06: Certificate Authority

On the Domain Controller install the Active Direct Certificate Authority Role Add-WindowsFeature AD-Certificate,ADCS-Cert-Authority Next run SetupCA.vbs which can be downloaded from Microsoft cscript SetupCA.vbs /IE From the admin workstation open Certification Authority and then right click on Certificate Templates and choose Manage Templates (or Start, Run, certtmpl.msc) Select the Computer template and Duplicate it Set the following property pages as shown Back in Certification Authority, right click then New, Certificate Template to Issue Select the template that we just created and click ok Update the Default Domain Group Policy Object to enabled auto enrollment as follows Set-GPRegistryValue -Name "Default Domain Policy" -Key "HKLM\Software\Policies\Microsoft\Cryptography\AutoEnrollment" -ValueName AEPolicy -Type DWORD -Value 7 Force the group policy to update with gpupdate /force Run RSOP.MSC to verify that the GPO has been applied and check…
Read More

05: File Server

Now create a VM for it $vm = New-VM -Name "FS01" -VMHost 10.0.1.1 -DiskGB 30 -MemoryGB 2 -NumCpu 2 -NetworkName "VM Network" -GuestId windows8Server64Guest Get-NetworkAdapter $vm | Set-NetworkAdapter -Type Vmxnet3 -Confirm:$false Get-ScsiController $vm | Set-ScsiController -Type ParaVirtual Boot the VM and open the console Start-VM $vm | Open-VMConsoleWindow –FullScreen Install Windows via MDT setting the name to FS01 and join the domain Set a static IP address New-NetIPAddress -InterfaceAlias "Ethernet0" -IPAddress 10.0.1.6 -PrefixLength 16 -DefaultGateway 10.0.0.1 Set-DnsClientServerAddress -InterfaceAlias "Ethernet0" -ServerAddresses 10.0.1.5 From the admin station, add a new drive to for the file data New-HardDisk –vm $vm –CapacityGB 100 –StorageFormat Thin Invoke diskpart and run though these commands DISKPART> list disk DISKPART> select disk 1 DISKPART> online disk DISKPART> attributes disk clear readonly DISKPART> convert gpt DISKPART> create partition primary…
Read More

04: Microsoft Deployment Toolkit

We don’t strictly need MDT to do this but if we are going to build a sustainable environment then it’s pretty helpful to have furthermore with lots of servers to deploy there is some labour saving especially as it nicely integrates the language packs and drivers and installs VMware Tools.  Create a VM for MDT $vm = Get-ResourcePool -Location Servers | New-VM -Name "MDT01" -DiskGB 30 -MemoryGB 2 -NumCpu 2 -CD -NetworkName "VM Network" -GuestId windows8Server64Guest Get-CDDrive $vm | Set-CDDrive -IsoPath "[VMFS01] ISO\SW_DVD9_Windows_Svr_Std_and_DataCtr_2012_R2_64Bit_English_-3_MLF_X19-53588.ISO" -StartConnected $true -Confirm:$false Get-NetworkAdapter $vm | Set-NetworkAdapter -Type Vmxnet3 -Confirm:$false Start-VM $vm | Open-VMConsoleWindow -FullScreen Complete the Windows installation using the full GUI – not Server Core Start the VMware Tools installation by mounting the VMware Tools ISO Mount-Tools $vm Install with d:\setup64.exe /v"/qb REBOOT=yes" Set the…
Read More

03: Domain Controller

e’re not going to get much further without a Windows Active Directory aka Domain Controller. Download the following ISO files from Microsoft.  They are: Windows 2012 R2, Language Pack, Windows 8.1 x86 and x64, Language Pack SW_DVD9_SA_Win_Ent_8.1_64BIT_English_-2_MLF_X19-49847.ISO SW_DVD5_Win_8.1_W32_MultiLanguage_except_ChnTrad_Language_Pack_X18-97873.ISO SW_DVD9_SA_Win_Ent_8.1_32BIT_English_-2_MLF_X19-49843.ISO SW_DVD5_Win_8.1_64Bit_MultiLanguage_except_ChnTrad_Language_Pack_X18-97875.ISO SW_DVD5_NTRL_Win_Svr_Language_Pack_2012_R2_64Bit_MultiLang_FPP_VL_OEM_X19-05196.ISO SW_DVD9_Windows_Svr_Std_and_DataCtr_2012_R2_64Bit_English_-3_MLF_X19-53588.ISO Create a folder C:\ISO and save them there.  Copy that folder to the VMFS volume using PSCP.  To use PSCP we need the SSH service running on the host Get-VMHostService -VMHost 10.0.1.1 | where {$_.key -eq 'TSM-SSH'} | Start-VMHostService Copy the ISO folder across – case is important here pscp –r c:\ISO root@10.0.1.1:/vmfs/volumes/VMFS01 Now create a VM for it $vm = New-VM -Name "DC01" -VMHost 10.0.1.1 -DiskGB 30 -MemoryGB 2 -NumCpu 2 -CD -NetworkName "VM Network" -GuestId windows8Server64Guest Change the network adapter type from e1000 to VMXNet3. This…
Read More

02: Basic ESXi Setup

We now have our four ESXi hosts and we need to configure them with storage and for vMotion.  I’m going to use vSphere PowerCLI to do this as it’s easier to document than using the vSphere Client.  Furthermore, using the vSphere Client is tedious when it comes to repeating the same steps on multiple servers where PowerCLI automates this for you out of the box.  And besides VMware are trying to wean us off the vSphere Client! Before installing PowerCLI you must set the execution policy to allow remote signed scripts.  From an elevated command prompt run Set-ExecutionPolicy RemoteSigned -Force Open the PowerCLI installer Accept the EULA Accept the defaults And install All finished Open PowerCLI and connect to all your servers Connect-VIServer -Server 10.0.1.1,10.0.1.2,10.0.1.3,10.0.1.4 -User root -Password XXX -Force…
Read More

01: Installing ESXi

Pretending that we have four Dell servers: from the front panel configure the IP address of the DRAC card away from the default 192.168.0.120. IP address: 10.0.0.3, 10.0.0.4, 10.0.0.5 and 10.0.0.6 Netmask: 255.255.0.0 Gateway: 10.0.0.1 From the admin PC install Firefox and set it as the default web browser and then connect to the first host via the web browser using the URL http://10.0.0.3 Login with Username: root Password: calvin Open the Virtual Console Using the Virtual Console Viewer map the ISO image file for the ESXi installer to the machine and power on After a while the system will boot from the ISO and you will be at a screen like this Press Enter to continue Press F11 to accept the EULA Select the 2GB SD card (shown above…
Read More

00: Lab Setup

This doesn’t really form part of the series but it’s helpful note for me to remember how I did this.  I don’t have four machines available but I do have an Dell R710 which will virtualise everything else. On the R710, I installed ESXi 6.0.0 on the internal SD card using the DRAC to boot from the ISO file I have created a virtual machine networks on that host as follows.  None have a physical adapter but importantly all have security mode set to promiscuous under vSwitch configuration. LAB VM Network LAB iSCSI Network – MTU set to 9000 LAB vMotion Network LAB DMZ Network To bridge the lab to the Internet, I initially used an OpenBSD VM to act as the router but once the firewall rules got complicated…
Read More

VMware Horizon View

The series of posts on this website take us from the very beginning, so-called bare metal, to a full implementation of VMware Horizon View Lab Setup Installing ESXi Basic ESXi Setup Domain Controller Microsoft Deployment Toolkit File Server Certificate Authority Install vCSA Group Policy Files View Connection Server View Composer View Connection Server Events Database View Replica Server View Security Server Master VM and Pool Appendices Install Windows using MDT Lab IP Table vSRX Configuration
Read More

Mandelbrot Set

The Mandelbrot set is created from this very simple formula in which both Z and C are complex numbers. The formula is iterated to determine whether Z is bounded or tends to infinity.  To demonstrate this assume a test case where the imaginary part is zero and focus just on the real part.  In this case, the formula is trivial to evaluate starting with Z = 0.  The table below shows the outcome at C=0.2 and C=0.3 and where one is clearly bounded and the other is not! Iteration C = 0.2 C = 0.3 0 0 1 0.2 0.3 2 0.24 0.39 3 0.2576 0.4521 4 0.266358 0.504394 5 0.270946 0.554414 6 0.273412 0.607375 7 0.274754 0.668904 8 0.27549 0.747432 9 0.275895 0.858655 10 0.276118 1.037289 11 0.276241 1.375968…
Read More