VCF 9 Certificate Management: Custom CAs, Auto-Renewal, and Host Onboarding
How a custom CA changes VCF 9 certificate operations: what Fleet Management auto-renews, what stays manual, and how new ESX hosts must be onboarded.
vCenter Certificate Auto-Renewal: When You Still Need vCert
vCenter 8.0 U3h and VCF 9.0.2 renew VMCA Machine SSL and ESXi certificates automatically. What is covered, which thresholds apply, where vCert fits.
STS_INTERNAL_SSL_CERT Explained: What vCert’s LEGACY Result Means
Renewed Machine SSL but port 3128 still shows an old cert? What vCert's LEGACY STS result means and how to move STS to MACHINE_SSL_CERT.
vCenter Certificate Alarm After Renewal? Check the Backup Stores
Why a vCenter certificate alarm can point to an old rollback copy in BACKUP_STORE or BACKUP_STORE_H5C, and how to verify and clear it with vCert.
ESXi Shell Commands You Actually Use (ESXi 8 and ESX 9)
The ESXi shell commands admins really run over SSH, grouped by task: esxcli, vim-cmd, vmkping, esxtop and agent restarts, checked for ESXi 8 and ESX 9.
ESXCLI Changes in ESX 9.0 and 9.1: New, Removed and Changed Commands vs ESXi 8.0 U3
ESX 9.0 adds 27 ESXCLI commands and drops 11 vs 8.0 U3 (SLP, WBEM/CIM); 9.1 adds 27 more incl. memtier. Full tables from Broadcom's reference.
VCF 9 SAP HANA Network Design: Why 6 NICs Matter for vMotion and NFS
SAP HANA on VCF 9 with NFS: why storage needs its own NICs, separate from vMotion. The 2, 4 and 6 NIC models compared on Cisco VIC and HPE Synergy.
VCF 9.1 – Interactive Upgrade Planning Tool
VCF 9.1 – Interactive Upgrade Planning Tool | William Lam VCF 9.1 – Interactive Upgrade Planning Tool One of the biggest advantages of VMware Cloud Foundation (VCF) 9.1…
VCF 9.1 Supported Upgrade Paths: Which VCF, VVF, vCenter and ESX Versions Can Upgrade to 9.1
Which versions can upgrade to VCF 9.1 and VVF 9.1: VCF 5.2.x and 9.0.x, vCenter/ESX 8.x, component minimums and the release-date rule.
Microsoft Secure Boot Certificate Expiration in vSphere VMs (KB 423893): What to Do in 2026
Microsoft KEK and UEFI CA 2011 expired in June 2026. What it means for vSphere VMs with Secure Boot, and how SilentPK (8.0 U3j) and Capsule PK (9.1.1) fix it.