components communicate with each |
|
other through a secure token exchange mechanism, instead of requiring |
|
each component to authenticate a user separately with a directory service |
|
like Active Directory. vCenter Single Sign-On constructs an internal security |
|
domain (for example, vsphere.local) where the vSphere solutions and |
|
components are registered during the installation or upgrade process, |
|
providing an infrastructure resource. vCenter Single Sign-On can |
|
authenticate users from its own internal users and groups, or it can connect |
|
to trusted external directory services such as Microsoft Active Directory. |
|
Authenticated users can then be assigned registered solution-based |
|
permissions or roles within a vSphere environment. |
|
vCenter Single Sign-On is required with vCenter Server. |
vSphere License |
The vSphere License service provides common license inventory and |
Service |
management capabilities to all vCenter Server systems that are connected |
|
to a Platform Services Controller or multiple linked |
|
Platform Services Controllers. |
VMware Certificate |
VMware Certificate Authority (VMCA) provisions each ESXi host with a |
Authority |
signed certificate that has VMCA as the root certificate authority, by default. |
|
Provisioning occurs when the ESXi host is added to vCenter Server |
|
explicitly or as part of the ESXi host installation process. All ESXi |
|
certificates are stored locally on the host. |
For information about all Platform Services Controller services and capabilities, see Platform Services Controller Administration.
VMware, Inc. |
11 |
vSphere Installation and Setup
Services Installed with vCenter Server
These additional components are installed silently when you install vCenter Server. The components cannot be installed separately as they do not have their own installers.
PostgreSQL |
A bundled version of the VMware distribution of PostgreSQL database for |
|
vSphere and vCloud Hybrid Services. |
vSphere Web Client |
The vSphere Web Client lets you connect to vCenter Server instances by |
|
using a Web browser, so that you can manage your vSphere infrastructure. |
vSphere Client
vSphere ESXi Dump
Collector
The new user interface that lets you connect to vCenter Server instances by using a Web browser. The terminology, topology, and workflow are closely aligned with the same aspects and elements of the
vSphere Web Client user interface.
Note Not all functionality in the vSphere Web Client has been implemented for the vSphere Client in the vSphere 6.5 release. For an up- to-date list of unsupported functionality, see Functionality Updates for the vSphere Client Guide at http://www.vmware.com/info?id=1413.
The vCenter Server support tool. You can configure ESXi to save the VMkernel memory to a network server, rather than to a disk, when the system encounters a critical failure. The vSphere ESXi Dump Collector collects such memory dumps over the network.
VMware vSphere |
The vCenter Server on Windows support tool that enables network logging |
Syslog Collector |
and combining of logs from multiple hosts. You can use the vSphere Syslog |
|
Collector to direct ESXi system logs to a server on the network, rather than |
|
to a local disk. The recommended maximum number of supported hosts to |
|
collect logs from is 30. For information about configuring vSphere Syslog |
|
Collector, see http://kb.vmware.com/kb/2021652. |
|
The vCenter Server Appliance uses the built-in Rsyslog service of the Linux |
|
OS. For information how to redirect the log files to another machine with the |
|
Appliance Management Interface, see vCenter Server Appliance |
|
Configuration. |
VMware, Inc. |
12 |
vSphere Installation and Setup
vSphere Auto Deploy |
The vCenter Server support tool that can provision hundreds of physical |
|
hosts with ESXi software. You can specify the image to deploy and the |
|
hosts to provision with the image. Optionally, you can specify host profiles |
|
to apply to the hosts, and a vCenter Server location (folder or cluster) for |
|
each host. |
VMware vSphere |
Update Manager enables centralized, automated patch and version |
Update Manager |
management for VMware vSphere and offers support for VMware ESXi |
Extension |
hosts, virtual machines, and virtual appliances. The VMware vSphere |
|
Update Manager Extension is an optional service of only the |
|
vCenter Server Appliance 6.5. |
The vCenter Server Appliance is a preconfigured Linux-based virtual machine that is optimized for running vCenter Server and the associated services.
The vCenter Server Appliance reduces the deployment time of vCenter Server and the associated services, and provides a low-cost alternative to the Windows-based vCenter Server installation.
The vCenter Server Appliance package contains the following software:
nProject Photon OS® 1.0
nThe Platform Services Controller group of infrastructure services
nThe vCenter Server group of services
nPostgreSQL
nVMware vSphere Update Manager Extension
Version 6.5 of the vCenter Server Appliance is deployed with virtual hardware version 10, which supports 64 virtual CPUs per virtual machine in ESXi.
The vCenter Server Appliance uses the embedded PostgreSQL database that has the scalability of up to 2,000 hosts and 35,000 virtual machines. During the deployment, you can choose the
vCenter Server Appliance size for your vSphere environment size and the storage size for your database requirements.
Starting with vSphere 6.5, the vCenter Server uses the VMware vSphere Update Manager Extension service. An external VMware Update Manager instance on Windows is no longer required for vSphere centralized automated patch and version management. For information about the vCenter Server and Platform Services Controller services, see vCenter Server Components and Services.
Starting with vSphere 6.5, the vCenter Server Appliance supports high availability. For information about configuring vCenter Server Appliance in a vCenter High Availability cluster, see vSphere Availability.
VMware, Inc. |
13 |
vSphere Installation and Setup
Starting with vSphere 6.5, the vCenter Server Appliance and Platform Services Controller appliance support file-based backup and restore. For information backing up and restoring, see Chapter 6 FileBased Backup and Restore of vCenter Server Appliance.
For information about the vCenter Server Appliance maximums, see the Configuration Maximums documentation.
vCenter Server and Platform Services Controller
Deployment Types
You can deploy the vCenter Server Appliance or install vCenter Server for Windows with an embedded or external Platform Services Controller. You can also deploy a Platform Services Controller as an appliance or install it on Windows. If necessary, you can use a mixed operating systems environment.
Before you deploy the vCenter Server Appliance or install vCenter Server for Windows, you must determine the deployment model that is suitable for your environment. For each deployment or installation, you must select one of the three deployment types.
Table 1 1. vCenter Server and Platform Services Controller Deployment Types
Deployment Type |
Description |
|
|
vCenter Server with an embedded Platform Services Controller |
All services that are bundled with the |
|
Platform Services Controller are deployed together with the |
|
vCenter Server services on the same virtual machine or physical |
|
server. |
|
|
Platform Services Controller |
Only the services that are bundled with the |
|
Platform Services Controller are deployed on the virtual machine |
|
or physical server. |
vCenter Server with an external Platform Services Controller (Requires external Platform Services Controller)
Only the vCenter Server services are deployed on the virtual machine or physical server.
You must register such a vCenter Server instance with a Platform Services Controller instance that you previously deployed or installed.
vCenter Server with an Embedded Platform Services Controller
Using an embedded Platform Services Controller results in a standalone deployment that has its own vCenter Single Sign-On domain with a single site. vCenter Server with an embedded
Platform Services Controller is suitable for small environments. You cannot join other vCenter Server or Platform Services Controller instances to this vCenter Single Sign-On domain.
Figure 1 2. vCenter Server with an Embedded Platform Services Controller
Virtual Machine or Physical Server
Platform Services
Controller
vCenter Server
VMware, Inc. |
14 |
vSphere Installation and Setup
Installing vCenter Server with an embedded Platform Services Controller has the following advantages:
nThe connection between vCenter Server and the Platform Services Controller is not over the network, and vCenter Server is not prone to outages caused by connectivity and name resolution issues between vCenter Server and the Platform Services Controller.
nIf you install vCenter Server on Windows virtual machines or physical servers, you need fewer Windows licenses.
nYou manage fewer virtual machines or physical servers.
Installing vCenter Server with an embedded Platform Services Controller has the following disadvantages:
nThere is a Platform Services Controller for each product which might be more than required and which consumes more resources.
nThe model is suitable only for small-scale environments.
You can configure the vCenter Server Appliance with an embedded Platform Services Controller in vCenter High Availability configuration. For information, see vSphere Availability.
Note After you deploy or install vCenter Server with an embedded Platform Services Controller, you can reconfigure the deployment type and switch to vCenter Server with an external
Platform Services Controller.
See Reconfigure a Standalone vCenter Server with an Embedded Platform Services Controller to a vCenter Server with an External Platform Services Controller.
Platform Services Controller and vCenter Server with an External Platform Services Controller
When you deploy or install a Platform Services Controller instance, you can create a vCenter Single SignOn domain or join an existing vCenter Single Sign-On domain. Joined Platform Services Controller instances replicate their infrastructure data, such as authentication and licensing information, and can span multiple vCenter Single Sign-On sites. For information, see Understanding vSphere Domains, Domain Names, and Sites.
For information about managing the Platform Services Controller services, see Platform Services Controller Administration.
You can register multiple vCenter Server instances with one common external
Platform Services Controller instance. The vCenter Server instances assume the vCenter Single Sign-On site of the Platform Services Controller instance with which they are registered. All vCenter Server instances that are registered with one common or different joined Platform Services Controller instances are connected in Enhanced Linked Mode.
See Enhanced Linked Mode Overview.
VMware, Inc. |
15 |
vSphere Installation and Setup
Figure 1 3. Example of Two vCenter Server Instances with a Common External Platform Services Controller
Virtual Machine or Physical Server
Platform Services
Controller
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Virtual Machine or Physical Server |
|
|
|
Virtual Machine or Physical Server |
||||
|
|
|
|
|
|
|
|
||
|
vCenter Server |
|
|
|
|
vCenter Server |
|
||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Installing vCenter Server with an external Platform Services Controller has the following advantages:
nFewer resources consumed by the shared services in the Platform Services Controller instances.
nThe model is suitable for large-scale environments.
Installing vCenter Server with an external Platform Services Controller has the following disadvantages:
nThe connection between vCenter Server and Platform Services Controller might have connectivity and name resolution issues.
nIf you install vCenter Server on Windows virtual machines or physical servers, you need more Microsoft Windows licenses.
nYou must manage more virtual machines or physical servers.
For information about the Platform Services Controller and vCenter Server maximums, see the
Configuration Maximums documentation.
For information about the deployment topologies and Platform Services Controller high availability, see Deployment Topologies with External Platform Services Controller Instances and High Availability.
For information about configuring the vCenter Server Appliance with an external
Platform Services Controller in vCenter High Availability configuration, see vSphere Availability.
Mixed Operating Systems Environment
A vCenter Server instance installed on Windows can be registered with either a
Platform Services Controller installed on Windows or a Platform Services Controller appliance. A vCenter Server Appliance can be registered with either a Platform Services Controller installed on Windows or a Platform Services Controller appliance. Both vCenter Server and the
vCenter Server Appliance can be registered with the same Platform Services Controller.
VMware, Inc. |
16 |
vSphere Installation and Setup
Figure 1 4. Example of a Mixed Operating Systems Environment with an External Platform Services Controller on Windows
Windows Virtual Machine
or Physical Server
Platform Services
Controller on Windows
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Virtual Machine or Physical Server |
|
|
|
Virtual Machine |
||||
|
|
|
|
|
|
|
|
||
|
vCenter Server on Windows |
|
|
|
|
vCenter Server Appliance |
|
||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Figure 1 5. Example of a Mixed Operating Systems Environment with an External Platform Services Controller Appliance
Virtual Machine
Platform Services
Controller Appliance
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Virtual Machine or Physical Server |
|
|
|
Virtual Machine |
|
||||
|
|
|
|
|
|
|
|
|
|
||
|
|
vCenter Server on Windows |
|
|
|
|
vCenter Server Appliance |
|
|
||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Note To ensure easy manageability and maintenance, use only appliances or only Windows installations of vCenter Server and Platform Services Controller.
Understanding vSphere Domains, Domain Names, and
Sites
Each Platform Services Controller is associated with a vCenter Single Sign-On domain. The domain name defaults to vsphere.local, but you can change it during installation of the first
Platform Services Controller. The domain determines the local authentication space. You can split a domain into multiple sites, and assign each Platform Services Controller and vCenter Server instance to a site. Sites are logical constructs, but usually correspond to geographic location.
Platform Services Controller Domain
When you install a Platform Services Controller, you are prompted to create a vCenter Single Sign-On domain or join an existing domain.
The domain name is used by the VMware Directory Service (vmdir) for all Lightweight Directory Access Protocol (LDAP) internal structuring.
VMware, Inc. |
17 |
vSphere Installation and Setup
With vSphere 6.0 and later, you can give your vSphere domain a unique name. To prevent authentication conflicts, use a name that is not used by OpenLDAP, Microsoft Active Directory, and other directory services.
Note You cannot change the domain to which a Platform Services Controller or vCenter Server instance belongs.
If you are upgrading from vSphere 5.5, your vSphere domain name remains the default (vsphere.local). For all versions of vSphere, you cannot change the name of a domain.
After you specify the name of your domain, you can add users and groups. It usually makes more sense to add an Active Directory or LDAP identity source and allow the users and groups in that identity source to authenticate. You can also add vCenter Server or Platform Services Controller instances, or other VMware products, such as vRealize Operations, to the domain.
Platform Services Controller Sites
You can organize Platform Services Controller domains into logical sites. A site in the VMware Directory Service is a logical container for grouping Platform Services Controller instances within a vCenter Single Sign-On domain.
You are prompted for the site name when you install or upgrade a Platform Services Controller. See the vSphere Installation and Setup documentation.
Deployment Topologies with External
Platform Services Controller Instances and High Availability
To ensure Platform Services Controller high availability in external deployments, you must install or deploy at least two joined Platform Services Controller instances in your vCenter Single Sign-On domain. When you use a third-party load balancer, you can ensure an automatic failover without downtime.
Platform Services Controller with a Load Balancer
Figure 1 6. Example of a Load Balanced Pair of Platform Services Controller Instances
Virtual Machine or |
|
|
|
|
|
|
|
Virtual Machine or |
||
Physical Server |
|
|
|
|
|
|
|
Physical Server |
||
Platform Services |
|
|
|
|
|
|
|
Platform Services |
||
Controller |
|
|
|
|
|
|
|
Controller |
||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Load Balancer |
|
|
|
||
|
|
|
|
|
|
|||||
|
|
|
|
|
|
|
|
|
||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Virtual Machine or |
|
|
|
|
|
|
|
Virtual Machine or |
||
Physical Server |
|
|
|
|
|
|
|
Physical Server |
||
|
|
|
|
|
|
|
|
|
||
vCenter Server |
|
|
|
|
|
|
|
vCenter Server |
||
|
|
|
|
|
|
|
|
|
|
|
VMware, Inc. |
18 |
vSphere Installation and Setup
You can use a third-party load balancer per site to configure Platform Services Controller high availability with automatic failover for this site. For information about the maximum number of
Platform Services Controller instances behind a load balancer, see the Configuration Maximums documentation.
Important To configure Platform Services Controller high availability behind a load balancer, the Platform Services Controller instances must be of the same operating system type. Mixed operating systems Platform Services Controller instances behind a load balancer are unsupported.
The vCenter Server instances are connected to the load balancer. When a Platform Services Controller instance stops responding, the load balancer automatically distributes the load among the other functional Platform Services Controller instances without downtime.
Platform Services Controller with Load Balancers Across vCenter Single Sign-On Sites
Figure 1 7. Example of Two Load Balanced Pairs of Platform Services Controller Instances Across Two Sites
|
|
|
Site 1 |
|
|
|
|
|
|
|
|
|
|
Site 2 |
|
|
|
|
||||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
|
Virtual Machine or |
|
|
|
|
Virtual Machine or |
|
|
|
|
Virtual Machine or |
|
|
|
|
Virtual Machine or |
||||||||||
|
Physical Server |
|
|
|
|
Physical Server |
|
|
|
|
Physical Server |
|
|
|
|
Physical Server |
||||||||||
|
Platform Services |
|
|
|
|
Platform Services |
|
|
|
|
Platform Services |
|
|
|
|
Platform Services |
||||||||||
|
Controller |
|
|
|
|
Controller |
|
|
|
|
Controller |
|
|
|
|
Controller |
||||||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Load Balancer |
|
|
|
|
|
|
|
|
|
|
Load Balancer |
|
|
|
|
||||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
||||||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Virtual Machine or |
|
|
|
|
Virtual Machine or |
|
|
|
|
Virtual Machine or |
|
|
|
|
Virtual Machine or |
||||||||||
|
Physical Server |
|
|
|
|
Physical Server |
|
|
|
|
Physical Server |
|
|
|
|
Physical Server |
||||||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
|
vCenter Server |
|
|
|
|
vCenter Server |
|
|
|
|
vCenter Server |
|
|
|
|
vCenter Server |
||||||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Your vCenter Single Sign-On domain might span multiple sites. To ensure Platform Services Controller high availability with automatic failover throughout the domain, you must configure a separate load balancer in each site.
VMware, Inc. |
19 |
vSphere Installation and Setup
Platform Services Controller with No Load Balancer
Figure 1 8. Example of Two Joined Platform Services Controller Instances with No a Load Balancer
|
Virtual Machine or |
|
|
|
|
Virtual Machine or |
|
||
|
Physical Server |
|
|
|
|
Physical Server |
|
||
|
|
|
|
|
|
|
|
|
|
|
Platform Services |
|
|
|
|
Platform Services |
|
||
|
Controller |
|
|
|
|
Controller |
|
||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Virtual Machine or |
|
Virtual Machine or |
|
Virtual Machine or |
|
Virtual Machine or |
Physical Server |
|
Physical Server |
|
Physical Server |
|
Physical Server |
|
|
|
|
|
|
|
vCenter Server |
|
vCenter Server |
|
vCenter Server |
|
vCenter Server |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
When you join two or more Platform Services Controller instances in the same site with no load balancer, you configure Platform Services Controller high availability with a manual failover for this site.
When a Platform Services Controller instance stops responding, you must manually fail over the vCenter Server instances that are registered to it. You fail over the instances by repointing them to other functional Platform Services Controller instances within the same site. See Repoint vCenter Server to Another External Platform Services Controller.
Note If your vCenter Single Sign-On domain includes three or more Platform Services Controller instances, you can manually create a ring topology. A ring topology ensures Platform Services Controller reliability when one of the instances fails. To create a ring topology, run the /usr/lib/vmwarevmdir/bin/vdcrepadmin -f createagreement command against the first and last
Platform Services Controller instance that you have deployed.
VMware, Inc. |
20 |
vSphere Installation and Setup
Platform Services Controller with No Load Balancer Across vCenter Single Sign-On Sites
Figure 1 9. Example of Two Joined Pairs of Platform Services Controller Instances Across Two Sites with No Load Balancer
Site 1 |
|
|
|
|
|
Site 2 |
||||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Virtual Machine or |
|
|
|
|
Virtual Machine or |
|
|
|
Virtual Machine or |
|
|
|
|
Virtual Machine or |
Physical Server |
|
|
|
|
Physical Server |
|
|
|
Physical Server |
|
|
|
|
Physical Server |
Platform Services |
|
|
|
|
Platform Services |
|
|
|
Platform Services |
|
|
|
|
Platform Services |
Controller |
|
|
|
|
Controller |
|
|
|
Controller |
|
|
|
|
Controller |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Virtual Machine or |
|
Virtual Machine or |
|
Virtual Machine or |
|
Virtual Machine or |
Physical Server |
|
Physical Server |
|
Physical Server |
|
Physical Server |
|
|
|
|
|
|
|
vCenter Server |
|
vCenter Server |
|
vCenter Server |
|
vCenter Server |
|
|
|
|
|
|
|
Your vCenter Single Sign-On domain might span multiple sites. When no load balancer is available, you can manually repoint vCenter Server from a failed to a functional Platform Services Controller within the same site. See Repoint vCenter Server to Another External Platform Services Controller.
Important Repointing vCenter Server between sites and domains is unsupported. If no functional Platform Services Controller instance is available in the site, you must deploy or install a new
Platform Services Controller instance in this site. This new Platform Services Controller instance becomes the replication partner of the existing Platform Services Controller instance.
Enhanced Linked Mode connects multiple vCenter Server systems together by using one or more Platform Services Controllers.
Enhanced Linked Mode lets you view and search across all linked vCenter Server systems and replicate roles, permissions, licenses, policies, and tags.
When you install vCenter Server or deploy the vCenter Server Appliance with an external
Platform Services Controller, you must first install the Platform Services Controller. During installation of the Platform Services Controller, you can select whether to create a vCenter Single Sign-On domain or join an existing domain. You can select to join an existing vCenter Single Sign-On domain if you have already installed or deployed a Platform Services Controller instance and have created a vCenter Single Sign-On domain. When you join an existing vCenter Single Sign-On domain, the infrastructure data between the existing Platform Services Controller and the new Platform Services Controller is replicated.
With Enhanced Linked Mode, you can connect not only vCenter Server systems running on Windows but also many vCenter Server Appliances. You can also have an environment where multiple vCenter Server systems and vCenter Server Appliances are linked together.
VMware, Inc. |
21 |
vSphere Installation and Setup
If you install vCenter Server with an external Platform Services Controller, you first must deploy the Platform Services Controller on one virtual machines or physical server and then deploy vCenter Server on another virtual machine or physical server. While installing vCenter Server, you must select an existing external Platform Services Controller. You cannot select an existing Platform Services Controller that is a part of an embedded installation. For more information about the supported topologies, see vCenter Server and Platform Services Controller Deployment Types.
You can use evaluation mode to explore the entire set of features for ESXi hosts. The evaluation mode provides the set of features equal to a vSphere Enterprise Plus license. Before the evaluation mode expires, you must assign to your hosts a license that supports all the features in use.
For example, in evaluation mode, you can use vSphere vMotion technology, the vSphere HA feature, the vSphere DRS feature, and other features. If you want to continue using these features, you must assign a license that supports them.
The installable version of ESXi hosts is always installed in evaluation mode. ESXi Embedded is preinstalled on an internal storage device by your hardware vendor. It might be in evaluation mode or prelicensed.
The evaluation period is 60 days and begins when you turn on the ESXi host. At any time during the 60day evaluation period, you can convert from licensed mode to evaluation mode. The time available in the evaluation period is decreased by the time already used.
For example, suppose that you use an ESXi host in evaluation mode for 20 days and then assign a vSphere Standard Edition license key to the host. If you set the host back in evaluation mode, you can explore the entire set of features for the host for the remaining evaluation period of 40 days.
For information about managing licensing for ESXi hosts, see the vCenter Server and Host Management documentation.
VMware, Inc. |
22 |
Installing and Setting Up ESXi |
2 |
You can install and set up ESXi on your physical hardware so that it acts as a platform for virtual machines.
This section includes the following topics:
nESXi Requirements
nPreparing for Installing ESXi
nInstalling ESXi
nSetting Up ESXi
nAfter You Install and Set Up ESXi
To install or upgrade ESXi, your system must meet specific hardware and software requirements.
Make sure the host meets the minimum hardware configurations supported by ESXi6.5.
Hardware and System Resources
To install or upgrade ESXi, your hardware and system resources must meet the following requirements:
nSupported server platform. For a list of supported platforms, see the VMware Compatibility Guide at http://www.vmware.com/resources/compatibility.
nESXi 6.5 requires a host machine with at least two CPU cores.
nESXi 6.5 supports 64-bit x86 processors released after September 2006. This includes a broad range of multi-core processors. For a complete list of supported processors, see the VMware compatibility guide at http://www.vmware.com/resources/compatibility.
nESXi 6.5 requires the NX/XD bit to be enabled for the CPU in the BIOS.
nESXi 6.5 requires a minimum of 4 GB of physical RAM. It is recommended to provide at least 8 GB of RAM to run virtual machines in typical production environments.
nTo support 64-bit virtual machines, support for hardware virtualization (Intel VT-x or AMD RVI) must be enabled on x64 CPUs.
VMware, Inc. |
23 |
vSphere Installation and Setup
nOne or more Gigabit or faster Ethernet controllers. For a list of supported network adapter models, see the VMware Compatibility Guide at http://www.vmware.com/resources/compatibility.
nSCSI disk or a local, non-network, RAID LUN with unpartitioned space for the virtual machines.
nFor Serial ATA (SATA), a disk connected through supported SAS controllers or supported on-board SATA controllers. SATA disks are considered remote, not local. These disks are not used as a scratch partition by default because they are seen as remote.
Note You cannot connect a SATA CD-ROM device to a virtual machine on an ESXi 6.5 host. To use the SATA CD-ROM device, you must use IDE emulation mode.
Storage Systems
For a list of supported storage systems, see the VMware Compatibility Guide at http://www.vmware.com/resources/compatibility. For Software Fibre Channel over Ethernet (FCoE), see Installing and Booting ESXi with Software FCoE.
ESXi Booting Requirements
vSphere 6.5 supports booting ESXi hosts from the Unified Extensible Firmware Interface (UEFI). With UEFI, you can boot systems from hard drives, CD-ROM drives, or USB media.
Starting with vSphere 6.5, VMware Auto Deploy supports network booting and provisioning of ESXi hosts with UEFI.
ESXi can boot from a disk larger than 2 TB if the system firmware and the firmware on any add-in card that you are using support it. See the vendor documentation.
Note Changing the boot type from legacy BIOS to UEFI after you install ESXi 6.5 might cause the host to fail to boot. In this case, the host displays an error message similar to Not a VMware boot bank. Changing the host boot type between legacy BIOS and UEFI is not supported after you install ESXi 6.5.
Storage Requirements for ESXi 6.5 Installation or Upgrade
Installing ESXi 6.5 or upgrading to ESXi 6.5 requires a boot device that is a minimum of 1 GB. When booting from a local disk, SAN or iSCSI LUN, a 5.2-GB disk is required to allow for the creation of the VMFS volume and a 4-GB scratch partition on the boot device. If a smaller disk or LUN is used, the installer attempts to allocate a scratch region on a separate local disk. If a local disk cannot be found the scratch partition, /scratch, is on the ESXi host ramdisk, linked to /tmp/scratch. You can
reconfigure /scratch to use a separate disk or LUN. For best performance and memory optimization, do not leave /scratch on the ESXi host ramdisk.
To reconfigure /scratch, see Set the Scratch Partition from the vSphere Web Client.
Due to the I/O sensitivity of USB and SD devices, the installer does not create a scratch partition on these devices. When installing or upgrading on USB or SD devices, the installer attempts to allocate a scratch region on an available local disk or datastore. If no local disk or datastore is found, /scratch is placed on the ramdisk. After the installation or upgrade, you should reconfigure /scratch to use a persistent
VMware, Inc. |
24 |
vSphere Installation and Setup
datastore. Although a 1GB USB or SD device suffices for a minimal installation, you should use a 4GB or larger device. The extra space is used for an expanded coredump partition on the USB/SD device. Use a high-quality USB flash drive of 16 GB or larger so that the extra flash cells can prolong the life of the boot media, but high-quality drives of 4 GB or larger are sufficient to hold the extended coredump partition.
See Knowledge Base article http://kb.vmware.com/kb/2004784.
In Auto Deploy installations, the installer attempts to allocate a scratch region on an available local disk or datastore. If no local disk or datastore is found, /scratch is placed on ramdisk. You should
reconfigure /scratch to use a persistent datastore following the installation.
For environments that boot from a SAN or use Auto Deploy, you need not allocate a separate LUN for each ESXi host. You can co-locate the scratch regions for many ESXi hosts onto a single LUN. The number of hosts assigned to any single LUN should be weighed against the LUN size and the I/O behavior of the virtual machines.
Supported Remote Management Server Models and Firmware
Versions
You can use remote management applications to install or upgrade ESXi, or to manage hosts remotely.
Table 2 1. Supported Remote Management Server Models and Minimum Firmware Versions
Remote Management Server Model |
Firmware Version |
Java |
|
|
|
Dell DRAC 7 |
1.30.30 (Build 43) |
1.7.0_60-b19 |
|
|
|
Dell DRAC 6 |
1.54 (Build 15), 1.70 (Build 21) |
1.6.0_24 |
|
|
|
Dell DRAC 5 |
1.0, 1.45, 1.51 |
1.6.0_20,1.6.0_203 |
|
|
|
Dell DRAC 4 |
1.75 |
1.6.0_23 |
|
|
|
HP ILO |
1.81, 1.92 |
1.6.0_22, 1.6.0_23 |
|
|
|
HP ILO 2 |
1.8, 1.81 |
1.6.0_20, 1.6.0_23 |
|
|
|
HP ILO 3 |
1.28 |
1.7.0_60-b19 |
|
|
|
HP ILO 4 |
1.13 |
1.7.0_60-b19 |
|
|
|
IBM RSA 2 |
1.03, 1.2 |
1.6.0_22 |
|
|
|
To enhance performance, install or upgrade ESXi on a robust system with more RAM than the minimum required and with multiple physical disks.
For ESXi system requirements, see ESXi Hardware Requirements.
VMware, Inc. |
25 |
vSphere Installation and Setup
Table 2 2. Recommendations for Enhanced Performance
System Element |
Recommendation |
|
|
RAM |
ESXi hosts require more RAM than typical servers. Provide at |
|
least 8GB of RAM to take full advantage of ESXi features and |
|
run virtual machines in typical production environments. An ESXi |
|
host must have sufficient RAM to run concurrent virtual |
|
machines. The following examples are provided to help you |
|
calculate the RAM required by the virtual machines running on |
|
the ESXi host. |
|
Operating four virtual machines with Red Hat Enterprise Linux or |
|
Windows XP requires at least 3GB of RAM for baseline |
|
performance. This figure includes approximately 1024MB for the |
|
virtual machines, 256MB minimum for each operating system as |
|
recommended by vendors. |
|
Running these four virtual machines with 512MB RAM requires |
|
that the ESXi host have approximately 4GB RAM, which |
|
includes 2048MB for the virtual machines. |
|
These calculations do not take into account possible memory |
|
savings from using variable overhead memory for each virtual |
|
machine. See vSphere Resource Management. |
|
|
Dedicated Fast Ethernet adapters for virtual machines |
Place the management network and virtual machine networks |
|
on different physical network cards. Dedicated Gigabit Ethernet |
|
cards for virtual machines, such as Intel PRO 1000 adapters, |
|
improve throughput to virtual machines with high network traffic. |
|
|
Disk location |
Place all data that your virtual machines use on physical disks |
|
allocated specifically to virtual machines. Performance is better |
|
when you do not place your virtual machines on the disk |
|
containing the ESXi boot image. Use physical disks that are |
|
large enough to hold disk images that all the virtual machines |
|
use. |
|
|
VMFS5 partitioning |
The ESXi installer creates the initial VMFS volumes on the first |
|
blank local disk found. To add disks or modify the original |
|
configuration, use the vSphere Web Client. This practice |
|
ensures that the starting sectors of partitions are 64K-aligned, |
|
which improves storage performance. |
|
|
|
Note For SAS-only environments, the installer might not format |
|
the disks. For some SAS disks, it is not possible to identify |
|
whether the disks are local or remote. After the installation, you |
|
can use the vSphere Web Client to set up VMFS. |
|
|
|
|
Processors |
Faster processors improve ESXi performance. For certain |
|
workloads, larger caches improve ESXi performance. |
|
|
Hardware compatibility |
Use devices in your server that are supported by ESXi 6.5 |
|
drivers. See the Hardware Compatibility Guide at |
|
http://www.vmware.com/resources/compatibility. |
|
|
VMware, Inc. |
26 |
vSphere Installation and Setup
The vSphere Web Client and the VMware Host Client allow you to open and close firewall ports for each service or to allow traffic from selected IP addresses.
The following table lists the firewalls for services that are installed by default. If you install other VIBs on your host, additional services and firewall ports might become available. The information is primarily for services that are visible in the vSphere Web Client but the table includes some other ports as well.
Table 2 3. Incoming Firewall Connections
|
Protoc |
|
|
Port |
ol |
Service |
Description |
|
|
|
|
5988 |
TCP |
CIM Server |
Server for CIM (Common Information Model). |
|
|
|
|
5989 |
TCP |
CIM Secure Server |
Secure server for CIM. |
|
|
|
|
427 |
TCP, |
CIM SLP |
The CIM client uses the Service Location Protocol, version 2 (SLPv2) to find |
|
UDP |
|
CIM servers. |
|
|
|
|
546 |
|
DHCPv6 |
DHCP client for IPv6. |
|
|
|
|
8301, 8302 |
UDP |
DVSSync |
DVSSync ports are used for synchronizing states of distributed virtual ports |
|
|
|
between hosts that have VMware FT record/replay enabled. Only hosts that |
|
|
|
run primary or backup virtual machines must have these ports open. On hosts |
|
|
|
that are not using VMware FT these ports do not have to be open. |
|
|
|
|
902 |
TCP |
NFC |
Network File Copy (NFC) provides a file-type-aware FTP service for vSphere |
|
|
|
components. ESXi uses NFC for operations such as copying and moving data |
|
|
|
between datastores by default. |
|
|
|
|
12345, 23451 |
UDP |
vSANClustering |
VMware vSAN Cluster Monitoring and Membership Directory Service. Uses |
|
|
Service |
UDP-based IP multicast to establish cluster members and distribute vSAN |
|
|
|
metadata to all cluster members. If disabled, vSAN does not work. |
|
|
|
|
68 |
UDP |
DHCP Client |
DHCP client for IPv4. |
|
|
|
|
53 |
UDP |
DNS Client |
DNS client. |
|
|
|
|
8200, 8100, |
TCP, |
Fault Tolerance |
Traffic between hosts for vSphere Fault Tolerance (FT). |
8300 |
UDP |
|
|
|
|
|
|
6999 |
UDP |
NSX Distributed |
NSX Virtual Distributed Router service. The firewall port associated with this |
|
|
Logical Router |
service is opened when NSX VIBs are installed and the VDR module is |
|
|
Service |
created. If no VDR instances are associated with the host, the port does not |
|
|
|
have to be open. |
|
|
|
This service was called NSX Distributed Logical Router in earlier versions of |
|
|
|
the product. |
|
|
|
|
2233 |
TCP |
vSAN Transport |
vSAN reliable datagram transport. Uses TCP and is used for vSAN storage |
|
|
|
IO. If disabled, vSAN does not work. |
|
|
|
|
161 |
UDP |
SNMP Server |
Allows the host to connect to an SNMP server. |
|
|
|
|
22 |
TCP |
SSH Server |
Required for SSH access. |
|
|
|
|
8000 |
TCP |
vMotion |
Required for virtual machine migration with vMotion. ESXi hosts listen on port |
|
|
|
8000 for TCP connections from remote ESXi hosts for vMotion traffic. |
|
|
|
|
902, 443 |
TCP |
vSphere Web Client |
Client connections |
|
|
|
|
VMware, Inc. |
27 |
vSphere Installation and Setup
Table 2 3. Incoming Firewall Connections (Continued)
|
Protoc |
|
|
Port |
ol |
Service |
Description |
|
|
|
|
8080 |
TCP |
vsanvp |
vSAN VASA Vendor Provider. Used by the Storage Management Service |
|
|
|
(SMS) that is part of vCenter to access information about vSAN storage |
|
|
|
profiles, capabilities, and compliance. If disabled, vSAN Storage Profile Based |
|
|
|
Management (SPBM) does not work. |
|
|
|
|
80 |
TCP |
vSphere Web Access |
Welcome page, with download links for different interfaces. |
|
|
|
|
5900 -5964 |
TCP |
RFB protocol |
|
|
|
|
|
80, 9000 |
TCP |
vSphere Update |
|
|
|
Manager |
|
|
|
|
|
Table 2 4. Outgoing Firewall Connections
Port |
Protocol |
Service |
Description |
|
|
|
|
427 |
TCP, UDP |
CIM SLP |
The CIM client uses the Service Location Protocol, version 2 |
|
|
|
(SLPv2) to find CIM servers. |
|
|
|
|
547 |
TCP, UDP |
DHCPv6 |
DHCP client for IPv6. |
|
|
|
|
8301, 8302 |
UDP |
DVSSync |
DVSSync ports are used for synchronizing states of distributed |
|
|
|
virtual ports between hosts that have VMware FT record/replay |
|
|
|
enabled. Only hosts that run primary or backup virtual machines |
|
|
|
must have these ports open. On hosts that are not using VMware |
|
|
|
FT these ports do not have to be open. |
|
|
|
|
44046, 31031 |
TCP |
HBR |
Used for ongoing replication traffic by vSphere Replication and |
|
|
|
VMware Site Recovery Manager. |
|
|
|
|
902 |
TCP |
NFC |
Network File Copy (NFC) provides a file-type-aware FTP service |
|
|
|
for vSphere components. ESXi uses NFC for operations such as |
|
|
|
copying and moving data between datastores by default. |
|
|
|
|
9 |
UDP |
WOL |
Used by Wake on LAN. |
|
|
|
|
12345 23451 |
UDP |
vSAN Clustering |
Cluster Monitoring, Membership, and Directory Service used by |
|
|
Service |
vSAN. |
|
|
|
|
68 |
UDP |
DHCP Client |
DHCP client. |
|
|
|
|
53 |
TCP, UDP |
DNS Client |
DNS client. |
|
|
|
|
80, 8200, 8100, 8300 |
TCP, UDP |
Fault Tolerance |
Supports VMware Fault Tolerance. |
|
|
|
|
3260 |
TCP |
Software iSCSI Client |
Supports software iSCSI. |
|
|
|
|
6999 |
UDP |
NSX Distributed |
The firewall port associated with this service is opened when NSX |
|
|
Logical Router |
VIBs are installed and the VDR module is created. If no VDR |
|
|
Service |
instances are associated with the host, the port does not have to |
|
|
|
be open. |
|
|
|
|
VMware, Inc. |
28 |
vSphere Installation and Setup
Table 2 4. Outgoing Firewall Connections (Continued)
Port |
Protocol |
Service |
Description |
|
|
|
|
5671 |
TCP |
rabbitmqproxy |
A proxy running on the ESXi host. This proxy allows applications |
|
|
|
that are running inside virtual machines to communicate with the |
|
|
|
AMQP brokers that are running in the vCenter network domain. |
|
|
|
The virtual machine does not have to be on the network, that is, |
|
|
|
no NIC is required. Ensure that outgoing connection IP addresses |
|
|
|
include at least the brokers in use or future. You can add brokers |
|
|
|
later to scale up. |
|
|
|
|
2233 |
TCP |
vSAN Transport |
Used for RDT traffic (Unicast peer to peer communication) |
|
|
|
between vSAN nodes. |
|
|
|
|
8000 |
TCP |
vMotion |
Required for virtual machine migration with vMotion. |
|
|
|
|
902 |
UDP |
VMware vCenter |
vCenter Server agent. |
|
|
Agent |
|
|
|
|
|
8080 |
TCP |
vsanvp |
Used for vSAN Vendor Provider traffic. |
|
|
|
|
9080 |
TCP |
I/O Filter Service |
Used by the I/O Filters storage feature |
|
|
|
|
Table 2 5. Firewall Ports for Services That Are Not Visible in the UI by Default
|
Proto |
|
|
Port |
col |
Service |
Comment |
|
|
|
|
5900 -5964 |
TCP |
RFB protocol |
The RFB protocol is a simple protocol for remote access to graphical user |
|
|
|
interfaces. |
|
|
|
|
8889 |
TCP |
OpenWSMAN |
Web Services Management (WS-Management is a DMTF open standard for |
|
|
Daemon |
the management of servers, devices, applications, and Web services. |
|
|
|
|
If you used Auto Deploy to install your ESXi 6.5 host, or if you set up a log directory separate from the default location in a scratch directory on the VMFS volume, you might need to change your current log size and rotation settings to ensure that enough space is available for system logging .
All vSphere components use this infrastructure. The default values for log capacity in this infrastructure vary, depending on the amount of storage available and on how you have configured system logging. Hosts that are deployed with Auto Deploy store logs on a RAM disk, which means that the amount of space available for logs is small.
If your host is deployed with Auto Deploy, reconfigure your log storage in one of the following ways:
nRedirect logs over the network to a remote collector.
nRedirect logs to a NAS or NFS store.
If you redirect logs to non-default storage, such as a NAS or NFS store, you might also want to reconfigure log sizing and rotations for hosts that are installed to disk.
You do not need to reconfigure log storage for ESXi hosts that use the default configuration, which stores logs in a scratch directory on the VMFS volume. For these hosts, ESXi 6.5 configures logs to best suit your installation, and provides enough space to accommodate log messages.
VMware, Inc. |
29 |
vSphere Installation and Setup
Table 2 6. Recommended Minimum Size and Rotation Configuration for hostd, vpxa, and fdm Logs
|
|
Number of Rotations to |
|
Log |
Maximum Log File Size |
Preserve |
Minimum Disk Space Required |
|
|
|
|
Management Agent (hostd) |
10 MB |
10 |
100 MB |
|
|
|
|
VirtualCenter Agent (vpxa) |
5 MB |
10 |
50 MB |
|
|
|
|
vSphere HA agent (Fault |
5 MB |
10 |
50 MB |
Domain Manager, fdm) |
|
|
|
|
|
|
|
For information about setting up a remote log server, see Configure Syslog on ESXi Hosts.
Make sure that your browser supports the VMware Host Client.
The following guest operating systems and Web browser versions are supported for the VMware Host Client.
Supported Browsers |
Mac OS |
Windows |
Linux |
|
|
|
|
Google Chrome |
50+ |
50+ |
50+ |
|
|
|
|
Mozilla Firefox |
45+ |
45+ |
45+ |
|
|
|
|
Microsoft Internet Explorer |
N/A |
11+ |
N/A |
|
|
|
|
Microsoft Edge |
N/A |
38+ |
N/A |
|
|
|
|
Safari |
9.0+ |
N/A |
N/A |
|
|
|
|
Before you install ESXi, determine the installation option that is suitable for your environment and prepare for the installation process.
Download the installer for ESXi.
Prerequisites
Create a My VMware account at https://my.vmware.com/web/vmware/.
Procedure
1Download the ESXi installer from the VMware Web site at https://my.vmware.com/web/vmware/downloads.
ESXi is listed under Datacenter & Cloud Infrastructure.
VMware, Inc. |
30 |