We haven’t changed anything at the back end and it used to work flawlessly before.

The error which appears on iPhone/iPad is this:

The Certificate for this server is invalid. You might be connecting to a server that is pretending to be “server.name” which could put your confidential information at risk.

The same error doesn’t appear when connecting through desktop version of Citrix receiver.

Interestingly when we switched to using the local WiFi on the iPhone it worked no problem, despite the fact the same carrier (Telstra) was used. Then switched back to Telstra’s 3G and the certificate error comes up again. Maybe Telstra have changed something? We have tried it a few times and the error comes up all the time.

Then we put an Optus SIM into the iPhone which had the Telstra SIM before and worked every time. Then we tried a Vodafone SIM in the same phone certificate error again.
It now seems the problem is with Vodafone or Telstra’s 3G right?

We have turned on “Personal Hotspot” on the iPhone and used a PC to connect using 3G and surprisingly it worked as well. Maybe it is not 3G after all? Could it be the Citrix receiver for iPhone?

But then why does it work using Optus, but not Telstra and Vodafone?

One more test. Un-installed Citrix receiver on the iPhone and re-installed it. It now works every time using 3G using Optus and Vodafone. (I assume it would work with Telstra too, but haven’t got the Telstra SIM handy now.

We have experienced similar problem using Android, but un-install and re-install of the Citrix receiver didn’t fix the issue. It makes me think the problem is with the Citrix receiver. We’ll Keep researching…

1. For this beta test I decided to use a Windows 7, 64 bit desktop with 8G RAM and IE9 to make sure everything goes smoothly. Usually I use FireFox, but it may have some limitations with Office365 and I didn’t want to take the risk.
2. The first surprise was the beta is not available for Australians. (It is available in the USA, and most European counties, but not for Australians)
3. I picked that I’m in US and received a waring that I cannot change this in the future! What if my company operates in multiple countries? Strange, but it could be just for beta testers.
4. It needs to create a new MS ID, which cannot be the same as my MS passport. I would have preferred it to be the same, but maybe it is a good thing. Keep private and business separate. Although in my case my MS ID is used for business already.
5. It looks like it creates a subdomain for the organisation mydomain.onmicrosoft.com and gave me an email address of myname@mydomain.onmicrosoft.com. (Update: Later on you can add your own domain, this is just for the initial setup)
6. It told me to install the apps as the next step. It asked me to install Lync first (Didn’t give me an option if I want to use Lync  not) and asked me to install 32 or 64 bit on my 64bit Windows 7 box.
7. The file is 71M and IE9 is estimating 50 minutes to download. Very slow. They probably didn’t allocate too much resources for the beta testers. (My Internet link can easily go up to about 400KB/sec, so it is not my link causing such a slow download. And this is just the Lync component, what about MS Office? That is much bigger than 71M.
8. Well after 40 minutes I checked the download and nothing is there. It didn’t download and didn’t run. I clicked on “Install” again and it is started to download again from 0%. It didn’t pick up where it stopped before. I saw the previous download getting up to at least 50%, but it started again. MS didn’t offer to use any download manager which allows a re-start of the download.
9. After just over 2 hours I managed to download and install Lync 201 and when it started it wanted to log in. It has picked up my other MS Live ID. I changed it to the newly created Offiec365 ID and it came up wit the message I need to install another software before I can log in. Luckily this is just a small piece of SW called msoidcli.msi. It downloaded quickly. This is the Microsoft Online Services Sign-in assistant.
10. After installation it asked me for Sign-in address, username and password. I had some difficulty to log in because mydomain.onmicrosoft.com didn’t work as the sign in address. I couldn’t work out what I should put in each fieldso I gave up for a minute and I’ll come back to this.
11. I went on continuing the setup to install the MS Office components. This time it also asked me to log in, but it asked me for my User ID and password. myname@mydomain.onmicrosoft.com and the password I created previously worked.
12. I told me it will re-configure Outlook, MS Office and also downloading a single sign on product.
13. Then it asked me to restart my PC.
14. After re-start it finished, the install and told me MS Outlook needs manual configuration.
15. I haven’t used Outlook on this desktop before and it had Office 2007 SP1 installed already. I started it up and asked for the auto configuration details. Entered email address in myname@mydomain.onmicrosoft.com format, password and it auto configured Outlook without any pain.
16. I went back and tried log in again to Lync 2010 for Office 365. I googled the issue and it seems I’m not the only one got confused. It turned out the Sign in address and login name are both the same. myname@mydomain.onmicrosoft.com and the password I specifies earlier. OK, this worked finally.
17. I fired up MS Word and created a small document. When I went to Save to Office Live it tells me to “Sign in to Office Live Workspace beta”. Clicked on Sign in and nothing happened. Tried a couple of times, re-started my PC, but still, I was unable to save documents to the cloud.
18. I logged in to the Office365 Management portal and created a word document from there. The On-line version looks very much like the real MS Word, but most options are missing. For example, I can add tables, but I cannot edit background colors or make any fancy change on the table properties, like shadow effect.
19. Then I tried to save the document created on-line and edit it using my local MS Word. It worked, but I still wasn’t able to save the modifications back to the cloud.
20. I started up MS Excel to see if I get better luck with it than MS Word. I couldn’t find the option “Save to Office Live”, just the standard save options.

Conclusion:

I have spent just over 5 hours on testing out Office365 and although it shows some potential I think it has a long way to go before it can be used as a serious business productivity tool Well, it is only beta and MS may fix up some of the issues I have experienced. The other issue for me was the speed. I have a decent Internet connection yet using Office365 beta was annoyingly slow for me.

I look forward testing it again in a few month time once it is released in Australia.

Steven

• KB974090
• KB975512
• KB979223
• KB981603
• KB981872
• KB982860
• KB983458
• KB983528
• KB983620
• KB2028827

Cheers,

Leo

Hi,

Does your user’s libraries folder contain two ‘folders’ for each library after you’ve performed a Group Policy folder redirection? One pointing to the original c:\Users\%username% location and the other to the correct share assigned via GPO?

If that’s the case, it looks a little bit like this:

Jonathan Bennett documented the fix here however it is left up to the user to compile the file. I’ve saved you the trouble. Here is the file you need.

Run it as part of you user’s login scripts or assign it to the Startup folder in the Start Menu via Group Policy Preferences (my preferred method).

Ta,

Leo

I recently upgraded my VirtualCenter server to 4.0.1 running on 2008 R2. I’m very happy with it, except the old way of running scheduled powershell tasks in 2003, no longer works. This is my script to delete all snapshots older than 7 days:

Add-PSSnapin VMware.VimAutomation.Core
Connect-VIServer VCservername -User UserName -Password Password

Get-VM | Get-Snapshot | Where { $_.Created -lt (Get-Date).AddDays(-7)} | remove-snapshot -confirm:$false

The way to run this script (assuming it’s called Delete-Snapshots.ps1 and sits in C:\Windows\Scripts) is to go into the Actions tab of Task Scheduler and change the program settings to:

• Program/script: %SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe
• Add arguments (optional): -noninteractive -nologo c:\windows\scripts\delete-snapshots.ps1

Alternatively, here is the xml file dump you can import into Task Scheduler (delete-snapshots.xml) – obviously you’ll need to change usernames to run the service as.

Ta,

Leo

… only to be told that vCenter won’t install without your old certificates in the All Users profile which can be found in

• Windows 2000/2003/XP: c:\Documents and Settings\All Users\Application Data\VMware\VMware VirtualCenter\SSL\
• Windows 2008/2008/Vista/7: c:\programdata\VMware\VMware VirtualCenter\SSL

VMware’s vCenter installer says you can’t do it unless you have a certificate back up or have already imported the certificates into the new server at the default locations (above)

That’s a lie. You can do it. You just have to accept that it’s going to be a little bit more manual and you’ll have to reconnect all your ESX/i hosts afterwards.

Here’s how to do it:

• Blow away your restored database (but keep the backup)
• Create a new database with a SQL db_owner user identical to the username of the SQL db_owner user on the old server.
• Create a new SQL 64-bit DSN
• Install vCenter as a brand new install.
• Stop the VMware VirtualCenter service
• Stop the VMware WebServices service
• Open SQL Management Studio and restore the backed up DB over the top of the new DB
• If you are using SQL authentication open a new query window and execute the following statement:
  sp_change_users_login “auto_fix”, ‘vmware’
  This marries the orphaned SQL db_owner in the database to the newly created login in point 2 above
• Open the command prompt and in the installation directory of VirtualCenter, run the following:
  vpxd -p
  You will be asked to input a password – use the same password as that of the SQL db_owner user for your database. This re-initializes/re-encrypts the database with the newly installed certificates and removes references to the old certificates which got blown away during the OS reinstall.

At this point you can fire up your vCenter and reconnect all your hosts – this is a manual task but once finished, everything will be fine.

What I haven’t been tested is the effect of doing this on plugins such as Update Manager that share column space in the vCenter DB (yes you can separate the DBs but not all people do). Thankfully, a quick google revealed this document in VMware’s KB which might help – it has to do with the password defaults for certificates, not the password defaults for the DB, so I might be leading you up the wrong alley.

Nonetheless, this neatly avoids the issue of restores, or having to re-implement all the customisations in your VC (including dvSwitches).
Cheers,

Leo

We have close to 50 LUNs presented to 40 hosts at a client site. We also need to perform maintenance which will cause downtime on our core FC switch. This means there will be a massive failover and potential path thrashing due to lack of path balance on all VM hosts at once.

Here’s what we have:

ESX Server with 2 HBAs -> 4 Paths -> Fixed path policy -> Active/Active Storage Array

Each HBA has 2 paths to the Active/Active array. This means that I should be able to migrate all paths to either of these two paths on one of the HBAs.

So here’s how we do it:

#!/bin/bash
COUNTER=1
for LUN in $(esxcfg-mpath -l | grep "has 4 paths" | awk '{print $2}')
   do
      esxcfg-mpath --lun=${LUN} --path=$(esxcfg-mpath -q --lun=${LUN} | grep FC | awk '{print $4}' | awk '{print NR "S\t " $0}' | grep ${COUNTER}S | awk '{print $2}') --preferred
      COUNT=`expr ${COUNTER} + 1`
      COUNTER=${COUNT}
      if [[ ${COUNTER} -gt 2 ]]
      then
         COUNTER="1"
      fi
   done
for HBA in `esxcfg-info -w | grep vmhba | awk '{print $3}' | grep -e 'vmhba\+[1-9]' -o`
   do
      esxcfg-rescan $HBA
   done
/usr/bin/vmware-vim-cmd hostsvc/storage/refresh

In the above case what you’re seeing is a loadbalance across paths 1 and 2 of the lowest HBA number seen for each path by esxcfg-mpath (esxcfg-mpath sorts HBA-path configs from lowest HBA number to highest HBA number)

Then there is an esxcfg-rescan operation on all HBAs of the host and a storage refresh. At this point, all your paths are on the two paths of the first HBA.

If you want to take down the first HBA and move all paths to the second HBA, it’s simply a slight script modification to increment the COUNTER variable:

#!/bin/bash
COUNTER=3
for LUN in $(esxcfg-mpath -l | grep "has 4 paths" | awk '{print $2}')
   do
      esxcfg-mpath --lun=${LUN} --path=$(esxcfg-mpath -q --lun=${LUN} | grep FC | awk '{print $4}' | awk '{print NR "S\t " $0}' | grep ${COUNTER}S | awk '{print $2}') --preferred
      COUNT=`expr ${COUNTER} + 1`
      COUNTER=${COUNT}
      if [[ ${COUNTER} -gt 4 ]]
      then
         COUNTER="3"
      fi
   done
for HBA in `esxcfg-info -w | grep vmhba | awk '{print $3}' | grep -e 'vmhba\+[1-9]' -o`
   do
      esxcfg-rescan $HBA
   done
/usr/bin/vmware-vim-cmd hostsvc/storage/refresh

In this case, the paths will vary between paths 3 and 4 which represent the two paths of the second HBA listed by esxcfg-mpath.

Thanks to Duncan Epping of yellow-bricks.com for some of the code

Cheers,

Leo

You can apparently follow me @lraikhman. I’m not sure what pearls of wisdom I can provide in 140 characters but if you feel up to it, I’m sure I can entertain you with geek frustration at every day Project Management stupidity.

Ta,

Leo

Wish me luck…

Cheers,

Leo