We installed the VMware patch required to enable vShield on the host and add the VMCI component to VMware Tools.
We then tried to upgrade VMware tools using the custom option, but because the guest had a newer version of VMware Tools that supplied with the patch (ESXi500‐201109001), the client reported this, and failed to update.
They have a couple of questions around this:
Am I being dumb here?
Please help
Thanks
Run msiexec with these parameters, case sensitive
/v "/qn ADDLOCAL=VMCI,VShield REMOVE=Hgfs
Hi,
I recently deployed a demo Deep Security environment. As part of the setup, I installed on Virtual machines (running on an ESX4.1) vmware tools
downloaded from http://packages.vmware.com/tools/esx/5.0p01/windows/index.html
MAKE SURE to select CUSTOM install so that to have a change to select what to install.
Expand "VMware Device Drivers">"VMCI Drivers" and select "vShield Drivers" ==> "Installed on local disk"
Hope this help
Regards
Bernard
Thanks Disri1,
but unfortunately that does not help at all
I know how to install the VMCI driver, but not how to install this in conjunction with the latest version of VMware tools, as per my post below.
There seems to be no information available via Google, so I can only assume that almost noone is using shield endpoint. Is this completely off the mark?
Thanks all,
Jay
Hi,
Why not trying to select "Install Vmware Tools" again from the vSphere Client for that machine... Then select Custom... this should allow you to install VMCI driver using the current version of Vmware tools.
Regards
Yes, that was the plan
I tried this and I got either 'Unspecified error' or 'the version you have installed is newer than the version you are installing' (sorry I don;t remember which)
Either way, the only way I could install was to remove the new version and then install the whole of the old version inc VMCI driver.
Strange!
After uninstalling the most recent version I would probably try reinstalling the same version (custom install) in one unique operation 😉
Regards
But when I added the vShield Endpoint update (Updates tools-light ESXi500-201109402-BG) didn't this change the version held within ESX to the older version?
Probably... however, I guess those recommandations for ESXi500-201109402-BG are quite old and think, as of today, that installing most recents vmware tools should be ok for getting Endpoint well working (both anti-malware and web reputation).
Regards
Do the newer versions contain the VMCI driver? I didn't think so.
VMCI drivers are not only used by DS. I don't tested it but I guess most recent version include them as well.
Seems I should have more faith
I've installed a vanilla version of 5.0.0U1 623860 and this includes the vShield Endpoint driver within Tools (Tools version 8.6.5 621624). I've also downloaded the latest tools, VMware-tools-windows-8.6.5-731933.iso and this tool includes the vShield Endpoint driver.
VMware ESXi 5.0 Patch ESXi500-201109401-BG: Updates esx-base
VMware ESXi 5.0 Patch ESXi500-201109402-BG: Updates tools-light
I guess I just need to install ...9401 (to prevent downgrading VMtools within ESX) - so how do I go about doing this (previously I've used esxcli software vib install –d /vmfs/volumes/datastore1/Patches/ESXi500-201109001.zip to perform the update)? DO I simply install the full patch and then overwrite the now downgraded version of VMware Tools with the laest version?
Thanks again.
Jay
For the first question, I can share this with you:
I recently do the opposite as what you asked for: without accessing Vmware site, where would I fould wmware tools iso image?
The answer was:
- log on the DCIU ESX console the hit F2
- select "troubleshooting options and enable remote ssh
- use putty and connect to the ESX as root.
- cd /vmimages/tools-images
There should be a windows.iso image here... may be you can replace it by the one you want.
hint: I have a NFS datastore connected to this ESX and this allowed me to copy iso from /vmimages/tools-images to /vmfs/mynfs... may be you can do the same.
Hope this is useful
Bernard
Run msiexec with these parameters, case sensitive
/v "/qn ADDLOCAL=VMCI,VShield REMOVE=Hgfs
Thanks Distri,
You can replace the iso but when you attempt to use it you get this error 'Cannot complete signature verification on the required VMware Tools ISO image.'
The windows.iso.sig file presumably contains the signature, which fails to match since the .iso has been changed.
Bad news! I noticed that there is a Windows.iso.sig file in the image folder... may be somebody could give hints (scripts) so that to generate a corresponding .sig
BTW (not checked) may be there is a .sig file for each version on the Vmware FTP site?
Another idea would be using Update manager (UM)... may be it should be possible to download windows.iso to ESX using UM.
Regards
Thanks, but just checked there - just the iso
Unfortuately the sig file doesn't look like a simple hash file to me.
Neither for me!