topic Re: unauthorized kernel modules loaded in memory in VMware PowerCLI Discussions

unauthorized kernel modules loaded in memory

SCharchouf — Fri, 20 Nov 2020 09:48:25 GMT

I'm trying to get unauthorized kernel modules loaded in memory, I'm using the script below, unfortunately it's not working

Foreach ($VMHost in Get-VMHost ) {

$ESXCli = Get-EsxCli -VMHost $VMHost -V2
$ESXCli.system.module.list.invoke() | ForEach-Object {
$ESXCli.system.module.get.invoke($_.Name) | Select-Object @{N="VMHost";E={$VMHost}}, Module, License, Modulefile, Version, SignedStatus, SignatureDigest, SignatureFingerPrint } }

Re: unauthorized kernel modules loaded in memory

LucD — Fri, 20 Nov 2020 10:57:58 GMT

I read that incorrectly.
You are trying to list unauthorized modules. Correct?

And what specifically is not working?

Re: unauthorized kernel modules loaded in memory

LucD — Fri, 20 Nov 2020 11:36:39 GMT

Ok, just looked closer at your script.
You have to provide the parameter to the get command in a hash table.
Like this

Foreach ($VMHost in Get-VMHost ) { $ESXCli = Get-EsxCli -VMHost $VMHost -V2 $ESXCli.system.module.list.Invoke() | ForEach-Object { $ESXCli.system.module.get.Invoke(@{module=$_.Name}) | Select-Object @{N="VMHost";E={$VMHost}}, Module, License, Modulefile, Version, SignedStatus, SignatureDigest, SignatureFingerPrint } }

Re: unauthorized kernel modules loaded in memory

SCharchouf — Fri, 20 Nov 2020 13:33:00 GMT

Thank LucD it's OK

by the way do you know what mean if the Module is unsigned despite that the image used is the one from HPE: a Customized Image?

Re: unauthorized kernel modules loaded in memory

LucD — Fri, 20 Nov 2020 14:13:24 GMT

Unsigned means there is no digital signature on the module.