Lab 3 VMware View Advanced Troubleshooting and Configuration
VAC Introduction
VMware Partner Since 2003 May 2003 VIP Enterprise Partner June 2006 VMware VAC Partner May 2007 VMware Gold VAC Partner December 2007 VMware Premier Partner September 2008 Site Recovery Manager Lighthouse Partner Forsythe helps companies solve business problems through Technology by providing Storage, server, network and security infrastructure and procurement services for all major manufacturers Services to align and operate IT, and manage the data center Economic perspective to reducing IT costs and adding business value Consolidate
Optimized Environment
Virtualize
Manage
Choice without Complexity
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
thank you to our instructor-led labs sponsors
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Lab Architecture
The lab consists of 48 isolated pods that are all identical and configured with the following infrastructure: An administrative desktop with the VMware Infrastructure Client and VMware View Client already installed A VMware ESX 3.5 Server An iSCSI storage array A VMware vCenter server An Active Directory controller (VPOD) providing DNS and DHCP services A VMware View Manager server
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Agenda
Quick Overview Troubleshooting View Composer & Quickprep Leveraging Command Line Utilities Troubleshooting USB Connectivity
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
High Level Summary of a View Infrastructure
Additional Connectivity Composer
Offline
VDM AD Clients
VC
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Components of VMware View
Client
Native Windows client Browser access for Linux & MAC Thin-client support.
Agent
Run in hosted XP and Vista VM Session management.
Connection Server
Security Server
Can install standalone Security Server in DMZ (optional) Service running on Windows 2003 Connects clients to hosted virtual desktops Integrated with Active Directory and vCenter.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting View Composer & Quickprep
Creating vClones
Create a baseline Windows virtual machine on your Virtual Infrastructure.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Creating vClones
Take a snapshot of the VM, without including memory. (Powered off is best)
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Creating vClones
Using View Manager, define an automated pool of clones using your source VM and snapshot.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
Troubleshooting base image issues:
Only valid images will appear as available choices for Composer Pools
Only Windows XP SP2 and SP3 No Vista or Windows 7 for linked clones No Windows Server or non-Windows operating systems Image must be a standard VM No templates or existing replicas or clones Image must have a snapshot The snapshot cant include memory Image must contain the VMware View Agent
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Lab 1: Troubleshooting Image Issues
You are trying to create an automated pool of desktops from your master image. Earlier, you updated this image with the latest patches and took a snapshot that you called 2nd Build Create a pool based off of this 2nd Build snapshot.
(This lab starts on page 6 of the lab manual)
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Building Desktops with vClones
View Composer and Virtual Center will create a replica of your source VM to use as a master.
R1
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Building Desktops with vClones
V1
This replica will then create a set of small linked clones and join them to the domain.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Building Desktops with vClones
V1
Composer mounts the system disk (clone and replica) from the datastore via the ESX host.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Building Desktops with vClones
Machine: ViewPC02 Password: w5#_!2af Domain: vmware.com
V1
Composer finds an AD Domain Controller by looking up the base DN such as vmworld.lab
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Building Desktops with vClones
Machine: ViewPC02 Password: w5#_!2af Domain: vmware.com
V1
If the base DN does not resolve to an AD DC, all quickprep and composer actions will fail.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Building Desktops with vClones
Machine: ViewPC02 Password: w5#_!2af Domain: vmware.com
V1
Composer creates a machine account in AD with a known password
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Building Desktops with vClones
Machine: ViewPC02 Password: w5#_!2af Domain: vmware.com
V1
This information is written as a file directly to the clones file system.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Building Desktops with vClones
V1
V1
Composer closes the disk and the Connection Server tells the machine to boot.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Building Desktops with vClones
V1
The Native Agent sets the machine name very early in the boot process.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Building Desktops with vClones
V1
The Service Agent sets registry entries for domain membership later in the boot cycle.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Building Desktops with vClones
V1
V1
Afterwards, the View Connection Server is notified, and the machine is now on the domain.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
V1
If your virtual desktops will contact a different AD controller than your VC
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
V1
15 Min
machine accounts may not immediately be visible after quickprep.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
V1
The best choice is to keep your VC on the same VLAN with the desktops.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
V1
In order to be successful, the VM must communicate with both AD and View.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
V1 viewcs.vmworld.lab
The VM agent will contact the View server only by its FQDN.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Connection Server Lookup
The Broker key lists the DNS names that the agent will use to contact the connection servers.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
V1 xp1.vmworld.lab viewcs.vmworld.lab
The View Server will contact the VM only by its FQDN.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
V1 xp1.vmworld.lab viewcs.vmworld.lab
Generally, DDNS is required for name resolution to work automatically.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
V1 xp1.vmworld.lab viewcs.vmworld.lab
Bind DNS Server
If your DNS server does not support DDNS, VMs will most likely have naming issues.
V1
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
V1 xp1.vmworld.lab viewcs.vmworld.lab
Bind DNS Server
One solution is to use an AD-integrated DNS for your View environment
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
V1 xp1.vmworld.lab viewcs.vmworld.lab
Bind DNS Server
And add a Forwarder to point to your primary DNS
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting Customizing and Unavailable
View Desktop must see the Connection Server by FQDN
The desktop will remain in "Customizing" or "Waiting for Agent"
View Server must be available to reach the VM by FQDN
The user will get "Desktop is Unavailable"
View Desktop pools use DHCP to get addresses
Dynamic DNS (DDNS) is the generally accepted way of getting FQDN resolution to work with DHCP
Pinging the VM by IP address or hostname is not valid troubleshooting HOSTS file can provide a way to do a quick test to see if DNS is failing It's almost always a DNS problem
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
The View Agent runs as a service and you can check the status in the registry of the desktop VM
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
The PolicyState value shows whether the VM thinks its configured or not.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
FFFFF = Not Configured 0 = Configured 6 = Error
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
If this value is 0, but the View state is customizing, you probably have a DNS issue.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting
Other Common Problems
Do you have a 3rd party firewall in your VM that needs to be opened?
Completely disable it for temporarily for quick testing
Do you have enough DHCP addresses in your DHCP scope?
View Desktops build fast and can quickly overwhelm your scope Reservation length can keep IPs from getting reused
Did you install the View Agent last?
View installs a GINA which does proper chaining Other products may not be so polite
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Lab 2: Troubleshooting VM Communications
You have created an individual desktop for one of your users, but the user claims they are getting Desktop is Unavailable and cant log in. Deploy and fix this machine so that your user can get back to work!
(This lab starts on page 45 of the lab manual)
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Command Line Utilities
What is vdmadmin.exe?
VDMAdmin for View Manger is a utility provided with View Manager that allows you to carry out administrative and analytical activities that are not available from within the administrative interface. The tools run on a View Manager server:
C:\Program Files\VMware\VMware View\Server\bin\vdmadmin.exe
Functions
Assigning a default desktop List user information Show unentitled machines or policies Redirect the information to XML
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Using vdmadmin.exe There are two sets of commands that are set apart by upper and lower case letters. The first is the command and the second is the argument.
vdmadmin <command> <parameter(s)>
vdmadmin D d desktop-pool -m machine u domain\uid Example: vdmadmin D d Roy m pc001 u vmware\earl This command would set a default desktop with the name machine, in the pool desktop-pool to a specific user. When the user logs in he will now be automatically assigned to this desktop.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
What is sviconfig.exe?
sviconfig.exe is a management tool for the VMware View Composer configuration used to:
Fix an inconsistent View Composer database Create a View Composer database Check the database connection Restore the View Composer database
Run the command from the View Composer Server (vCenter)
C:\Program Files\VMware\VMware View Composer\sviconfig.exe sviconfig operation=<parameter>
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
For Additional Information
For most everything type vdmadmin or sviconfig at the command prompt. Basic information can also be found at: www.vmware.com/pdf/viewmanager_cl_tool.pdf
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Troubleshooting USB Connectivity
USB Redirection with RDP
USB Virtual Channel RDP KVM
Thin Client or PC
In View 3.0, USB is encapsulated as a Virtual Channel inside of the RDP Protocol
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
USB Redirection with RDP
USB TCP Connection USB Fallback to Virtual Channel RDP KVM
Thin Client or PC
In View 3.1.x, USB can be delivered through a separate TCP channel with the Virtual Channel as a fallback.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
USB Redirection with RDP
USB TCP Connection USB Virtual Channel RDP KVM
Thin Client or PC
Either mode will work through the View Security Server Tunnel.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
USB Redirection with RDP
USB TCP Connection USB Virtual Channel RDP KVM
Thin Client or PC
By default, Human Interface Devices (HID) are not redirected via USB theyre filtered out.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
USB Redirection with RDP
USB TCP Connection USB Virtual Channel RDP KVM
Thin Client or PC
There are certain HID devices that RDP doesnt understand, or require complex drivers.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
USB Redirection with RDP
USB TCP Connection USB Virtual Channel RDP KVM
X X
Thin Client or PC
We cant just re-direct everything, as it will make it impossible to interact with the local device.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
USB Redirection with RDP
USB TCP Connection USB Virtual Channel RDP KVM
Thin Client or PC
In View 3.1.x, we can adjust the HID filter to only allow certain devices.
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
USB Redirection with RDP
View 3.1.x USB FilterUSB TCP Connection Options Filter devices by class
USB Virtual Channel RDP KVM
Thin Client or PC
Devices can be filtered by the Class GUID for that type of peripheral:
HKLM\Software\Vmware, Inc.\VMware VDM\USB\ClassFilters
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
USB Redirection with RDP
View 3.1.x USB FilterUSB TCP Connection Options Filter devices by class USB Virtual Channel Allow a specific device
RDP KVM
Thin Client or PC
A class filter can be overridden to allow a specific devices hardware ID through:
HKLM\Software\Vmware, Inc.\VMware VDM\USB\AllowHardwareIDs
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
USB Redirection with RDP
View 3.1.x USB FilterUSB TCP Connection Options Filter devices by class USB Virtual Channel Allow a specific device RDP KVM Filter devices by hardware ID
Thin Client or PC
A filter can block devices which match a certain vendors hardware identifier:
HKLM\Software\Vmware, Inc.\VMware VDM\USB\ HardwareIDFilters
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
USB Redirection with RDP
View 3.1.x USB FilterUSB TCP Connection Options Filter devices by class USB Virtual Channel Allow a specific device RDP KVM Filter devices by hardware ID Partial Device forwarding
Thin Client or PC
We can allow a single function of an HID device to be forwarded:
HKLM\Software\Vmware, Inc.\VMware VDM\USB\AllowPartialDeviceRedirect
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Device Manager Hardware IDs
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
PnP Selection for USBlyzer
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Details for Devices
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Devices Available View
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Exclude Devices by Class
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Allow Device by ID Even if Class is Excluded
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Exclude Webcam via Hardware ID
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Unsupported Device not Available
Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
Q&A
Thank you for coming to VMworld 2009!
