Everybody knows how tedious it may be working with self-signed SSL certificates. That’s why it’s easier to add the Microsoft Certificate server role to your Active Directory. However, manual certificate enrollment is not so handy when there are dozens of users within one IT infrastructure, and if that’s the case, it won’t hurt to learn how to cut a corner or two!
In the previous article, I have shared a working algorithm on replacing the ESXi SSL certificate with a self-signed one, but, as you know well, there’s always room for perfection. So, I have been practicing with a more universal scenario that could also work with a domain infrastructure and domain certificate services. That’s what I came up with.
Along with various recent updates, VMware released its new version of vSphere Replication 8.4. It’s a free perk that comes included with the vSphere package and has a limited potential to enable and operate VM replication to remote locations. Although it’s quite a basic feature, it can still provide valuable benefits for small deployments scenarios.
Operating VMs can be overwhelming when you’re overseeing an enterprise-class IT environment. Azure Automanage is a new feature that applies Azure best practices configurations to a VM based on its services. Once the VM is onboard, the feature applies the most appropriate configs to it, monitors it for drift, and auto-corrects it in case of deviation.
Having a controlled minimum set of permissions in your Active Directory (AD) will ensure nothing will slip during clone publishing. Otherwise, VMware Horizon, when instant clones are published, can make unwanted corrections in the AD service account while creating computer objects in the target organizational unit. You don’t want that.
Azure Kubernetes Service (AKS) recently introduced the ability to view the state of your AKS resources from a GUI. Azure Portal now enables you to view in-depth details of your workloads in real-time. You can view the workload of your deployments, pods, and replica sets, and various other capabilities without digging in the cmdline.
Among many good things, remote work creates new challenges for business cybersecurity. Regardless of whether the user uses VPN, having additional security measures can never hurt. Microsoft Defender for Endpoint introduces additional layers where you can also set web content filters to avoid your employees creating unwanted cyber threats.
Evaluating the state of your Active Directory (AD) is perceived as a laborious and complex task. If you do that manually, then perhaps it is. However, checking up on the state of your AD is necessary to rule out potential threats to your environment. Luckily, there’s one tool that can help you generate a comprehensive security report on your chosen AD within minutes.
Good understanding of storage is vital to every IT admin, freshman or not. vSphere continues to innovate how it uses storage, so it’s better to brush up on existing ways before getting into novelties. So before checking out vSphere 7 and Tanzu with their Paravirtual Container Storage Interface (pvCSI), let’s repeat the core material.