vCenter Upgrade Download: ISO and Patch Files for Every 8.0 and 9.x Build
Which vCenter file to download for an upgrade or patch (full VCSA ISO or patch-FP.iso), where it is on the Broadcom portal, and every 8.0 and 9.x build.
Category: VCSA
The MOB is disabled – How to Enable the Managed Object Browser in vSphere 9
“The MOB is disabled” in vSphere 9? Enable the vCenter Managed Object Browser via enableDebugBrowse in vpxd.cfg, then disable it again after use.
lsdoctor: Check and Repair the vCenter Lookup Service (6.7 to 9.x)
Broadcom lsdoctor for vCenter 6.7-9.x: where to download it (KB 320837), how to run it safely, and which option fixes which Lookup Service problem.
Critical Security Alert: Update to Fixed Version 8.0 U3d Immediately
CVE-2024-38812 is a CVSS 9.8 vCenter RCE exploited in the wild. Versions before 8.0 U3d and 7.0 U3t are affected: patch steps with software-packages.
vCenter 8 Session Timeout Settings and the 8.0 U3b vSphere Client Idle Session Bug (Fixed in 8.0 U3c)
How to set the vSphere Client session timeout in vCenter 8.0 and 9.x, and why sessions broke after 50 idle minutes on 8.0 U3b until the 8.0 U3c fix.
vSphere Client Instability After vCenter 8.0.3.00200 (8.0 U3b): Moved
This note moved. The full article covers the vCenter 8.0 U3b idle session bug, KB 377734, the 8.0 U3c fix and vCenter session timeout settings.
VMSA-2024-0019: Critical VMware vCenter Server Vulnerabilities (CVE-2024-38812, CVE-2024-38813) Addressed
VMSA-2024-0019 covers vCenter heap-overflow CVE-2024-38812 and privilege escalation CVE-2024-38813. Affected versions and fixed builds (8.0 U3d, 7.0 U3t).
Resolving Privilege Issues in vCenter Server 8.0U2
vCenter 8.0 U2 logs “Privilege check failed … missing permission Sessions.TerminateSession”? Add View and stop sessions to VsmSvcRole. No restart needed.
vSphere 8.0 Update 2: Introducing Azure Active Directory Federated Authentication
vSphere 8.0 Update 2 adds federated authentication with Azure Active Directory (Microsoft Entra ID) for vCenter, as presented at VMware Explore 2023.
💥VMware vCenter Server heap-overflow vulnerability – CVE-2023-20892, CVE-2023-20893, CVE-2023-20894, CVE-2023-20895, CVE-2023-20896
VMSA-2023-0014: multiple memory-corruption vulnerabilities in vCenter Server (CVE-2023-20892 to 20896, CVSS 5.9–8.1). Update as soon as possible.