Section 1 - Create and Deploy vSphere 6.
x Infrastructure Components
Objective 1.1 - Perform Advanced ESXi Host Configuration
Skills and Abilities
Configure and Manage Auto Deploy configurations
o Determine use case for Stateless vs Stateful installs
Stateless caching
Stateful installs
By default, Auto Deploy does not store ESXi configuration or
state on the host disk. Instead, an image profile defines the image that the host is
provisioned with, and other host attributes are managed through host profiles. A host that
uses Auto Deploy for stateless caching still needs to connect to the Auto Deploy server
and the vCenter Server.
You can provision a host with Auto Deploy and set up the host
to store the image to disk. On subsequent boots, the host boots from disk.
o Create / Modify rules and rule sets
specify the behavior of the Auto Deploy server by using a set of rules written in Power CLI
The Auto Deploy rule engine checks the rule set for matching host patterns to decide
which items (image profile, host profile, or vCenter Server location) to provision each host
with
Add-EsxSoftwareDepot <path to zip>
Add-EsxSoftwareDepot C:[Link]
Get-EsxImageProfile
$os = Get-EsxImageProfile -Name ESXi-6.0.0-2494585-standard
$img = Get-EsxImageProfile -Name <Name of Image Profile>
$Deployrule = New-DeployRule -Name <Name of rule> -Item $img -Pattern
<pattern sequences here>
Example
$deployrule = New-DeployRule -Name Default -Item $os -Pattern
ipv4=[Link]-[Link],vendor==VMware, Inc.
Get-DeployRule
Get-DeployRule -Name <Rule Name> | Remove-DeployRule -Delete
Get-DeployRule -Name <Rule Name> | Add-DeployRule
Add-DeployRule -DeployRule HP Hosts -At 0
Get-DeployRuleSet
Get-DeployRule -Name <Rule Name> | Remove-DeployRule
o Create and associate Host Profiles for an Auto Deploy reference host
In the vSphere Web Client, click Rules and Profiles and click
Host Profiles.
For a new profile, click the Create Profile from a host icon, or
right-click a profile that you want to modify and select Edit
Host Profile.
Customize your reference host by using vCLI, by using the
client UI, or by using the Host Profiles interface.
Set up ESXi Dump Collector with the esxcli system
coredump command.
Set up syslog for the host with the esxcli system syslog
command.
Use the vicfg-ntp vCLI command or the vSphere Web
Client to set up a host. Also confirm NTP Daemon is
started
Set up the firewall configuration, security configuration,
user configuration, and user group configuration for the
reference host
Set up the networking and storage policies for the
reference host with the vSphere Web Client or vCLI
command
Click OK to save the host profile settings.
Configure Kernel Boot Parameters for scripted install according to a deployment
plan:
o Modify scripted weasel install ([Link])
The default [Link] installation script is located in the initial RAM disk
at /etc/vmware/weasel/[Link].
The default script contains the following commands:
#
# Sample scripted installation file
#
# Accept the VMware End User License Agreement
vmaccepteula
# Set the root password for the DCUI and Tech Support Mode
rootpw mypassword
# Install on the first local disk available on machine
install --firstdisk --overwritevmfs
# Set the network to DHCP on the first network adapter
network --bootproto=dhcp --device=vmnic0
# A sample post-install script
%post --interpreter=python --ignorefailure=true
import time
stampFile = open('/[Link]', mode='w')
[Link]( [Link]() )
o Create / Modify scripted installation
Download the ESXi ISO image from the VMware Web site.
Mount the ISO image in a folder:
mount -o loop [Link].x86_64.iso /esxi_cdrom_mount
XXXXXX is the ESXi build number for the version that you
are installing or upgrading to.
Copy the contents of cdrom to another folder:
Copy the kickstart file to /esxi_cdrom.
cp ks_cust.cfg /esxi_cdrom
(Optional) Modify the [Link] file to specify the location of the
installation or upgrade script by using the kernelopt option.
You must use uppercase characters to provide the path of
the script, for example,
kernelopt=runweasel ks=cdrom:/KS_CUST.CFG
The installation or upgrade becomes completely automatic,
without the need to specify the kickstart file during the
installation or upgrade.
Recreate the ISO image:
cp -r /esxi_cdrom_mount /esxi_cdrom
mkisofs -relaxed-filenames -J -R -o custom_esxi.iso -b
[Link] -c [Link] -no-emul-boot -boot-load-size 4
-boot-info-table /esxi_cdrom
The ISO image includes your custom installation or upgrade script.
Configure Advanced System Settings according to a deployment plan:
o Edit System Swap / Scratch Configuration
Swap file
VMkernels swap file is serves as a backing store for the virtual machines RAM contents. By default, its created
in the same location as the virtual machine configuration file. Its created by the ESXi host when the virtual
machine is powered on. So if this file cannot be created then the Virtual machine cannot power on. So if we
consider a clustered environment the Swap settings can be configured on a VMware cluster level.
Open the Web Client Right click on your Cluster object and select the Settings. Under the Configuration click
on General. There you will see an option to edit Swap File Location.
We basically have two option either to store the swap files in the same directory as the virtual machine or store
the swap files in the Datastore specified by the host.
We will choose the second option here to select a Datastore to manage the swap file creation.
But keep in mind as the VMware warns that using Datastore that is not visible to all the hosts in the cluster will
affect the vMotion performance.
Open the VMware Client and Select the host you want to change its swap file location and click
on Configurations then under the Software tab click on the Virtual Machine Swap File Location Then Edit and
choose the Datastore you wish to use for managing swap files.
Scratch partition
Its basically a 4 GB sized VFAT partition to hold such as troubleshooting information such as logs and core files
for VMware Support. Even if this partition is not available ESXi will still function and keep the information in
RAMDisk. However, RAMDisk information will not stay beyond a restart. If there are storage resource constrains
we can move the scratch partition to a shared storage.
SSH in to any host and find out below Unique Datastore identified information.
We will need the ID corresponding to the Datastore02-SDD where we have already created a Root folder named
Scratch and created a folder structure for all the 3 VMHosts.
/vmfs/volumes/57167100-c02b5a34-b7d5-b8aeed7e47be/Scratch/VMHOST01
Right click the HOST and click on Settings>Advanced System Settings and search for scratch it will show two
entries as below from that edit the entry [Link]
Once the configuration has been applied take a restart of the particular VMHosts. After the restart if you browse
the corresponding location in the Datastore you will see below folder structure.
o Configure ESXi host to use a central Syslog Server
Manage/Edit the Core Dump configuration of an ESXi host
The core dump configuration allows us to configure a location for ESXi to store its dump files during a PSOD (Purple
Screen of Death).
First, we need to start the VMware vSphere ESXi Dump Collector service on the VCSA.
From the vSphere Web Client, browse to Administration > Deployment > System Configuration > Services > VMware
vSphere ESXi Dump Collector. Choose the Actions menu, and change the startup type to Automatic.
Now, choose the actions menu again, and Start the service.
Finally, we need to configure the ESXi hosts to send dumps to the collector on the VCSA. We can do this via
ESXCLI, or using a host profile (preferred) .
To configure using Host Profiles:
Connect to vCenter Server using the vSphere Client.
Click Home and select Host Profiles.
Create or edit a host profile.
Select Networking Configuration.
Select Network Coredump Settings.
Specify the VMkernel network interface to use for outbound traffic, such as vmk0.
Specify the IP address and UDP port number of the remote network coredump server.
Save and apply the host profile.
To configure using ESXCLI:
esxcli system coredump network set interface-name vmk0 server-ipv4 [Link] server-port 6500
esxcli system coredump network set enable true
Objective 1.2 - Deploy and Configure Core Management Infrastructure Components
Skills and Abilities
Deploy vCenter core components according to a deployment plan:
o Deploy and Configure a Platform Services Controller (PSC):
Determine use case for embedded vs external PSC
Re-point a vCenter Server Appliance to another External PSC
o Deploy and Configure Identity Sources for Single Sign-On:
Configure Single Sign-On users and groups
Change Default domain for Single Sign-On
List services registered with Single Sign-on
o Deploy and configure vCenter Server
o Deploy / Configure Enhanced Link Mode
Manage / Configure vCenter components according to a deployment plan:
o Configure Global Permissions for vCenter services
o Configure Dump Collector service
o Configure the Syslog Collector / Syslog service
o Managing vCenter Server advanced configurations
Objective 1.3 - Deploy and Configure Update Manager Components
Skills and Abilities
Deploy / Configure Update Manager components according to a deployment
plan:
o Configure VUM Update Manager download service
o Configure a VUM shared repository
o Configure VUM smart rebooting
o Manually download updates to a VUM repository
o Create and modify VUM baseline groups
Perform VUM orchestrated vSphere upgrades
Troubleshoot Update Manager problem areas and issues
Utilize Update Manager to reconfigure VUM settings
Objective 1.4 - Perform Advanced Virtual Machine Configurations
Skills and Abilities
Tune Virtual Machine disk controller configurations according to a deployment
plan
Configure .vmx file for advanced configuration scenarios
Configure a virtual machine for Hot Add features
Upgrade virtual machine hardware and VMware Tools
Troubleshoot virtual machine deployment issues
Section 2 - Deploy and Manage a vSphere 6.x Storage Infrastructure
Objective 2.1 - Implement Complex Storage Solutions
Skills and Abilities
Determine use cases for Raw Device Mapping
Apply storage presentation characteristics according to a deployment plan:
o VMFS re-signaturing
o LUN masking using PSA-related commands
Create / Configure multiple VMkernels for use with iSCSI port binding
Configure / Manage vSphere Flash Read Cache
Create / Configure Datastore Clusters
Upgrade VMware storage infrastructure
Deploy virtual volumes
Deploy and configure VMware Virtual SAN
Configure / View VMFS locking mechanisms
o ATS-Only mechanism
o ATS_SCSI mechanism
Configure Storage I/O Control to allow I/O prioritization
Configure Storage Multi-pathing according to a deployment plan
Objective 2.2 - Manage Complex Storage Solutions
Skills and Abilities
Identify and tag (mark) SSD and local devices
Administer hardware acceleration for VAAI
Configure, administer, and apply storage policies
Prepare storage for maintenance
Apply space utilization data to manage storage resources
Provision and manage storage resources according to Virtual Machine
requirements
Configure Datastore alarms, including Virtual SAN alarms
Expand (Scale up / Scale Out) Virtual SAN hosts and disk groups
Objective 2.3 - Troubleshoot Complex Storage Solutions
Skills and Abilities
Analyze and resolve storage multi-pathing and failover issues
Troubleshoot storage device connectivity
Analyze and resolve Virtual SAN configuration issues
Troubleshoot iSCSI connectivity issues
Analyze and resolve NFS issues
Troubleshoot RDM issues
Section 3 - Deploy and Manage a vSphere 6.x Network Infrastructure
Objective 3.1 - Implement and Manage vSphere Standard Switch (vSS) Networks
Skills and Abilities
Create and manage vSS components according to a deployment plan:
o VMkernels ports on standard switches
o Advanced vSS settings
Configure TCP/IP stack on a host
Create a custom TCP/IP stack
Configure and analyze vSS settings using command line tools
Objective 3.2 - Implement and Manage vSphere 6.x Distributed Switch (vDS) Networks
Skills and Abilities
Deploy a LAG and migrate to LACP
Migrate a vSS network to a hybrid or full vDS solution
Analyze vDS settings using command line tools
Configure Advanced vDS settings (NetFlow, QOS, etc.)
Determine which appropriate discovery protocol to use for specific hardware
vendors
Configure VLANs/PVLANs according to a deployment plan
Create / Apply traffic marking and filtering rules
Objective 3.3 - Scale a vSphere 6.x Network Implementation
Skills and Abilities
Configure appropriate NIC teaming failover type and related physical network
settings
Determine and apply failover settings according to a deployment plan
Configure and manage network I/O control 3
Determine and configure vDS port binding settings according a deployment plan
Objective 3.4 - Troubleshoot a vSphere 6.x Network Implementation
Skills and Abilities
Perform a vDS Health Check for teaming, MTU, mismatches, etc.
Configure port groups to properly isolate network traffic
Use command line tools to troubleshoot and identify configuration issues
Use command line tools to troubleshoot and identify VLAN configurations
Use DCUI network tool to correct network connectivity issue
Section 4 - Configure a vSphere Deployment for Availability and Scalability
Objective 4.1 - Implement and Maintain Complex vSphere Availability Solutions
Skills and Abilities
Configure a HA cluster to meet resource and availability requirements
Configure custom isolation response settings
Configure VM Component Protection (VMCP)
Configure HA redundancy settings:
o Management network
o Datastore heartbeat
o Network partitions
Configure HA related alarms and analyze a HA cluster
Configure VMware Fault Tolerance for single and multi-vCPU virtual machines
Objective 4.2 - Implement and Manage Complex DRS solutions
Skills and Abilities
Configure DPM, including appropriate DPM threshold
Configure / Modify EVC mode on an existing DRS cluster
Create DRS and DPM alarms
Configure applicable power management settings for ESXi hosts
Configure DRS cluster for efficient/optimal load distribution
Properly apply virtual machine automation levels based upon application
requirements
Administer DRS / Storage DRS
Create DRS / Storage DRS affinity and anti-affinity rules
Configure advanced DRS / Storage DRS settings
Configure and Manage vMotion / Storage vMotion
Create and manage advanced resource pool configurations
Objective 4.3 - Troubleshoot vSphere clusters
Skills and Abilities
Analyze and resolve DRS/HA faults
Troubleshoot DRS/HA configuration issues
Troubleshoot Virtual SAN/HA interoperability
Resolve vMotion and storage vMotion issues
Troubleshoot VMware Fault Tolerance
Section 5 - Configure a vSphere Deployment for Manageability
Objective 5.1 - Execute VMware Cmdlets and Customize Scripts Using PowerCLI
Skills and Abilities
Install and configure vSphere PowerCLI
Use basic and advanced PowerCLI Cmdlets to manage a vSphere deployment
Analyze a sample script, then modify the script to perform a given action
Use PowerCLI to configure and administer Auto Deploy (including Image Builder)
Create a report from a PowerCLI script
Objective 5.2 - Implement and Maintain Host Profiles
Skills and Abilities
Use Profile Editor to edit and / or disable policies
Create and apply host profiles
Use Host Profiles to deploy vDS
Use Host Profiles to deploy vStorage policies
Import / Export Host Profiles
Manage Answer Files
Configure stateful caching and installation for host deployment
Objective 5.3 - Manage and analyze vSphere log files
Skills and Abilities
Generate vSphere log bundles
Configure and test centralized logging
Analyze log entries to obtain configuration information
Analyze log entries to identify and resolve issues
Configure logging levels for vSphere
Objective 5.4 - Configure and manage Content Library
Skills and Abilities
Create a Global User
Create a Content Library
Subscribe to a Content Library
Configure a Content Library for space efficiency
Synchronize a subscribed Content Library
Section 6 - Configure a vSphere Deployment for Performance
Objective 6.1 - Utilize Advanced vSphere Performance Monitoring Tools
Skills and Abilities
Configure esxtop / resxtop custom profiles
Evaluate use cases for and apply esxtop / resxtop Interactive, Batch and Replay
modes
Use vScsiStats to gather storage performance data
Use esxtop / resxtop to collect performance data
Given esxtop / resxtop output, identify relative performance data for capacity
planning purposes
Objective 6.2 - Optimize Virtual Machine resources
Skills and Abilities
Adjust Virtual Machine properties according to a deployment plan:
o Network configurations
o CPU configurations
o Storage configurations
Troubleshoot Virtual Machine performance issues based on application workload
Modify Transparent Page Sharing and large memory page settings
Optimize a Virtual Machine for latency sensitive workloads
Configure Flash Read Cache reservations
Section 7 - Configure a vSphere 6.x Environment for Recoverability
Objective 7.1- Deploy and manage vSphere Replication
Skills and Abilities
Configure and manage a vSphere Replication infrastructure:
o Isolate vSphere Replication network traffic
o Enable data compression of vSphere Replication traffic
Configure and manage vSphere Replication of virtual machines
Analyze and resolve vSphere Replication issues:
o Storage configuration
o Multiple point in time snapshots
o Enabling vSphere Replication on VMs
Objective 7.2 - Deploy and Manage vSphere Data Protection
Skills and Abilities
Create, edit and clone a vSphere Data Protection backup job
Modify a preconfigured backup job.
Backup and restore a Virtual Machine (file level restore, full VM backup)
Create a replication job according to a deployment plan
Configure a Backup Verification job to ensure integrity of restore points
Objective 7.3 - Backup and Recover vSphere Configurations
Skills and Abilities
Backup and restore distributed switch configurations
Backup and restore resource pool configurations
Export Virtual Machines to OVA/OVF format
Use a Host profile to recover an ESXi host configuration
Section 8 - Configure a vSphere 6.x Environment for Security
Objective 8.1 - Manage authentication and end-user security
Skills and Abilities
Add/Edit Remove users on an ESXi host
Configure vCenter Roles and Permissions according to a deployment plan
Configure and manage Active Directory integration
Analyze logs for security-related messages
Enable and configure an ESXI Pass Phrase
Disable the Managed Object Browser (MOB) to reduce attack surface
Objective 8.2 - Manage SSL certificates
Skills and Abilities
Configure and manage VMware Certificate Authority
Configure and manage VMware Endpoint Certificate Store
Enable / Disable certificate checking
Generate ESXi host certificates
Replace default certificate with CA-signed certificate
Configure SSL timeouts according to a deployment plan
Objective 8.3 - Harden a vSphere 6.x Deployment
Skills and Abilities
Enable and configure ESXi Lockdown mode (Strict / Normal)
Configure a user on the Lockdown Mode Exception Users list
Customize SSH settings for increased security
Enable strong passwords and configure password policies
Configure vSphere hardening of virtual machines according to a deployment plan