Critical

VMSA-2026-0008.1 — Apply KB 460732 on 9.1.1 or KB 460734 on 5.2.x, 9.0.2 and 9.1.0, keep SDDC Manager reachable only from trusted admin hosts, and subscribe to the advisory so you see the patch the day it lands.

Details →

Lab online · 1 · 78 posts

The Small
Human Cloud

Blog articles, news and useful information on VMware Cloud Foundation, automation and PowerShell — all from the home lab, where everything gets broken and rebuilt first.

Topology · mgmt domain All systems nominal
vcf-operations vcf-automation vcfms sddc-manager vcenter nsx-manager esx-01 esx-02 esx-03 esx-04 vsan-datastore 4 hosts · healthy
Blog posts
78
vExpert since
2020
In IT since
2008
Days since I broke the lab
26

Latest News from the Web

All briefings →
Weekend edition

A quiet Saturday, so here's how vCenter upgrades with only minutes of downtime

  • If vCenter still isn't patched for CVE-2026-59310, make it today's job, and keep the Brotli workaround in place on SDDC Manager. CVE-2026-59310 has been in CISA's Known Exploited Vulnerabilities catalogue since 18 August; the VMSA-2026-0006 matrix lists vCenter 9.1.0.0300, 9.0.2.0100 and 8.0 U3k as fixed. VMSA-2026-0008.1 still shows "Patch pending" for every SDDC Manager version, so KB 460732 on 9.1.1 (or KB 460734 on 5.2.x, 9.0.2 and 9.1.0) is still your protection.
  • Before your next vCenter upgrade in VCF 9.1, reserve a temporary IP address on the management subnet and check the portgroup security settings. The VCF 9.1 upgrade prerequisites ask for a temporary IP for each vCenter appliance upgrade, and KB 313288 warns that MAC Changes or Forged Transmits set to "Reject" on the vCenter's portgroup could prevent a successful Reduced Downtime Upgrade. Both are quick to check now and painful to discover mid-window.
  • Rewrite storage_policies as storage_policy blocks before you move to vsphere provider 2.18.0. The 2.18.0 release replaces the attribute on vsphere_namespace and its data source, so keep ~> 2.17 pinned until your namespace code is updated.
  • Security No new VMSA
  • Releases & KBs All quiet
  • Terraform & Packer Nothing new
  • Next deadline 4 days
Read today's Latest Tech News →

Code Projects

VMware Explore 2024 Hackathon Winning team

Project and code from the Las Vegas hackathon at VMware Explore 2024.

Explore · Las Vegas 2024 Repo ↗

Simplify VCF Deployment & Operations with Terraform

Session code with examples for deploying VCF and common post-bring-up tasks.

Explore session · 2024 Watch ↗ Repo ↗

Automating VCF Day 1 Operations

Session code covering Day 1 actions via the API and PowerVCF.

Explore session · 2024 Watch ↗ Repo ↗

Presentations

Every slide deck and demo from the events I've been lucky enough to present at.

Decks & demo code Repo ↗
Thanks for visiting

Let's talk tech!

Questions, ideas, or just want to talk VCF? Drop me an email or find me on the socials.

Email me →