All TKB Articles in Digital Workspace

Download installer from: http://www.vmware.com/go/download-vmrc Tested with VMware Remote Console 10.0.3 Included "VMRC_Defaults" Predefined Settings disables update check on startup, disables customer experience improvement program, and disables hints.

Hello, everyone~ This is my first time asking help here on VMTN. I would like to appreciate in advance. Our View environment is as follows: View Agent: 6.2.6 View Client : 4.5 (mainly) Guest Client Windows : Windows 10 2016 LTSB (14393.2396) Pool type : Floating(Stateless) Server : Dell Blade PowerEdge M630 Storage : NETAPP_AFF8080EX (Unified type servicing SAN Volumes for VMs and NAS for Persona Repository via 10G ethernet altogether) We have operated "Persona Management" to provide minimum conveniences such as bookmark on IE and private certificate working on Windows uniquely in Korea with stateless VMs. Thus, the folder size of each individual is tiny, less than 5 MB. However, the total number of the profile folders (I mean users) is huge, about 7,000. Before we deployed, we studied the best practice guide, VMware-View-Persona-Management-Deployment-Guide.pdf provided by VMware as always. According to the System Requirements and Recommended Hardware section of the document on page 5, it reads Persona Management has no system requirements beyond those for VMware View itself. However, VMware recommends particular configurations for servers, network speed, and file server memory to provide you with the best performance for Persona Management of user profiles. VMware recommends the following infrastructure for a View implementation with Persona Management enabled: • Servers: One or more file servers, each one storing profiles for approximately 1000 users. If a virtual machine is used as a file server, the volume storing the profiles works optimally if striped across four virtual disks, each with its own SCSI controller. A file server on a physical system works best in a similar configuration. Consult your SCSI controller documentation regarding the supported maximum number of concurrent commands. • Network speed: At least 1Gbps between the desktops and the file servers. • RAM on each file server: 8GB Your own results may vary, depending upon: • Your storage capability • Your network speed and latency • Number of users • The frequency that users access data in the user profiles • Storage • IOPS We asked the Netapp storage technician to provide 11 NAS repositories (or share mounting points) based on our 11 desktop pools accordingly to scatter the traffic, which was an effort to make sure to meet the recommendation even though we had only one NetApp storage with 2 storage controller units, a high end all flash unified product until a couple of years ago. My first question is whether it will be okay to build a huge repository to service all the 7,000 users sufficiently rather than the smaller repositories broken down as it is now because the number and size of synced files are seemingly small. The main reason why for this needs is that many of the users are likely to move from one pool to another on a regular basis, which means we have to migrate the profile folders to the designated repository as well manually. It does not matter to create a windows NAS VM with gigantic spec such as 16 cores and 64 RAM to meet the required resource. Secondly, we are experiencing frequent log-in problems by random users after we switched from windows 7 64 bit sp1 to Windows 10 32 bit for some reasons. I believe we did not experience the same problems back then. The GSS said Persona with View 6 does not support windows 10 officially, however, I cannot agree on it because the KB mentions the stand-alone persona, not the one included in view agent itself and view 6.2.x release notes keep mentioning Windows 10 along with Persona Management as well. In fact, it works overall, but does not work randomly and frequently with a few users, roughly tens out of thousands. It is a headache!! That is why we are even considering to return to the old Windows 7. https://docs.vmware.com/en/VMware-Horizon-6/6.2/com.vmware.horizon-view.installation.doc/GUID-3C199DB1-F154-40D8-9B1B-CD788CC31918.html https://kb.vmware.com/s/article/2150305 Here is the screenshot of a troubled VM along with windows event viewer below albeit in Korean. The blue warning message reads roughly : "You can solve this problem with log off and re-login. Unless you are going to all the newly created files,.." Here is the Persona GPO setting screenshot below. Any advice will be appreciated. Thanks~ This document was generated from the following discussion: View 6.2.6 Persona Management Issue with Windows 10

VMware Horizon View Security Server installation Before you start your installation you make sure : 1- not installing the Horizon View Security Server on the same server as the Connection or Composer Server. 2-Security Server does not have the Terminal Services role installed . 3-You have to assign static IP address for this server . After You download Horizon View Connection Server installation n the Paired Horizon 7 Connection Server page, enter the name of the internal Horizon Connection Server that this Security Server will be paired with. Before we move on in the Security Server configuration, we need to create a Security Server Pairing Password. This is a special password only used in the pairing process .To set the pairing password, we go to a Connection Server and launch View Administrator. Navigate to View Configuration > Servers > Connection Servers and click your Connection Server. After clicking the Connection Server, under More Commands click Specify Security Server Pairing Password. back to our our Horizon View Security Server installation enter the pairing password specified earlier After pairing communication between the Security Server and Connection Server, we will see the External URLs configuration screen for the Security Server, both External, PCoIP, and Blast External connectivity the Firewall Configuration page, click Next we can test connectivity through the security server by browsing out to the external URL of the security server. We should see the VMware Horizon splash screen.

This was a post on the forums. I turned it into a document in hopes it will help someone someday. This is a new implementation. So I currently have 2 UAG's deployed. Version 3.1 and 3.2 currently deployed to Production They are behind a NetScaler load balancer. So after a few days the UAG's stop accepting connections on 443. I have to reboot these every night or the problem happens 100% of the time. At the moment I'm keeping 1 disabled on standby in case the other breaks during the workday. When these break, port 4172 remains open so any existing connections remain. It's only new connection attempts that fail. I have an open case with VMWare but they've turned us over to Citrix support. I wish they would actually want to know what is causing this, since obviously something is breaking their UAG. This is a passive aggressive remark in case your reading VMWare. We have 50 users. Yet see hundreds of stale connections on the UAG. We are not being DOS'ed as confirmed by our network team. Citrix NetScaler Load Balancer: 192.24.16.172 UAG: 192.24.17.184 Citrix NetScaler Load Balancer is configured to perform a healthcheck per the recommended method via VMWare. Using GET /favicon.ico. On the UAG: netstat shows hundreds of these close_wait connections: tcp        1      0 192.24.17.184:6443      192.24.16.172:46864     CLOSE_WAIT tcp        1      0 192.24.17.184:6443      192.24.16.172:29408     CLOSE_WAIT tcp        1      0 192.24.17.184:6443      192.24.16.172:65027     CLOSE_WAIT tcp        1      0 192.24.17.184:6443      192.24.16.172:16839     CLOSE_WAIT tcp        1      0 192.24.17.184:6443      192.24.16.172:45761     CLOSE_WAIT tcp        1      0 192.24.17.184:6443      192.24.16.172:44743     CLOSE_WAIT tcp        1      0 192.24.17.184:6443      192.24.16.172:9926      CLOSE_WAIT On the UAG: Hundreds of these in /opt/vmware/gateway/logs/SecurityGateway_blah_blah_ 2018-01-14T04:42:45.017+00:00> LVL:error   : [C: 192.24.16.172:58952] *** SSIGServer::SSL handshake failure: End of file (2) error:00000002:lib(0):func(0):system lib 2018-01-14T04:42:47.187+00:00> LVL:error   : [C: 192.24.16.172:24632] *** SSIGServer::SSL handshake failure: End of file (2) error:00000002:lib(0):func(0):system lib 2018-01-14T04:42:50.017+00:00> LVL:error   : [C: 192.24.16.172:39938] *** SSIGServer::SSL handshake failure: End of file (2) error:00000002:lib(0):func(0):system lib 2018-01-14T04:42:52.187+00:00> LVL:error   : [C: 192.24.16.172:3371] *** SSIGServer::SSL handshake failure: End of file (2) error:00000002:lib(0):func(0):system lib 2018-01-14T04:42:55.017+00:00> LVL:error   : [C: 192.24.16.172:42301] *** SSIGServer::SSL handshake failure: End of file (2) error:00000002:lib(0):func(0):system lib 2018-01-14T04:42:57.188+00:00> LVL:error   : [C: 192.24.16.172:47881] *** SSIGServer::SSL handshake failure: End of file (2) error:00000002:lib(0):func(0):system lib 2018-01-14T04:43:00.017+00:00> LVL:error   : [C: 192.24.16.172:28791] *** SSIGServer::SSL handshake failure: End of file (2) error:00000002:lib(0):func(0):system lib SOLUTION: I greatly dislike when I find a forum post with no answer so I will answer what the final solution to this was. I had done some digging into the UAG console and noticed the below messages. From what I had gathered the UAG has a built in mechanism that protects itself from DDOS type attacks. Our Citrix Netscaler Load Balancer health check was triggering this mechanism. So essentially the UAG thought the Load Balancer was attacking it so it shut itself down. The DosPreventionHandler kicked in. Port 4172 (PCOIP) remained open, existing users remained connected, but port 443 stopped accepting new connection. When I spoke to VMWare support they confirmed my suspicion. The workaround is to set the below settings to 0 in the UAG. This document was generated from the following discussion: UAG breaks after a few days. They break 100% of the time.

"VMware vSphere 6.5 Cookbook - Third Edition" authored by Abhilash G B, Cedric Rajendran (Jan 2018) helps deploy and manage VMware vSphere 6.5 components with ease. The book starts with the procedures involved in upgrading your existing vSphere infrastructure to vSphere 6.5, followed by deploying a new vSphere 6.5 environment. Then the book delves further into the procedures involved in managing storage and network access to the ESXi hosts and the virtual machines running on them. Moving on, the book covers high availability and fair distribution/utilization of clustered compute and storage resources. Finally, the book covers patching and upgrading the vSphere infrastructure using VUM, certificate management using VMCA, and finishes with a chapter covering the tools that can be used to monitor the performance of a vSphere infrastructure. What You Will Learn: Upgrade your existing vSphere environment or perform a fresh deployment Automate the deployment and management of large sets of ESXi hosts in your vSphere Environment Configure and manage FC, iSCSI, and NAS storage, and get more control over how storage resources are allocated and managed Configure vSphere networking by deploying host-wide and data center-wide switches in your vSphere environment Configure high availability on a host cluster and learn how to enable the fair distribution and utilization of compute resources Patch and upgrade the vSphere environment Handle certificate request generation and renew component certificates Monitor performance of a vSphere environment Author Bio: Abhilash G B Abhilash G B is a virtualization specialist, author, designer, and a VMware vExpert 2014-2017 who specializes in the areas of data center virtualization and cloud computing. He has been in the IT industry for more than a decade and has been working on VMware products and technologies since the start of 2007. Cedric Rajendran Cedric Rajendran is a senior staff engineer in technical support with VMware. He has around 13 years of experience covering a wide spectrum of technologies. He has served in the fields of Network Ops, Technical Support, and Consulting. His core strengths are on the server and storage virtualization. Packt

Learning VMware App Volumes [Video] authored by Peter von Oven helps you take your skills in delivering applications to virtual desktops to the next level. This video starts with an overview of the architecture and components used to design an optimized solution. You will then learn how to install and configure App Volumes for different use cases such as VMware View Integration, using VMware Thin App, Citrix Xen App, and more. Throughout the course, we provide hints, tips, and tricks as well as best practices. By the end of the video, you will have built a working App Volumes environment and acquired the skills to build and run a production environment. What You Will Learn: Architectural and Feature Overview of App Volumes Build Application Layering Designing a successful VDI deployment Work with App Stacks and Writeable Volumes Add App Stack delivery mechanism into Horizon View Delivering App Stacks in Citrix Xen Desktop and Citrix Xen App Configuring your App Volumes deployment Author Bio: Peter von Oven Peter von Oven is an experienced technical consultant and has spent the past 20 years of his IT career working with customers and partners in designing technology solutions aimed at delivering true business value. During his career, Peter has been involved in numerous large-scale enterprise projects and deployments and has presented at key IT events, such as VMworld, IP EXPO, and various VMUGs and CCUG events across the UK. He has also worked in senior presales roles and presales management roles for some IT giants—such as Fujitsu, HP, Citrix, and VMware—and was awarded VMware vExpert for 2015 and 2016.