Users Guide to Deploying vApps and Virtual Appliances

VMware Studio 2.1

This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this document, see http://www.vmware.com/support/pubs.

EN-000345-00

Users Guide to Deploying vApps and Virtual Appliances

You can find the most up-to-date technical documentation on the VMware Web site at: http://www.vmware.com/support/ The VMware Web site also provides the latest product updates. If you have comments about this documentation, submit your feedback to: docfeedback@vmware.com

Copyright 20082010 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents. VMware is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies.

VMware, Inc. 3401 Hillview Ave. Palo Alto, CA 94304 www.vmware.com

VMware, Inc.

Contents

AboutThisBook

1 OverviewofAppliancesCreatedwithVMwareStudio 7
AboutvAppsandVirtualAppliances 7 ComponentsofVirtualAppliancesCreatedwithVMwareStudio 8

2 DeployingYourVirtualAppliance 9
SystemRequirements 9 SupportedWebBrowsers 9 DistributionFormats 9 DeployingaVirtualApplianceinVMwarevSphere DeployingaVirtualAppliancefromZIP 10 FirstStartoftheVirtualAppliance 11 ConfiguringStaticIPAddresses 11 ConfiguringDHCP 12 SettingtheTimeZone 12 VirtualAppliancesBasedonWindows 12

10

3 ManagingaVirtualAppliance 13
ExploringaVirtualAppliance 13 UsingtheCommandLine 13 ExploringvAppsinthevSphereClient 14 ShuttingDownorRebootingtheVirtualAppliance 14 SettingtheTimeZone 14 NetworkConfiguration 15 SettingaProxyServer 15 ChoosingBetweenDHCPandStaticNetworkAddresses 15 FirewallSecurity 16 Troubleshooting 16 VAMIConfigurationUtilities 16

4 UpdatingaVirtualAppliance 17
TypesofUpdates 17 UpdateTabStatusandSettings 17 CheckingVersionStatus 17 InstallingAvailableUpdates 18 SettingUpdatePolicies 18 SettingUpdateSource 18 UsingtheCommandLineforUpdates 18

5 ManagingVirtualApplianceswithvCenterServer 19
RequirementsforUpdateManager 19 VirtualApplianceBaselines 20 CreatingVirtualApplianceUpgradeBaselines 20 AttachingVirtualApplianceUpgradeBaselines 20 ScanningVirtualAppliances 21

VMware, Inc.

Users Guide to Deploying vApps and Virtual Appliances

DoingaManualScan 21 SchedulingaScan 21 ViewingScanResults 22 ReviewingScanResultsforVirtualAppliancesContainedinavSphereObject 22 ReviewingScanResultsforanIndividualVirtualAppliance 23 RemediatingVirtualAppliances 23 VirtualApplianceRecognition 24

Appendix 25
VMwarePlatformProductsforOVFandOVA 25 CompatibilityforVirtualAppliancesandvApps 25

Index 27

VMware, Inc.

About This Book

Thisbook,theUsersGuidetoDeployingvAppsandVirtualAppliances,describeshowtodeployandmanage vAppsandvirtualappliancesbuiltwithVMwareStudio.ThisguideisintendedforVMwareuserswhoare installing,running,andupdatingvAppsandvirtualappliancescreatedbyVMwareStudio.

Revision History
Thisbookisrevisedwitheachreleaseoftheproductorwhennecessary.Arevisedversioncancontainminor ormajorchanges.Table 1summarizesthesignificantchangesineachversionofthisbook. Table 1. Revision History
Revision 20100713 20090831 20090629 20081216 20080905 Description MajorrevisionfortheVMwareStudio2.1release. FinalversionfortheVMwareStudio2.0release RetitledUsersGuidetoDeployingvAppsandVirtualAppliancesforStudio2.0Beta. Correctionsmadetofirstversion,butnonewmaterial. FirstversionoftheGuidetoDeployingVirtualAppliancesforVMwareStudio1.0.

VMwareprovidesseveralSDKproductsthattargetdifferentdevelopercommunitiesandplatformproducts. FordocumentationaboutthevariousVMwareSDKproductsandthelatestversionofthisguide,goto http://www.vmware.com/support/pubs/sdk_pubs.html.

VMware Studio Forum

IfyouhavequestionsaboutVMwareStudioorwanttointeractwithotherusersanddevelopers,visitthe communityforumathttp://communities.vmware.com/community/vmtn/vam/studio?view=discussions. FornewsaboutOVFandvAppdevelopment,gototheVMwareblogathttp://blogs.vmware.com/vapp/.

Intended Audience
Thismanualisintendedforanyonewhowantstodeploy,manage,andupdatevAppsandvirtualappliances withthehelpofVMwareStudio.ItdiscusseshowtomanageandupdatevAppsandvirtualapplianceson VMwarevSphere.ForinformationaboutcreatingvAppsandvirtualapplianceswithVMwareStudio,seethe companionmanual,DevelopersGuidetoBuildingvAppsandVirtualAppliances.

VMware Technical Publications Glossary

VMwareTechnicalPublicationsprovidesaglossaryoftermsthatmightbeunfamiliartoyou.Fordefinitions oftermsastheyareusedinVMwaretechnicaldocumentationgotohttp://www.vmware.com/support/pubs.

VMware, Inc.

Users Guide to Deploying vApps and Virtual Appliances

Document Feedback
VMwarewelcomesyoursuggestionsforimprovingourdocumentation.Sendyourfeedbackto docfeedback@vmware.com.

Technical Support and Education Resources

Thefollowingsectionsdescribethetechnicalsupportresourcesavailabletoyou.Toaccessthecurrentversions ofotherVMwarebooks,gotohttp://www.vmware.com/support/pubs.

Online and Telephone Support

Touseonlinesupporttosubmittechnicalsupportrequests,viewyourproductandcontractinformation,and registeryourproducts,gotohttp://www.vmware.com/support.

Support Offerings
TofindouthowVMwaresupportofferingscanhelpmeetyourbusinessneeds,goto http://www.vmware.com/support/services.

VMware Professional Services

VMwareEducationServicescoursesofferextensivehandsonlabs,casestudyexamples,andcoursematerials designedtobeusedasonthejobreferencetools.Coursesareavailableonsite,intheclassroom,andlive online.Foronsitepilotprograms andimplementationbestpractices,VMwareConsultingServicesprovides offeringsto helpyouassess,plan,build,andmanageyourvirtualenvironment.Toaccessinformationabout educationclasses,certificationprograms,andconsultingservices,gotohttp://www.vmware.com/services.

VMware, Inc.

Overview of Appliances Created with VMware Studio

Thischapterprovidesanoverviewofvirtualappliances,andincludesthefollowingtopics:

AboutvAppsandVirtualAppliancesonpage 7 ComponentsofVirtualAppliancesCreatedwithVMwareStudioonpage 8

VMwareStudioisanintegrateddevelopmenttoolthattransformsexistingsoftwareapplicationsintovApps andvirtualappliancesthatarereadytorunonVMwareplatformproducts.WithVMwareStudio,software developersandITprofessionalscanquicklypackageapplicationsthatareoptimizedforvirtualenvironments. Userscaneasilydeploythesevirtualappliancepackages,anddatacenteradministratorscanmanagethem withinvSphere.

About vApps and Virtual Appliances

Avirtualapplianceisaprebuiltsoftwaresolutioncontainingvirtualmachinesandsoftwareapplicationsthat areintegrated,managed,andupdatedasapackage.Unlikeconventionalhardwareappliances,virtual appliancesareeasyforuserstoacquireanddeployasasolution.Virtualappliancessimplifythedevelopment anddistributionofsoftwareapplications,andshortenimplementationtime. In2009VMwareintroducedthevApp,asoftwaresolutionoptimizedforcloudcomputing.AvAppcontains multipleinteroperatingvirtualmachinesandsoftwareapplicationsthatyoucaninstallandmanageasaunit. AvAppusestheindustrystandardOpenVirtualizationFormat(OVF)1.0toencapsulatethecomponentsofa multitierapplication,alongwiththeoperationalpoliciesandservicelevelsassociatedwithit.AvAppgives applicationownersastandardwaytodescribepoliciesthattheirdatacenterorvirtualcloudcanconsistently interpretandrun. VMwareStudioallowsdeveloperstobuildandmaintainproductionreadyvAppsandvirtualappliancesfor applicationsthatarenottiedtoaparticularhardwareformfactor.Linuxbasedvirtualappliancesbuiltwith StudiocontainaninguestmanagementcomponentcalledtheVirtualApplianceManagementInfrastructure (VAMI).VAMIprovidesaWebconsoleandcommandlineinterfacetoperformthefollowingtasks:

Configurenetworksettings Reviewbasicsysteminformationforthevirtualappliance Stoporrestartthevirtualappliance CheckforupdatesandinstallthemoverthenetworkorfromCDROM,immediatelyoronaschedule

Anindependentsoftwarevendor(ISV)cancustomizetheWebconsoletoprovideanimmediatelinktothe applicationsWebinterface.ForavApp,VAMIcanenforcebootorderandrunpriority.VAMIalsointegrates seamlesslyintoVMwarevCenterServer(formerlyVirtualCenter)andUpdateManager. VMwareStudiocanalsobuildWindowsbasedvirtualappliances,buttheydonotcontaintheVAMIagent. VMwareStudiobuildsvirtualappliancesthatareportableacrossVMwareplatformproducts,andwhichcan beupdatedorpatchedremotely,iftheappliancedeveloperenabledtheupdaterepository.Thisupdatefacility doesnotrequireuseofVMwarevCenterUpdateManager.

VMware, Inc.

Users Guide to Deploying vApps and Virtual Appliances

VMwareStudiocanproducevirtualappliancesinOpenVirtualizationFormat(OVF),OVA(archiveOVF),or ZIP.GeneratedOVFfilesconformtoeithertheOVF0.9draftspecificationortheOVF1.0standard.OVF1.0is requiredforvApps.ForinformationaboutOVF,seehttp://www.vmware.com/appliances/learn/ovf.html.

Components of Virtual Appliances Created with VMware Studio

Figure 11showsthecomponentsofavirtualappliancecreatedwithVMwareStudio. Figure 1-1. Virtual Appliance Created by VMware Studio

VirtualappliancescreatedwithVMwareStudiocontainthefollowingcomponents:

JeOSJustenoughOperatingSystem.VirtualappliancesbuiltwithVMwareStudiousestheminimal requiredpackages,ensuringthatvirtualapplianceshaveasmallfootprintandarerelativelysecure. VMwareToolsVMwareStudioinstallsVMwareToolsduringthebuildofvirtualappliancestoenhance communicationbetweenVMwarevirtualizationplatformsandthevirtualappliance. VAMITheinguestmanagementcomponentprovidesaWebconsoletomanagethevirtualappliance. VAMIallowsyoutochangenetworksettings,updatethevirtualappliance,andcontrolthestateofthe systembyshutdownandreboot,inadditiontoothermanagementservicesthatanISVadds.Allthe defaultmanagementservicesprovidedbyVAMIareimplementedasCommonInformationModel(CIM) ProvidersusingSmallFootprintCIMBroker(SFCB)asaCIMManager.CIMisastandardfrom DistributedManagementTaskForce(DMTF).FormoreinformationonCIMandotherDMTFstandards, seehttp://www.dmtf.org. ApplicationTheISVorhardwareappliancevendor(HAV)createstheapplication.Theapplication performstheintendedtaskforwhichtheapplianceiscreated.

Youcanmanagevirtualappliancesusingoneormoreofthefollowingmethods:

VirtualApplianceWebconsoleThisconnectionprovidesaWebconsoletoperformconfigurationand maintenancetasks.Acommandlineinterfacemightbeavailableonadifferentconnection. VMwarevCenterServerACIMconnectionenablesmanagementbyVMwarevCenterServer(formerly VirtualCenter)andUpdateManager. ThirdpartymanagementsoftwareThisconnectionmaysupportthirdpartymanagementsoftwareto controlthevirtualappliance.

VMware, Inc.

Deploying Your Virtual Appliance

Thischapterprovidesinformationabouthowtodeployavirtualappliance,andincludesthefollowingtopics:

SystemRequirementsonpage 9 SupportedWebBrowsersonpage 9 DistributionFormatsonpage 9 DeployingaVirtualApplianceinVMwarevSphereonpage 10 DeployingaVirtualAppliancefromZIPonpage 10 FirstStartoftheVirtualApplianceonpage 11

System Requirements
VirtualappliancescreatedwithVMwareStudioaresupportedonthefollowingVMwareplatformproducts:

VMwareESX/ESXi4.x,andthroughVMwarevCenterServer4.x VMwareESX/ESXi3.5,andthoughVMwareVirtualCenter2.5 VMwareWorkstation6.5.1andlater VMwareServer2.0andVMwareServer1.0.x(deprecated) VMwarePlayer2.5and3.x

Supported Web Browsers

ForWebconsolemanagement,VMwareStudiovirtualappliancessupportthefollowingbrowsers:

InternetExplorer7and8 MozillaFirefox3.x

Distribution Formats
Yourvirtualappliancemightbedistributedinoneormoreofthefollowingformats:

AZIParchivecontainingaVMXvirtualmachinefileandoneormoreVMDKfiles AnOVF0.9fileandoneormoreVMDKfiles(OVF0.9package) AnOVF1.0fileandoneormoreVMDKfiles(OVF1.0package) AnOVAarchive(anOVF1.0packageinTARformat)

Yourdeploymentmethoddependsonthedistributionformat.ForVMwareServerandWorkstation,useZIP asdescribedinDeployingaVirtualAppliancefromZIPonpage 10. ForVMwarevSphere(ESX/ESXiandvCenterServer)useOVForOVAasdescribedbelow.

VMware, Inc. 9

Users Guide to Deploying vApps and Virtual Appliances

Deploying a Virtual Appliance in VMware vSphere

IfyoureceiveavirtualapplianceinOVF0.9format,youcandeployitonVMwareInfrastructure3orlater. IfyougetavApporvirtualapplianceinOVF1.0orOVAformat,youmustdeployitonVMwarevSphere4. YoucandeployanOVForOVAeitherbyspecifyingitsURL,orafterdownloadingtheOVFandVMDKfiles (ortheOVAarchive)toyourlocaldisk. To deploy a virtual appliance or vApp from OVF or OVA 1 2 3 IntheVMwareInfrastructureClient,selectmenuFile>VirtualAppliance>Import. IntheVMwarevSphereClient,selectFile>DeployOVFTemplate. ChooseeitherDeployfromURLorDeployfromfile,basedonwheretheOVForOVAislocated. Toinstalltheappliance,supplytherequestedinformationintheImportVirtualApplianceWizard,and accepttheEndUserLicenseAgreement(EULA). OnvSphere4whenyoudeployanOVF1.0orOVAproducedbyVMwareStudio,youarepromptedfor OVFnetworkingproperties,whichconfigurenetworkingforthevApp.Youmightbepromptedforother OVFpropertiesthattheISVhasdefinedtoconfiguretheapplication.FortheOVFnetworkingproperties towork,anIPPoolmustbeconfiguredonthevCenterServer,andthisconfigurationmustbecomplete beforeyoupoweronthevirtualappliance. OnplatformproductsotherthanvSphere,appliancestrytoacquireanIPaddressfromaDHCPserverby default.IfyoupreferastaticIPaddress,seeConfiguringStaticIPAddressesonpage 11. 4 5 Poweronthevirtualmachine.InthecaseofavApp,youcanpowerontheentirevApp. ContinuewithFirstStartoftheVirtualApplianceonpage 11.

IfyoureceiveyourvirtualapplianceasaZIPfilecontainingaVMXfileandoneormoreVMDKfiles,thenyou mustfirstconvertthevirtualappliance.TheVMwarevCenterConverter4StandaloneToolconvertsand importsthevirtualappliancedirectlyintotheVMwarevSphereinventorysothatyoucanrunitimmediately. ConverterisfreeandavailablefromtheVMwareWebsiteathttp://vmware.com/products/converter/.

Deploying a Virtual Appliance from ZIP

AZIPdistributionfilecontainsaVMXfileandoneormoreVMDKfiles.IfyoureceiveadistributioninZIP format,youmustfirstunzipthefileandthenopentheVMXfileusingeitherVMwareServer,Workstation,or VMwarePlayer. To deploy a virtual appliance from ZIP 1 OntheVMwareplatformproductwherethevirtualappliancewillrun,extracttheZIPfileintoafolder. Forexample,theextractionfoldermightbe/var/lib/vmware/VirtualMachinesonaLinuxhost,or C:\MyVirtualMachinesonaWindowshost. 2 3 IntheVMwareWorkstationorVMwareServerConsoleapplicationmenu,selectFile>Open. ClickBrowseandnavigatetothefolderwhereyouextractedthevirtualappliancesoftware.Select <applianceName>.vmxandclickOpen. TheapplianceappearsasanentryintheInventory. 4 5 IntheCommandssection,clickStart. ContinuewithFirstStartoftheVirtualApplianceonpage 11.

IfyoureceivethevirtualapplianceasanOVFfile,youcanimportitwiththeovftool,whichconvertstheOVF andVMDKfilesintoVMXandVMDKfilesthatarecompatiblewithVMwarehostedproducts.Theovftool isfreeandavailableontheVMwareWebsiteathttp://vmware.com/appliances/learn/ovf.html.

10

VMware, Inc.

Chapter 2 Deploying Your Virtual Appliance

First Start of the Virtual Appliance

Torunthevirtualappliance,followthisprocedure: 1 OnaVMwareplatformproduct,startthevirtualappliancewiththevirtualmachinePowerOncommand. Astheappliancestarts(exceptinvCenterServer4)itmaydisplaytheEULA.Ifitdoes,pressspacebarto continuedisplayingmorepages;attheendenteryestoaccepttheEULA.Ifthevirtualappliancerequests otherinformation,suchasaloginpassword,provideit. TheIPaddressofthevirtualappliance(fromOVFnetworkingpropertiesorDHCP)mightdisplayonthe welcomescreen,andintheSummarytabofthevSphereClient.ThewelcomescreenmaydisplaytheURL whereyoucanaccesstheWebconsoleforappliancemanagement.Thesemenuselectionsappear:
Login Configure Network Set Timezone (Current:UTC)

3 4 5 6

BydefaultthevirtualappliancetriestoacquireanIPaddressfromaDHCPserverorthevSphereIPPool. (Optional)IfitrequiresastaticIPaddressoraproxy,seeConfiguringStaticIPAddressesonpage 11. Youcanchangethetimezone,ifthedefaultUTCisunacceptable.SeeSettingtheTimeZoneonpage 12. IftheURLoftheWebconsoleforappliancemanagementappearedinthewelcomescreen,youcanpoint yourWebbrowsertothisURL. LogintothemanagementWebconsoleusingthesamecredentialsthatyouwoulduseforlogintothe virtualappliance.YoumightbeaskedtoconfigureatrustrelationshipfortheselfsignedHTTPcertificate.

Configuring Static IP Addresses

Bydefault,thevirtualappliancetriestoacquireanIPaddressfromtheDHCPserverwhenitstarts.TheDHCP serverassignsanetworkaddress,allowingyoutorunthevirtualmachinewithoutsetup.Thenetworkaddress mightchangeafterthevirtualappliancehasbeenpoweredofflongerthantheDHCPleasetime.Mostserver applicationsshouldbeconfiguredtoastaticnetworkaddressthatisconstantandwellknown. YoucanconfigureastaticIPaddressfromthewelcomescreen,asdescribedhere,orfromthevirtualappliance WebconsoleasdescribedinChoosingBetweenDHCPandStaticNetworkAddressesonpage 15. DeveloperscanincorporateOVFpropertiesfornetworkingintoavirtualappliance,inwhichcasetheyare usedfornetworkconfiguration.IfyouaredeployingOVF1.0usinganIPPool,youcanconfigureastaticIP addressduringdeployment,orlaterwhenthevirtualapplianceispoweredoff. To configure a static network address from the welcome screen 1 2 3 Onthevirtualappliancewelcomescreen,selectConfigureNetworkandpressEnter. EnternoaftertheUseaDHCPserverinsteadofastaticIPaddressprompt. Typetheaddressesforthefollowing,pressingEnteraftereach:

IPAddress Netmask Gateway DNSServer1 DNSServer2 Hostname

Atthenextprompt,specifywhetherornotyouneedaproxyservertoreachtheInternet.Ifyouanswer yes,entertheIPaddressandportnumberofyourproxyserver.Forinformationabouttheproxyserver, ortosetproxyloginandpassword,seeNetworkConfigurationonpage 15. Areviewofthenetworksettingsappears.

Enteryesifthevaluesonthereviewscreenarecorrect. Ifthevaluesareincorrect,enternoandrepeattheprocedure.

VMware, Inc.

11

Users Guide to Deploying vApps and Virtual Appliances

Configuring DHCP
IfyouconfiguredthevirtualappliancewithastaticIPaddress,youcanreconfigureittouseaDHCPserver. To configure DHCP from the welcome screen 1 2 3 Onthevirtualappliancewelcomescreen,selectConfigureNetworkandpressEnter. EnteryesaftertheUseaDHCPserverinsteadofastaticIPaddressprompt. Atthenextprompt,specifywhetherornotyouneedaproxyservertoreachtheInternet.Ifyouanswer yes,entertheIPaddressandportnumberofyourproxyserver.Forinformationabouttheproxyserver, ortosetproxyloginandpassword,seeNetworkConfigurationonpage 15. Areviewofthenetworksettingsappears. 4 Enteryesifthevaluesonthereviewscreenarecorrect. Ifthevaluesareincorrect,enternoandrepeattheprocedure.

Setting the Time Zone

ThevirtualhardwareclockisalwaysmaintainedinUTC,whichthevirtualapplianceconvertstolocaltime. CorrectlocaltimeisimportantfortheupdaterepositoryandVMwarevCenterUpdateManager. Ifthevirtualappliancedeveloperincorporatedthevami.timezoneOVFproperty,andsetitcorrectly,this propertyisusedtochangethetimezone. Youcansettimezonefromthewelcomescreenasdescribedhere,orfromthevirtualapplianceWebconsole asdescribedinSettingtheTimeZoneonpage 14. To set the time zone from the welcome screen 1 2 3 Onthevirtualappliancewelcomescreen,selectSetTimezoneandpressEnter. IntheGeographicareascreen,selectyourcontinentorregionandpressEnter. IntheTimezonescreen,selectacityorareainyourtimezoneandpressEnter.

(Thesestepsmayvary.)Thetimezoneissetandthewelcomescreenappearsagain.

Virtual Appliances Based on Windows

Inmostcases,virtualappliancesbasedonWindowsServerdonothavetheautomatedfirststartcapabilities describedabove.

12

VMware, Inc.

Managing a Virtual Appliance

ThischapterdescribessoftwarediscoveryandnetworksettingsforyourvApporvirtualappliance,including thefollowingtopics:

ExploringaVirtualApplianceonpage 13 ShuttingDownorRebootingtheVirtualApplianceonpage 14 SettingtheTimeZoneonpage 14 NetworkConfigurationonpage 15 VAMIConfigurationUtilitiesonpage 16

YoucanperformmanagementoperationsfromtheWebconsolebyusingabrowsertoreachtheIPaddressor hostnameofthevApporvirtualapplianceatitsdesignatedportnumber,https://vapp.example.com:5480for example.Tologin,typetheusernameandpasswordyouset,ordocumentedbyyourapplianceprovider.

Exploring a Virtual Appliance

TheSystemtabprovidesthefollowinginformation:

VendorThenameofthecompanythatcreatedyourvirtualappliance. ApplianceNameThenameofyourappliance. ApplianceVersionTheversionnumberofyourappliance. HostnameThefullyqualifiedhostnameofyourappliance.IfastaticIPisconfiguredforthevirtual machine,thenyoucanspecifyahostname.IftheOVFvami.hostnamepropertyispresent,thehostname issetaccording.OtherwiseDNSservicemapstheIPaddressintoahostname(PTRrecord). OSNameThenameoftheoperatingsystemonwhichyourapplianceruns. OSVersionTheversionnumberoftheoperatingsystem. OVFEnvironmentIfdeployedinvSphere,showstheOVFpropertiesdefinedandconfiguredforthis virtualmachineorvApp.

Using the Command Line

Toaccessthecommandline,selectLoginattheVMwareplatformproductconsole,supplytheloginnameand passwordthatthevendorprovidedwithyourappliance.Typethevamiclicommandatthesystemprompt forausagesummary.

Thefollowingcommandshowstheversioninformationforthevirtualappliance:
vamicli version --appliance

ThefollowingcommandshowstheversionofVMwareStudiousedtobuildthevirtualappliance:
vamicli version --studio

VMware, Inc.

13

Users Guide to Deploying vApps and Virtual Appliances

Exploring vApps in the vSphere Client

YoucanalsofindinformationaboutvirtualappliancesandvAppsbyexaminingthemwiththevSphereClient. Figure 31showsseveralvApps.AvApplookssimilartoafoldercontainingvirtualmachines,exceptthatthe vAppiconshowsfoursmallbluesquaresinsteadofayellowfolder.AvAppbehaveslikeavirtualmachine, withunifiedpoweroperations,networksettings,datastores,andconfigurableresourceuse. Figure 3-1. Three vApps in a Datacenter

TheSummarytabofvSphereClientshowstheproductnameofthevApporvirtualappliance,itsversion number,andthesoftwarevendor.Storageandresourceuseappearontheright.Youcanseetheresources consumedbyaconstituentvirtualmachinebyselectingitinsteadofthevApp. Theremainderofthischapterdescribesmaintenanceoperationsandnetworksettings.

Shutting Down or Rebooting the Virtual Appliance

ClicktheSystemtabinthevirtualapplianceWebconsolethenclickInformation. OntheSystemInformationpageyouseethevirtualappliancevendor,theappliancename,applianceversion, hostname,operatingsystem,andoperatingsystemversion. ThepoweroperationbuttonsareundertheActionsheadingontherightsideofthewindow.

Torestartthevirtualappliance,clickReboot. Toshutdownthevirtualappliance,clickShutdown.

Setting the Time Zone

ThevirtualhardwareclockisalwaysmaintainedinUTC,whichthevirtualapplianceconvertstolocaltime. CorrectlocaltimeisimportantfortheupdaterepositoryandVMwarevCenterUpdateManager. Ifthevirtualappliancedeveloperincorporatedthevami.timezoneOVFproperty,andsetitcorrectly,this propertyisusedtochangethetimezone. YoucansettimezonefromthevirtualapplianceWebconsoleasdescribedhere,orfromthewelcomescreen asdescribedinSettingtheTimeZoneonpage 12.

14

VMware, Inc.

Chapter 3 Managing a Virtual Appliance

To set the time zone from the Web console 1 2 3 ClicktheSystemtabthenclicktheTimeZonepagebutton. OntheTimeZoneSettingspage,inthedropdownmenushowingtimezonesoftheworld,selectyours. ClicktheSaveSettingsbuttontomakeachange.

Network Configuration
TheNetworktabcontainssubtabsforthefollowingoperations:

StatusDisplaysnetworkstatusinformation,suchastheinterfacename,whetherDHCPwasused,the IPaddress,netmask,gatewayIPaddress,andDNSservers.YoucanclicktheRefreshbuttonunderthe Actionsheading(ontherightside)toobtainthecurrentinformation. AddressAllowsyoutospecifystaticIPinformationortoretrievetheIPsettingsfromaDHCPserver. ClickSaveSettingstoacceptchangesthatyoumadetotheIPsettings.ClickCancelChangestodiscard changes.IfyousetastaticIPaddressyoumustentervaluesinallthefollowingfields:

IPAddressIPaddressofvirtualappliance. NetmaskNetworkmaskforthevirtualappliance. GatewayIPaddressofthegateway(networkrouter). PreferredDNSServerIPaddressoftheprimaryDNSserver. AlternateDNSServerIPaddressofthesecondaryDNSserver. HostnameHostnameofthevirtualappliance

ProxyAllowsyoutospecifyaproxyserverandportforaccessingexternalnetworks(forexample,the wideareaInternet).ClickSaveSettingstoacceptchangesthatyoumaketotheproxysettings.Click CancelChangestodiscardchanges.SelectthecheckboxnexttoUseaProxyServer,toentervaluesinthe followingfields:

ProxyServerHostnameorIPaddressfortheproxyserver. ProxyPortProxyservercommunicationsport. ProxyUsernameAvalidusername,iftheproxyserverrequiresauthentication. ProxyPasswordThevalidpassword,iftheproxyserverrequiresauthentication.

Setting a Proxy Server

DeveloperscanconfigureavirtualappliancetocheckarepositoryWebsiteforsoftwareupdates.Usuallythis siteisontheexternalInternet.Ifyourorganizationhasconfiguredthenetworktodisallowaccessoutsideof yourlocalareanetwork,youmightneedtospecifyaproxyserver.Thisisaserverthroughwhichallexternal networktrafficflows,preventingcertaintypesofconnections.YourITdepartmentcanprovideyouwiththe proxyservernameandportnumbertoaccessexternalnetworks.

Choosing Between DHCP and Static Network Addresses

DynamicHostConfigurationProtocol(DHCP)isamethodofdynamicallyallocatingIPaddresses(andother attributes)tocomputersonalocalareanetwork. Whenstarted,yourvirtualapplianceattemptstofindaDHCPserver.Ifitdoes,itaskstheDHCPserverto assignatemporarynetworkaddress.Thisallowsyoutorunthevirtualappliancewithminimalsetup. Howeverthetemporaryaddressmightchangeifyouleavethevirtualappliancepoweredoffforawhile,and poweritonagainaftertheDHCPleasehasexpired. Mostserverappliancesshouldbeconfiguredtoastaticnetworkaddressthatremainsconstantwheneverthe virtualapplianceisrestartedormovedtoadifferentsubnet.Thisallowsotherusersofthevirtualappliance tobeawareofitsnetworkaddress(andassociatedhostname)whentheyconnecttoit.

VMware, Inc.

15

Users Guide to Deploying vApps and Virtual Appliances

Firewall Security
YoumightneedtorequestthatyourITdepartmentchangefirewallsettingsifyouhavereasontoaccessthe WebconsoleofyourvApporvirtualappliancethroughthefirewall. ThefollowingportsusedbyyourvApporvirtualapplianceshouldbeexemptedfromthefirewall:

5480/TCPincomingUsedforWebbrowseraccesstotheVAMIagent,whichservestheWebconsole. Developerscanchangethisportinthebuildprofile.Iftheydidchangetheportnumber,theyshouldhave documentedthechange,soyoucancustomizefirewallrulesforyourvApporvirtualappliance. 5488/TCPincomingand5489/TCPincomingUsedforcommunicationbetweenlighttpdandSFCBin VAMI,andforUpdateManager.SFCBportsforVAMIservicesarerelocatedto5488/TCPand5489/TCP, sothedefaultports(5988/TCPand5989/TCP)remainavailableforusebyindependentsoftwarevendors andhardwareappliancevendors.

Troubleshooting
Ifsomethinggoeswrongwithyourvirtualappliance,supportpersonnelmightaskforyourassistancein diagnosingtheproblem.VMwareStudioprovidesthevamisupportscript,whichassembleslogfilesintoa tarballfortroubleshooting.Thescriptisat/opt/vmware/bin/vamisupportonyourvirtualappliance. Whenreportingaproblem,youcanrunthevamisupportscript,whichtellsyouwhereitiswritingoutput. Thenscp(securecopy)thetarballtoacomputerwithemailservice,andsendittosupport.

VAMI Configuration Utilities

Figure 32showstheflowofconfigurationoptionsforaVAMIbasedvirtualappliance. Figure 3-2. Virtual Appliance Configuration Flowchart
Login Execute Login program

yes Configure Network DHCP? Proxy?

yes

Proxy Server? Proxy Port?

no

no yes Correct? Exit

IP Address? Netmask? Gateway? DNS Server1? DNS Server2?

Set Timezone

Execute TZconfig program

16

VMware, Inc.

Updating a Virtual Appliance

Thischapterprovidesinformationaboutupdatingavirtualappliance,andincludesthefollowingtopics:

TypesofUpdatesonpage 17 UpdateTabStatusandSettingsonpage 17 SettingUpdatePoliciesonpage 18

Types of Updates
Adeployedvirtualappliancecanbeupdatedwithpackagespublishedbyitsdeveloper.Updatescanbedone overtheexternalWeb,onyourlocalareanetwork,orfromCDROM. Toconservenetworkbandwidth,virtualapplianceupdatesareappliedonlytopackagesthathavechanged. Updatesmayapplytotheoperatingsystem,applicationswithinthevirtualappliance,VMwareTools,orthe VMwareApplianceManagementInfrastructure(VAMI). Ifthevendorhasdigitallysignedavirtualappliance,theSSLsignatureisverifiedbeforeupdatecanproceed.

Update Tab Status and Settings

TheUpdatetabappearsintheWebconsoleifanupdaterepositorywasspecifiedduringthevirtualappliance buildprocess.IftheUpdatetabismissing,contactyourISVforupdatesorpatchestoyourvirtualappliance. YoucanaccessupdatestatusandsettingsforthevirtualapplianceontheUpdatetab,whichhastwosubtabs:

StatusProvidesinformationaboutthevirtualappliancevendor,name,andversion. SettingsShowsthesettingofpoliciesforperiodicallycheckingandinstallingupdates.

Checking Version Status

OntheStatussubtabappearsvirtualapplianceinformation,suchasvendorandversion.Youcancheckfor updatesandinstallavailableupdatesasdescribedhere,withtheCLI,orwithvCenterServer,asdescribedin Chapter 5,ManagingVirtualApplianceswithvCenterServer,onpage 19. Toviewinformationaboutavirtualappliance,clicktheStatussubtabontheUpdatetab.

VendorThenameofthecompanythatcreatedthevirtualappliance. ApplianceNameThenameofthevirtualappliance. ApplianceVersionTheversioninformationofthevirtualappliance. AvailableUpdatesIfanupdateisavailable,givesthenameandversionoftheproduct. LastCheckIfacheckforupdatewasperformed,thedateandtimewhenthevirtualappliancewas checked,inUTC(GMT)withlocaltimeoffset. LastInstallIfanupdatewasinstalled,thedateandtimewhenthevirtualappliancewasupdated.

VMware, Inc.

17

Users Guide to Deploying vApps and Virtual Appliances

Installing Available Updates

Tocheckforupdates,undertheActionssectionclickCheckUpdates.Thevirtualapplianceconnectstothe updaterepositoryandchecksforavailableupdates.UpdatesappearintheAvailableUpdatespane. Toinstallanupdate,clickInstallUpdates.

Setting Update Policies

Youcanspecifywhetherthevirtualappliancechecksforupdatesandhowoften.Tosetupdatepoliciesforthe virtualappliancefromtheWebconsole,clickUpdate>Settings.Youcanselectoneofthefollowingpolicies forupdatingthevirtualappliance:

NoautomaticupdatesThevirtualappliancedoesnotcheckforandinstallupdates.Thisisprobablythe default,unlessthedeveloperchangedit. AutomaticcheckforupdatesThevirtualappliancechecksforupdatesatthescheduledtime.Ifan updateisavailable,itappearsontheUpdateStatuspage. AutomaticcheckandinstallupdatesThevirtualappliancechecksforupdatesatthescheduledtime, andifoneisavailable,installsit.

IfyouselecteitherAutomaticcheckforupdatesorAutomaticcheckandinstallupdates,youcanconfigure thescheduling.Bydefault,thecheckoccursdailyat03:00localtime,asdeterminedbyyourtimezonesetting. To change the frequency or time of update checking 1 2 3 ClickoneoftheAutomaticcheckbuttons. Specifythefrequency(dailyorweekly),orselectthehouratwhichtocheck. ClickSaveSettings.

Setting Update Source

YoucanchoosetoupdatefromaCDROM,orfromanalternateupdaterepositoryURL.ThedefaultistheURL thattheISVconfigured,whichusuallydesignatesapublicWebsiteontheInternet.Youmightneedtochange theupdatesourceorlocationifyouareinsidearestrictedlocalareanetwork. To change the update repository location 1 Clickoneofthechoices,UseCDROMUpdatesorUseSpecifiedRepository.

IfyouselectUseCDROMUpdates,inserttheupdateCDROMintoadrivethatthevirtualappliance canread.TheupdateagentscanstheCDdrivestofindthefirstupdateCDROM. IfyouselectUseSpecifiedRepository,typetheURLoftheupdaterepositorythatyourappliance shouldcheck.IftheURLrequiresauthentication,provideavalidusernameandpassword.

ClickSaveSettings.

IfyouleaveUseDefaultRepositoryselected(thedefault),theupdateagentusuallychecksapublicURLon theInternet,sobesuretosettheproxyserverifrequired.

Using the Command Line for Updates

Usethefollowingcommandtocheckforupdatestothevirtualappliance:
vamicli update --check

Usethefollowingcommandtodownloadandinstallthelatestupdatesforthevirtualappliance:
vamicli update --install latest

18

VMware, Inc.

Managing Virtual Appliances with vCenter Server

Thischaptercontainsthefollowingtopics:

RequirementsforUpdateManageronpage 19 VirtualApplianceBaselinesonpage 20 ScanningVirtualAppliancesonpage 21 RemediatingVirtualAppliancesonpage 23

ItisnotnecessarytomanagevirtualapplianceswithvCenterServerandVMwarevCenterUpdateManager, butdoingsoprovidescentralizedmanagementofmultiplevAppsandvirtualappliances.Forinformation aboutbaselinesandcompliancechecks,seetheVMwarevCenterUpdateManagerAdministrationGuideonthe VMwareWebsite. TheUpdateManagermoduleconsistsofaplugincomponentthatrunsonthevSphereClient,andaserver component,whichyoucaninstallonthesamecomputerasvCenterServeroronadifferentcomputer.

Requirements for Update Manager

UpdateManagerintegrateswithVMwareStudiosupdateservicetoenablecentralizedmanagementofvirtual applianceupdates.BeginningwithUpdateManager1.0update2youcanmanagethevirtualappliancesthat youimportinyourvCenterServer.UpdateManager4.0andlaterprovidedefaultvirtualapplianceupgrade baselinestoscanandupgradeavirtualappliancetothelatestreleasedorcriticalupdateversion. UpdateManageralsoletsyoucreatecustomvirtualapplianceupgradebaselines.Similarstatementsaretrue fortheupdatingofvApps.IntheUpdateManager4.0documentation,vAppsaretreatedascontainerobjects holdingvirtualmachinesorvirtualappliances.ForinformationaboutUpdateManager4.0andlater,seethe documentationathttp://www.vmware.com/support/pubs/vum_pubs.html. ThefollowingconditionsapplytoupdatingvirtualapplianceswithUpdateManager:

YoumustregisteranUpdateManagerserverinstancewiththevCenterServersystemintowhichyou importthevirtualappliance.YoumustalsoinstalltheUpdateManagerpluginonthevSphereClient.For moreinformation,seetheVMwarevCenterUpdateManagerAdministrationGuide. AllvirtualappliancesmusthaveanInternetconnection(directorproxied)fordiscovery,scanning,and remediationoperations. IfvirtualappliancesaccesstheInternetthroughaproxy,theproxyservermustbesetonvirtualappliances asdescribedinNetworkConfigurationonpage 15. Offlineandsuspendedvirtualappliancescannotbescannedorremediated.

AfteryouimportaVMwareStudiovirtualapplianceusingthevSphereClientandpoweritonforthefirst time,itisdiscoveredasavirtualappliance.Tosimplifymanagement,VMwarerecommendsthatyouimport virtualappliancesintoaseparatefolderunderVirtualMachinesandTemplatesinvCenterServer.

VMware, Inc.

19

Users Guide to Deploying vApps and Virtual Appliances

Virtual Appliance Baselines

UpdateManagerincludesdefaultvirtualappliancebaselinesthatyoucanusetoscanthevirtualappliancesto determinewhethertheyareupgradedtothelatestreleasedorthelatestcriticalversion.Youcanalsoscanthe virtualappliancesagainstcustomvirtualapplianceupgradebaselinesthatyoucancreatefromtheUpdate ManagerAdministrationview.

Creating Virtual Appliance Upgrade Baselines

Avirtualapplianceupgradebaselinecontainsasetofpatchestotheoperatingsystemoftheapplianceandto theapplicationsinstalledinthevirtualappliance.Thevirtualappliancevendorconsidersthesepatchesan upgrade.Virtualappliancebaselinesthatyoucreateconsistofasetofuserdefinedrules.Ifyouaddrulesthat conflict,UpdateManagerdisplaysanUpgradeRuleConflictwindowsothatyoucanresolvetheconflicts. Tocreateavirtualapplianceupgradebaseline: 1 2 ConnectthevSphereClienttoavCenterServersystemwithwhichUpdateManagerisregistered,and clickUpdateManagerunderSolutionsandApplicationsontheHomepage. OntheBaselinesandGroupstab,clickCreateabovetheBaselinespane. TheNewBaselinewizardopens. 3 4 UnderBaselineType,selectVAUpgradeandclickNext. SelectVendorandApplianceoptionsfromthedropdownmenu. Theoptionslistedinthesemenusdependonthevirtualappliancesinyourinventory.Ifthereareno virtualappliancesinyourvSphereinventory,theoptionsareAllVendorsandAllProducts,respectively. 5 SelectanoptionfromtheUpgradeTodropdownmenu.Theoptionsare:

LatestUpgradesthevirtualappliancetothelatestversion. DontUpgradeDoesnotupgradethevirtualappliance.

6 7

ClickAddRule. (Optional)Addmultiplerules. a b c d OntheUpgradeOptionspageoftheNewBaselinewizard,clickAddMultipleRules. Selectoneormorevendors. Selectoneormoreappliances. SelectoneUpgradeTooptiontoapplytotheselectedappliances,andclickOK.

Ifyoucreatemultiplerulestoapplytothesamevirtualappliance,onlythefirstapplicableruleinthelist isappliedforremediation. 8 (Optional)Resolveanyconflictswithintherulesyouapply. a b 9 IntheUpgradeRuleConflictwindow,selectwhethertokeeptheexistingrules,tousethenewly createdrules,ortomanuallyresolvetheconflict. ClickOK.

ClickNext.

10 ReviewtheReadytoCompletepageandclickFinish. ThevirtualapplianceupgradebaselineisdisplayedintheBaselinespaneoftheBaselinesandGroupstab.

Attaching Virtual Appliance Upgrade Baselines

Toviewcomplianceinformationandremediatethevirtualappliancesintheinventoryagainstspecific baselines,youmustfirstattachexistingbaselinestothesevirtualappliances.Youcanattachbaselinestoobjects fromtheUpdateManagerClientComplianceview.
20 VMware, Inc.

Chapter 5 Managing Virtual Appliances with vCenter Server

Althoughyoucanattachbaselinestoindividualobjects,itismoreefficienttoattachthemtocontainerobjects, suchasfolders,vApps,anddatacenters.Attachingabaselinetoacontainerobjecttransitivelyattachesthe baselinetoallvirtualappliancesinthecontainer. Toattachavirtualapplianceupgradebaseline: 1 2 3 4 5 6 ConnectthevSphereClienttoavCenterServersystemwithwhichUpdateManagerisregistered,and selectHome>Inventory>VMsandTemplates. Selecttheobjectcontainingthevirtualappliances,andclicktheUpdateManagertab. ClickAttachintheupperrightcorner. IntheAttachBaselineorGroupwindow,selectoneormorebaselinestoattachtotheobject. (Optional)ClicktheCreateBaselinelinktocreateabaselinegrouporabaselineandfinishthewizard. ClickAttach.

ThebaselinesandbaselinegroupsthatyouselectedtoattacharedisplayedintheAttachedBaselineGroups andAttachedBaselinespanesoftheUpdateManagertab.

Scanning Virtual Appliances

Scanningistheprocessinwhichattributesofasetofvirtualappliancesareevaluatedagainsttheupgradesin thebaselinesattachedtothevirtualappliances.Youcanscanvirtualappliancesagainstattachedbaselinesto receivecomplianceinformationaboutvirtualappliancesbeforeupgradingthem. YoucansetUpdateManagertoscanvirtualappliancesasascheduledtask,oryoucanmanuallybeginascan.

Doing a Manual Scan

Tomanuallyscanavirtualappliance: 1 2 3 4 5 6 ConnectthevSphereClienttothevCenterServersystemwhereyouimportedthevirtualappliance. ClickInventoryandthenclickVMsandTemplates. Clickthefolderwhereyouimportedthevirtualappliance. Intheleftpane,rightclickthevirtualapplianceandthenclickScanforUpdates. SelectVirtualApplianceupgrades. ClickScan.

Scheduling a Scan
Youcanschedulescansforallvirtualappliancesinafolder.Toschedulescansforvirtualappliances: 1 2 3 4 5 6 7 8 9 ConnectthevSphereClienttothevCenterServersystemwhereyouimportedthevirtualappliance. ClickScheduledTasksontheHomepage. ClickNewinthetoolbartoopentheScheduleTaskdialogbox. Fromthedropdownmenu,selectScanforUpdatesandclickOK. Choosetoscheduleascanforvirtualmachinesandvirtualappliances,andclickNext. Intheinventorytree,selectthevirtualappliancestobescanned,andclickNext. Choosetoscanforvirtualapplianceupgrades. Enterthetasknameandthetaskdescription,scheduleatimetorunthetask,andclickNext. (Optional)SpecifyoneormoreemailaddressestoreceivetheresultsandclickNext.Youmustconfigure mailsettingsforthevCenterServersystemtoenablethisoption.

10 Reviewthesummaryinformationforthetasktobecompleted,andclickFinish.
VMware, Inc. 21

Users Guide to Deploying vApps and Virtual Appliances

Viewing Scan Results

WithUpdateManager,youcanquicklycheckhowvirtualappliancescomplywithbaselines.Youcanreview complianceeitherbyexaminingtheresultsforasinglevirtualapplianceorbyreviewingtheresultsfora specificgroupingofvirtualappliances.SupportedgroupingsincludeVMwarevSpherecontainerobjectssuch asfolders,clusters,anddatacenters. ComplianceinformationisavailableontheUpdateManagertabinthevSphereClient.Forvirtualappliances, youcanviewcomplianceintheVirtualMachinesandTemplatesview. Baselinesinteractwithvirtualappliancesinthefollowingways:

Ifauserlackspermissionstoviewavirtualappliance,theresultsofthosescansarenotdisplayed. Compliancewithbaselinesisassessedatthetimeofviewing.Toensurethatallinformationiscurrent,a briefpausemightoccurwhileinformationisgatheredaboutavirtualappliancescompliance. Onlyinformationaboutcompliancewithrelevantbaselinesisprovided.Forexample,ifabaselineisnot attachedtothecontainerinquestion,complianceisnotassessed. Compliancestatusisdisplayedbasedonpermissions.Userswithpermissiontoviewacontainer,butnot allofthecontainerscontents,canseetheaggregatecomplianceofallentitiesunderthatcontainer. However,theindividualcountsforcompliant,noncompliant,andunknownentitiesappearonlyasuser permissionsallow.Toviewthecompliancestatus,usersalsomusthavepermissiontoviewthebaseline orsoftwareupdatecompliancestatusforanobjectintheinventory.

IMPORTANTAlthoughyoucanattachbaselinesandbaselinegroupstoindividualobjects,itismoreefficient toattachthemtocontainerobjects,suchasfoldersanddatacenters.Attachingabaselinetoacontainerobject transitivelyattachesthebaselinetoallobjectsinthecontainer.

Reviewing Scan Results for Virtual Appliances Contained in a vSphere Object

WhenscansarecompletedonallmachinescontainedwithinaVMwarevSphereobject,theresultsare displayedinasummary.Informationthatisdisplayedexplainsthedegreeofconformancewithbaselines, ratherthanthedetails.Thefollowinginformationisincluded:

Whenthelastscanwascompletedatthislevel Totalnumberofcompliantandnoncompliantupdates Foreachbaseline,thenumberofvirtualappliancesthatarecompliantornoncompliant Foreachbaseline,thenumberofpatchesthatarenotapplicabletoaparticularvirtualappliance

Whenyouselectacontainerobject,youviewtheoverallcompliancestatusoftheattachedbaselines,aswell asstatusforalltheindividualcompliances.Ifyouselectanindividualbaselineattachedtothecontainerobject, youseethecompliancestatusofthebaseline. Ifyouselectanindividualvirtualappliance,youseetheoverallcompliancestatusoftheselectedappliance againstallattachedbaselinesandthenumberofupgrades.Ifyoufurtherselectanindividualbaselineattached tothisobject,youseethenumberofupgradesgroupedbythecompliancestatusforthatbaseline. Toviewscanresultsforvirtualappliances: 1 2 3 4 ConnectthevSphereClienttothevCenterServersystemwhereyouimportedthevirtualappliance. ClickInventoryandclickVMsandTemplates. Clicktheobjectforwhichyouwanttoviewthescanresults. ClicktheUpdateManagertab.

Theresultsforscanscompletedonvirtualappliancesinthatcontainerappearontheright.

22

VMware, Inc.

Chapter 5 Managing Virtual Appliances with vCenter Server

Reviewing Scan Results for an Individual Virtual Appliance

Scanresultsprovideinformationaboutthedegreeofcompliancewiththeattachedbaselines.Youcanview informationonindividualappliancesandreceivedetailedinformationabouttheupgradesthatareincluded inabaseline. Toviewtheresultsforanindividualvirtualappliance: 1 2 3 4 5 ConnectthevSphereClienttothevCenterServersystemwhereyouimportedthevirtualappliance. ClickInventoryandclickVMsandTemplates. Selectanindividualvirtualappliance. ClicktheUpdateManagertab. Selectabaselinegrouporbaseline.Forexample,selectAllGroupsandIndependentBaselinesinthe AttachedBaselineGroupspaneandAllintheAttachedBaselinespanetoviewtheoverallcomplianceof allattachedbaselinesandbaselinegroups. IntheCompliancepane,selecttheAllApplicablecompliancestatustoviewtheoverallcompliancestatus oftheselectedappliance.Theselectedappliancetogetherwiththenumberofupgradesappearinthe bottompaneoftheUpdateManagertab. ClickthelinkintheUpgradescolumninthebottompaneoftheUpdateManagertab.Thelinkindicates thenumberofupgradesintheselectedcompliancestate.TheUpgradeDetailswindowappears,showing theinformationinTable 51. Table 5-1. Upgrade Details window
Option Vendor Product Version Compliance Severity ReleaseDate Description Vendoroftheupgrade. Productinstalledonthevirtualappliance,forexampleguestoperatingsystem. Targetversionoftheproduct. Compliancestatusofthevirtualappliance Severityoftheupgrade. Releasedateoftheupgrade.

Remediating Virtual Appliances

Updatesforavirtualappliancearedownloadedbyautomaticupdates(seeSettingUpdatePolicieson page 18),orbythevirtualapplianceduringtheremediationprocess.UpdateManagercontrolsonlywhenand whattodownload.ThedownloadURLissetbytheISVprovidingthevirtualappliance. Todownloadtheupdatesforvirtualappliances,UpdateManagerusesthefollowingapproach: 1 2 UpdateManagerscansthevirtualappliancestoreturnproductandvendorinformation,information aboutthecurrentversion,andmissingupdates. UpdateManagerdirectsthevirtualappliancestodownloadthemissingupdates.UpdateManager controlstheremediationprocessofwhenandhowtoremediate,butthevirtualappliancedownloadsand installstheupdatesitself.

Afterremediation,youmustrebootthevirtualapplianceiftheupdatepackagesaysthatitrequiresreboot. VirtualapplianceshavetheirownWebUIforselfmanagedupdatemode.Iftheautoinstallupdatesoptionis turnedoninavirtualappliance,UpdateManagerrunsreportingmodeagainstit.ThismeansthatUpdate Managerscansthevirtualappliance,butskipsremediation,soremediationfailswithaneventindicatingthe reason.(SeetheTroubleshootingchapteroftheVMwarevCenterUpdateManagerAdministrationGuide.) Youcanremediatevirtualappliancesmanually,orschedulearemediationprocess.Thetwoaresimilar,except thatyouspecifyatimeforscheduledremediation.

VMware, Inc.

23

Users Guide to Deploying vApps and Virtual Appliances

Toremediateavirtualappliance: 1 2 3 ConnectthevSphereClienttothevCenterServersystemwhereyouimportedthevirtualappliances. OntheHomepageselectVMsandTemplatesandclicktheUpdateManagertab. RightclickanobjectfromtheinventoryandselectRemediate. Allvirtualappliancesundertheselectedobjectarealsoremediated. 4 5 6 7 8 OntheRemediationSelectionpageoftheRemediatewizard,selectthebaselinestoapply. SelectthevirtualappliancesthatyouwanttoremediateandclickNext. OntheSchedulepage,enteraname,andoptionally,adescriptionforthetask. SelectImmediatelytobegintheremediationprocessrightafteryoucompletethewizard,orenterspecific timesforpoweredon,poweredoff,orsuspendedvirtualappliances. (Optional)SpecifytherollbackoptionsandclickNext. a OntheRollbackOptionspageoftheRemediatewizard,selectSnapshotthevirtualmachinesbefore remediationtoenablerollback. Asnapshotofthevirtualmachineorvirtualapplianceistakenbeforeremediation.Ifthevirtual applianceneedstorollback,youcanreverttothissnapshot. b c d 9 Specifywhenthesnapshotshouldbedeleted,orselectDontdeletesnapshots. Enteranameandoptionallyadescriptionforthesnapshot. (Optional)SelectthecheckboxSnapshotthememoryforthevirtualmachine.

ReviewtheReadytoCompletepage,andclickFinish.

Virtual Appliance Recognition

Whenacorrectlyinstalledorremediatedvirtualapplianceisfirstpoweredon,thevCenterServershould discoverit(recognizeit)asavirtualappliance.Yourremediatedvirtualapplianceisthenreadytouse.

24

VMware, Inc.

Appendix

Thisappendixcontainsthefollowingsections:

VMwarePlatformProductsforOVFandOVAonpage 25 CompatibilityforVirtualAppliancesandvAppsonpage 25.

VMware Platform Products for OVF and OVA

ThefollowingshortcodesrepresentvariousVMwareplatformproductsintablesTable A1andTable A2.

vSphere4ManagedVMwarevSphere4deployedasavCenterServer4managedenvironmentwith ESX/ESXi4.x(andpossiblyESX/ESXi3.5)hosts. vSphere4StandaloneVMwarevSphere4deployedasastandaloneESX/ESXi4.xhost. VI3.5ManagedVMwareInfrastructure3.5deployedasaVirtualCenter2.5managedenvironment withESX/ESXi3.5hosts. VI3.5StandaloneVMwareInfrastructure3.5deployedasastandaloneESX/ESXi3.5host. VI3AnypermutationofVMwareInfrastructure3.0. Workstation6.5.1+VMwareWorkstation6.5.1andlater(whichaddssomeOVFsupport). VHPVMwarehostedclassplatformproducts(Workstation,Player,Server,ACE,andFusion).

Compatibility for Virtual Appliances and vApps

Table A1showsplatformproductcompatibilityforvirtualapplianceswithonevirtualmachine. Table A-1. Compatibility of a Single-VM Virtual Appliance
Target vSphere4Managed vSphere4Standalone VI3.5Managed VI3.5Standalone VI3 Workstation6.5.1+ VHP ZIP Conv. Conv. Conv. Conv. Conv. YES YES OVF 0.9 Draft YES YES* YES* YES* Conv. YES* Conv. OVF 1.0 YES YES* Conv. Conv. Conv. Conv. Conv. OVF 1.0 OVA YES YES* Conv. Conv. Conv. Conv. Conv.

YESNoaddedconversionstepsarenecessary;importsusingtheproductalone. YES*SimilartoYES,butconversionmaydiscardcertainOVFmetadatapostimport. Conv.Notdirectly,buttheendconsumercanconvertwithaddedstepsandsacrificeofcertainmetadata.

VMware, Inc.

25

Users Guide to Deploying vApps and Virtual Appliances

Table A2showsplatformproductcompatibilityforavAppcontainingoneormorevirtualmachines. Table A-2. Compatibility of a Single-VM or Multiple-VM vApp

Target vSphere4Managed vSphere4Standalone VI3.5Managed VI3/5Standalone VI3 Workstation6.5.1+ VHP ZIP N/A N/A N/A N/A N/A N/A N/A OVF 0.9 Draft N/A N/A N/A N/A N/A N/A N/A OVF 1.0 YES NO NO NO NO NO NO OVF 1.0 OVA YES NO NO NO NO NO NO

YESNoaddedconversionstepsarenecessary;importsusingtheproductalone. YES*SimilartoYES,butconversionmaydiscardcertainOVFmetadatapostimport. Conv.Notdirectly,buttheendconsumercanconvertwithaddedstepsandsacrificeofcertainmetadata. N/AThisdeliverabletypeisnotcompatiblewiththedesiredconstruct(singleVMversusvApp). NONotpossible,orrequiredmetadataconstructscannotbeconverted.

26

VMware, Inc.

Index

A
appliance vendor, ISV or HAV 8

J
JeOS, just enough operating system 8

B
browser support in VMware Studio 9

N
netmask for static IP address 11, 15 Network tab Address > Alternate DNS Server 15 Address > Gateway 15 Address > Hostname 15 Address > IP Address 15 Address > Netmask 15 Address > Preferred DNS Server 15 DHCP default, not static IP 15 Proxy > Proxy Port 15 Proxy > Proxy Server 15 Proxy > Proxy User 15 Status 15

C
CIM standard and the DMTF 8 command-line interface, vamicli 13, 18 compatible platforms for a vApp 26 compatible platforms for a virtual appliance 25

D
definition of application in a virtual appliance 8 VAMI 8 vApp 7 virtual appliance 7 VMware Studio 7 DHCP configuration of IP address and DNS 12 distribution format OVA 9, 10 OVF 0.9 or 1.0 9, 10 ZIP 9, 10 DNS servers without DHCP 11, 15 dynamic IP address and DHCP 12

O
Open Virtualization Format (OVF) 7 OVA distribution format 9, 10 OVF 0.9 or 1.0 distribution format 9, 10 OVF versions and VMware platform products 25

P
powering on a virtual appliance 11 proxy server for external network access 15

E
ESX/ESXi versions supported by VMware Studio 9

R
Reboot button in System tab 14

F
firewall security exempted ports 16 incoming TCP port 5480 16 incoming TCP ports 5488 and 5489 16 proxy server 15 flow of configuration for VAMI 16

S
security firewall 16 login password 13 self-signed HTTP certificate 11 SSL digital signature 17 Shutdown button in System tab 14 SSL digital signature 17 static IP address and netmask 11 supported VMware platform products 9, 25 supported Web browsers 9 System tab Appliance Name 13 Appliance Version 13 Hostname 13 OS Name 13
27

G
gateway (router) for static IP address 11, 15 Greenwich mean time (GMT) See UTC

H
host name for static IP address 11, 15

I
IP Pool and OVF networking properties 10, 11

VMware, Inc.

Users Guide to Deploying vApps and Virtual Appliances

OS Version 13 OVF Environment 13 Reboot button 14 Shutdown button 14 Time Zone page 15 Vendor 13

W
Web browsers supported 9 Web console for VMware Studio 8

Z
ZIP distribution format 9, 10

T
technical support resources 6 Time Zone page in System tab 15 time zone, setting or changing 12, 14

U
Update tab Actions > Check Updates 18 Actions > Install Updates 18 Settings > Automatic check and install updates 18 Settings > Automatic check for updates 18 Settings > No automatic updates 18 Status > Appliance Name 17 Status > Appliance Version 17 Status > Available Updates 17 Status > Last Check 17 Status > Last Install 17 Status > Vendor 17 updates from local repository URL 18 updates from mounted CDROM 18 Use Default Repository update default 18 UTC, universal coordinated time 11, 12, 14, 17

V
VAMI, virtual appliance management infrastructure 7, 8, 16 vami.timezone OVF property 12, 14 vamicli command 13, 18 vamisupport script 16 vApp, definition 7 vApps in the vSphere Client, pictured 14 vCenter Server (formerly VirtualCenter) 8, 10, 17, 1924 VI Client, virtual appliance import 10 virtual appliance power-on 11 virtual appliance, definition 7 VMware platform products supported 9 VMware Tools 8 VMware vCenter Update Manager 7, 12, 14, 16, 19 baselines for virtual appliance updates 20 remediating a virtual appliance 23 scanning a virtual appliance 21 scheduling a virtual appliance scan 21 viewing a virtual appliance scan 22 vSphere Client, deploy OVF template 10

28

VMware, Inc.