-
Securing Microsoft SQL Server with Transport Layer Security (TLS) Certificates
Certificate Requirements If using a single server, the fully qualified domain name is only needed for the Common Name (CN) attribute. If using Always On High Availability, the fully qualified domain name of the individual SQL server needs to be in the CN attribute and the Availability Group Listener fully qualified domain name needs to…
-
VMware Agents Install Script
Order of Agent Install VMware Tools VMware Horizon Agent VMware Dynamic Environment Manager (DEM) Agent (Optional) VMware App Volumes Agent # https://kb.vmware.com/s/article/2118048 # https://powershellexplained.com/2016-10-21-powershell-installing-msi-files/ # # Install VMware Horizon Agent # Start-Process C:\ImageBuild\agents\VMware-Horizon-Agent-x86_64-7.13.0-16975066.exe -Wait -ArgumentList ‘/s /v”/qn VDM_VC_MANAGED_AGENT=1 ADDLOCAL=BlastUDP,ClientDriveRedirection,Core,FLASHMMR,HelpDesk,NGVC,PerfTracker,RDP,RTAV,SmartCard,ThinPrint,TSMMR,V4V,VmVideo,VMWMediaProviderProxy,VmwVaudio,VmwVidd VDM_FIPS_ENABLED=1 REBOOT=ReallySuppress /l*v C:\ImageBuild\logs\HorizonAgent-Install.log”‘ # # Install VMware Dynamic Environment Manager (DEM) Agent # Start-Process msiexec.exe…
-
Using PowerCLI in Smart Card Based Environment
ref: https://kb.vmware.com/s/article/67789 Problem You work in a hardened environment and you don’t have an administrative username and password because you only have smart cards or tokens. Resolution According to VMware, this is expected behavior. Uh, what? Workaround According to VMware, “Use Windows SSPI to pass through the Windows logged session Smart Card credentials to PowerCLI…
-
VMware Authentication Proxy in a DoD Hardened Environment
If you work in IT in the DoD in any capacity, then you know your systems can be a pain to work with if you followed a Security Technical Implementation Guide (STIG). This can be even more of a pain when following a commercial vendor’s installation or configuration documentation, since they write in the general…
-
Installing VMware App Volumes 4 Manager – Part 3
ref: https://docs.vmware.com/en/VMware-App-Volumes/4/com.vmware.appvolumes.admin.doc/GUID-3E512951-4045-4C15-A642-69BBCF4C34B6.html This section should really be called Configuring VMware App Volumes 4 Manager, but since it is part of a multi-part series, I kept it for uniformity. If you followed along in part 2 (Installing VMware App Volumes 4 Manager – Part 2), then most of the hard work will already be accomplished and…
-
Installing VMware App Volumes 4 Manager – Part 2
This is a prerequisite phase before configuring App Volumes Manager in the browser. A lot of this should already be accomplished in a production environment except the newly installed App Volumes Manager specific settings. This page can serve more than just for configuring security for App Volumes Manager. At this point, the App Volumes Manager…