deniedvmware

GracefulShutdownofVMwareESXiusingNetworkShutdownModuleConfiguringNetworkShutdownModuleforgracefulshutdownofESXihosts21TableofContents2Introduction33Deployment33.
1Prerequisites.
33.
2PowerShellConfiguration.
43.
2.
1PowerShellExecutionPolicy.
43.
2.
2HandlingInvalidCertificates.
44ShutdownConfigurations54.
1StandaloneESXiShutdown.
54.
1.
1StandaloneESXiShutdownProcedure74.
2ESXiClusterShutdown84.
2.
1ClusterShutdownProcedure.
932IntroductionNetworkShutdownModule3.
07includesPowerShellscriptswhichallowforgracefulshutdownofVMwareESXihostsandtheirVirtualMachines(VMs)inthecaseofUPSevents.
Thisdocumentdescribeshowtoconfigureyourenvironmenttoenabletheuseofthesescripts.
BydefaultinaVMwareHighAvailabilityClusterenvironmenttheVirtualMachineStartup/Shutdownfeatureisdisabledbydesign.
ThismeansthatwhenNetworkShutdownModuleissuesacommandtoshutdownESXihostsinresponsetoacriticalUPSeventtheVMsrunningonthosehostswillnotbeshutdowncleanly.
NOTE:Thescriptsshouldbetestedinanon–productionenvironmentbeforeuseonproductionservers.
3DeploymentFigure1-ESXiDeploymentAnexampledeploymentforESXiprotectionisshowninFigure1.
OneormoreUPSunitswillprovidepowertotheESXiandtheNetworkShutdownModulehosts.
TheNetworkShutdownModulehostisconfiguredtomonitortheUPS(s)andwhenaUPSeventoccurs,runstheshutdownscriptstogracefullyshutdownthevirtualmachinesandtheESXIhost.
3.
1PrerequisitesTheNetworkShutdownModuleHostmustberunningacompatibleWindowsServeroperatingsystem.
Seeproductdocumentationforalistofcompatibleoperatingsystems.
TheshutdownscriptsrequireWindowsPowerShell.
Downloadandinstallationinstructionsforyouroperatingsystemcanbefoundonwww.
microsoft.
com/powershell.
TheshutdownscriptsrequireVMwarevSpherePowerCLI.
Downloadandinstallationinstructionsforyouroperatingsystemcanbefoundonwww.
vmware.
com/go/powercli.
43.
2PowerShellConfiguration3.
2.
1PowerShellExecutionPolicyPleasebyawarethattheprovidedshutdownscriptswillsettheexecutionpolicyforPowerShellto'RemoteSigned'.
MoreinformationonexecutionpoliciescanbeMicrosoftPowerShelldocumentation:http://us/library/ee176961.
aspx3.
2.
2HandlingInvalidCertificatesTheshutdownscriptsmakeuseoftheVMtothetargetESXihostorvCenterServerinvalidoruntrustedSSLcertificate,thecurrentimplementationatthetimeofwritingwillissueawarning.
AnexampleofsuchawarningisgiveInvalidCertificateActionpolicy.
Atthetimeofwritingthisguide,thedefaultpolicyis'unset',whichwillresultinawarningbeingissued.
Figure2-InvalidCertificateWarningInfutureversionsofthePowerCLI,foraddedsecurity,theuntrusteddenied.
Toavoidthissituation,werecommendyousetanInvalidCertificateActiononeofeither'Ignore'or'Fail'.
Ifthepolicyissetto'fail',thecmdletwillnotestablishaconnectionifthecertificateisnotvalid.
Inthiscase,youmustuploadavalidcertificatetotheESXihostensurethatshutdownprotectioncanbeprovided.
PowerShellConfigurationPowerShellExecutionPolicyPleasebyawarethattheprovidedshutdownscriptswillsettheexecutionpolicyforMoreinformationonexecutionpoliciescanbefoundinMicrosoftPowerShelldocumentation:http://technet.
microsoft.
com/en-HandlingInvalidCertificatesTheshutdownscriptsmakeuseoftheVMwarePowerCLIConnect-VIServercmdletorvCenterServerviaasecurehttpschannel.
IftheserverpresentsaninvalidoruntrustedSSLcertificate,thecurrentimplementationatthetimeofwritingwillissueAnexampleofsuchawarningisgiveninFigure2.
Thisisdefinedinlinewiththepolicy.
Atthetimeofwritingthisguide,thedefaultpolicyis'unset',whichwillresultinawarningbeingissued.
InfutureversionsofthePowerCLI,foraddedsecurity,theuntrustedconnectionmaybedenied.
Toavoidthissituation,werecommendyousetanInvalidCertificateActionIfthepolicyissetto'fail',thecmdletwillnotestablishaconnectionifthecertificateisnotInthiscase,youmustuploadavalidcertificatetotheESXihostorvCenterServerensurethatshutdownprotectioncanbeprovided.
PleasebyawarethattheprovidedshutdownscriptswillsettheexecutionpolicyforfoundinVIServercmdlettoconnectviaasecurehttpschannel.
IftheserverpresentsaninvalidoruntrustedSSLcertificate,thecurrentimplementationatthetimeofwritingwillissueThisisdefinedinlinewiththepolicy.
Atthetimeofwritingthisguide,thedefaultpolicyis'unset',connectionmaybedenied.
Toavoidthissituation,werecommendyousetanInvalidCertificateActionpolicytoIfthepolicyissetto'fail',thecmdletwillnotestablishaconnectionifthecertificateisnotorvCenterServerto5Withthepolicyissetto'ignore',thecmdletwillestablishtheconnectionwithouttakingintoaccountthatthecertificateisinvalid.
Figure3showsanexampleofsettingtheInvalidCertificateActionpolicy.
Figure3-SettingtheInvalidCertificateActionSeethePowerCLIcmdletreferenceformoreinformationonboththeConnectSet-PowerCLIConfigurationcmdlets.
Thisisavailableat:https://pubs.
vmware.
com/vsphere55/topic/com.
vmware.
powercli.
cmdletref.
doc/Overview.
html4ShutdownConfigurati4.
1StandaloneESXiShutdownToconfiguregracefulshutdownofstandaloneESXihosts,usethefollowingsteps:1.
AccessthevSphereClient,selectyourESXihost,thentheconfigurationtab.
2.
ClickontheVirtualMachineStartup/Shutdownlink.
Click'properttodisplaythe'VirtualMachineStartupandShutdown'dialog,asshownin3.
Ensurethat"Allowvirtualmachinestostartandstopchecked.
4.
Use'MoveUp'tomoveVMsintotheinthe'ManualStartup'grouparenotgracefullystartedorstoppedwiththeESXihost.
5.
EnsuretheVMsarelistedorderoftheVMs.
Shutdownusesthereverseofthisorder,sothelastonthelistwillbethefirsttoshutdown.
6.
Changethe'ShutdownAction'tospecify'GuestShutdown'.
ClickOK,todismissthisdialog.
7.
EnsurethatVMwareToolsareinstalledoneachVM.
ThisisrequiredforgracefulshutdownoftheVM.
Withthepolicyissetto'ignore',thecmdletwillestablishtheconnectionwithouttakingintoficateisinvalid.
showsanexampleofsettingtheInvalidCertificateActionpolicy.
SettingtheInvalidCertificateActionSeethePowerCLIcmdletreferenceformoreinformationonboththeConnect-VIServerandPowerCLIConfigurationcmdlets.
Thisisavailableat:pubs.
vmware.
com/vsphere-55/topic/com.
vmware.
powercli.
cmdletref.
doc/Overview.
htmlShutdownConfigurationsShutdownToconfiguregracefulshutdownofstandaloneESXihosts,usethefollowingsteps:AccessthevSphereClient,selectyourESXihost,thentheconfigurationtab.
ClickontheVirtualMachineStartup/Shutdownlink.
Click'properties'atthetoprighttodisplaythe'VirtualMachineStartupandShutdown'dialog,asshowninEnsurethat"Allowvirtualmachinestostartandstopautomaticallywiththesystem"isse'MoveUp'tomoveVMsintothe'AnyOrder',or'AutomaticStartup'groups.
VMsinthe'ManualStartup'grouparenotgracefullystartedorstoppedwiththeESXihost.
arelistedintheorderyouwant.
NotethatthisrepresentsthestartuporderoftheVMs.
Shutdownusesthereverseofthisorder,sothelastonthelistwillbethefirsttoshutdown.
Changethe'ShutdownAction'tospecify'GuestShutdown'.
ClickOK,todismissthisEnsurethatVMwareToolsareinstalledoneachVM.
ThisisrequiredforgracefulWiththepolicyissetto'ignore',thecmdletwillestablishtheconnectionwithouttakingintoVIServerandToconfiguregracefulshutdownofstandaloneESXihosts,usethefollowingsteps:AccessthevSphereClient,selectyourESXihost,thentheconfigurationtab.
ies'atthetoprighttodisplaythe'VirtualMachineStartupandShutdown'dialog,asshowninFigure4.
automaticallywiththesystem"is',or'AutomaticStartup'groups.
VMsinthe'ManualStartup'grouparenotgracefullystartedorstoppedwiththeESXihost.
.
NotethatthisrepresentsthestartuporderoftheVMs.
Shutdownusesthereverseofthisorder,sothelastonthelistwillChangethe'ShutdownAction'tospecify'GuestShutdown'.
ClickOK,todismissthisEnsurethatVMwareToolsareinstalledoneachVM.
Thisisrequiredforgraceful68.
EnsurethatthePowerControlsforeachVMarecorrect.
ForeachVM,rightclickandselectEditSettings>OptionsTab>VMwareTools.
UnderPowerControlsStop,ensurethat'ShutDownGuest'isdisplayed.
AnexampleisdisplayedinFigure5.
9.
OntheNetworkShutdownModuleHost,installthePowerShellandPowerCLIprerequisites,asoutlinedinsection3.
1.
10.
InstallSchneiderElectricNetworkShutdownModule3.
07onasupportedWindowsServerOS.
OncecompletetheshutdownscriptscanbefoundunderC:\ProgramFiles\SE\NetworkShutdownModule\esxi,oronthecustompathchosenatinstalltime.
11.
Open"esxi_shutdown.
bat"inatexteditorandeditthefollowingscriptvariablesasrequired:a.
SERVER:TheIPaddressoftheESXiHost.
b.
USERNAME:UseraccountwithAdministratorprivilegesfortheESXiHost.
c.
PASSWORD:Passwordfortheuseraccountabove.
d.
OSSHUTDOWNDELAY:Adelayinseconds.
ThisdelayispassedtotheshutdownprocedureoftheNSMhost;togiveusersawarningthatshutdownisimminent.
12.
Verifythatthepathsspecifiedarecorrectandeditthemasrequired.
Thedefaultpathsgivenmaybedifferentdependingonyourhost,e.
g.
ifyouareusinga32bitor64bitversionofWindows.
a.
POWERSHELL_PATH:Thepathtothepowershell.
exeexecutable.
b.
VMWARE_PATH:Thepathtothevim.
psc1fileinstalledaspartoftheVMwarePowerCLI.
c.
SCRIPT_PATH:Thepathtotheshutdown.
ps1scriptinstalledwithNetworkShutdownModule.
d.
LOG_PATH:Apathtoafolderwherescriptlogswillbecreated.
Pleaseensurethisisalocalwritablelocation,otherwisetheshutdownscriptwillfailtocreateanexecutionlog.
13.
IntheNetworkShutdownModuleuserinterfacegototheActions(advanced)->SystemShutdown->Settingspage.
14.
Enterthefullpathtoesxi_shutdown.
batunder"Commandline".
Ifthispathcontainsspaces,ensurethefullpathiswithinquotes.
15.
GototheShutdownsettingspage,anddeselect"UsecentralconfigurationprovidedbyNetworkManagementCard/Proxy".
16.
Enteradurationvalueinsecondsunder"Shutdownduration".
NOTE:ThisvaluemustbelongenoughtoallowalloftheVMstobeshutdowncleanlyfollowedbytheESXiandNetworkShutdownModulehosts.
17.
GototheActions(advanced)->SystemShutdown->Eventspage.
Select/CheckaNotificationAlarmtoinitiatetheshutdown,forexample,UtilityFailureandSavechange(s).
7Figure4-VirtualMachineStartupandShutdown4.
1.
1StandaloneESXiShutdownProcedureTheshutdownsequenceoccursasfollows:1.
UPSgoesonBattery.
2.
Theconfiguredbatfileisexecuted(PowerShellscript(shutdown.
ps1).
3.
ThisscriptattachestotheESXihost,andtriggersaP4.
ThescriptsavesalogofrunningVMstovmlist.
csvinthelogdirectory.
Alogofactionsperformedbythescriptisalsosavedhere.
5.
TheESXihostreactsasitisconfiguredto,andsuspendsorpowersofftheVMs.
6.
TheESXihostthenshuts7.
AfterOSSHUTDOWNDELAYsecondsdown.
8.
OnceallcomputersconnectedtotheUPShavebeenshutdown,theUPSshutsoff(interruptsthesupplyofpowertotheloads)toprotectthebattery.
NOTE:ThisfunctionisnotauthorisedonsomeUPSs.
9.
AssumingtheUPSshutofffunctionisavailable,whenpowerisrestored,theUPSwillrestartprovidingpowertoattachedequipment.
UsingBIOSsettingsontheESXIhostsyoumaybeabletoinitiateasystemstartwhenVirtualMachineStartupandShutdownShutdownProcedureTheshutdownsequenceoccursasfollows:Theconfiguredbatfileisexecuted(esxi_shutdown.
bat),whichcallstheassociatedscript(shutdown.
ps1).
scriptattachestotheESXihost,andtriggersaPowerOffaction.
ThescriptsavesalogofrunningVMstovmlist.
csvinthelogdirectory.
Alogofactionsperformedbythescriptisalsosavedhere.
TheESXihostreactsasitisconfiguredto,andsuspendsorpowersofftheVMs.
sdown.
OSSHUTDOWNDELAYseconds,theNetworkShutdownModulehostOnceallcomputersconnectedtotheUPShavebeenshutdown,theUPSshutsoff(interruptsthesupplyofpowertotheloads)toprotectthebattery.
nisnotauthorisedonsomeUPSs.
AssumingtheUPSshutofffunctionisavailable,whenpowerisrestored,theUPSwillrestartprovidingpowertoattachedequipment.
UsingBIOSsettingsontheESXIhostsyoumaybeabletoinitiateasystemstartwhenpowerisrestored.
shutdown.
bat),whichcallstheassociatedThescriptsavesalogofrunningVMstovmlist.
csvinthelogdirectory.
AlogofactionsTheESXihostreactsasitisconfiguredto,andsuspendsorpowersofftheVMs.
heNetworkShutdownModulehostwillshutOnceallcomputersconnectedtotheUPShavebeenshutdown,theUPSshutsoffAssumingtheUPSshutofffunctionisavailable,whenpowerisrestored,theUPSwillrestartprovidingpowertoattachedequipment.
UsingBIOSsettingsontheESXIhosts8Figure5-VMwareToolsSettings4.
2ESXiClusterShutdownToconfigureshutdownforanESXi1.
InstallthePowerShellandPowerCLIprerequisites,asoutlinedinsection2.
InstallSchneiderElectricNetworkShutdownModule3.
07ServerOS.
OncecompletetheshutdownscriptscanbefoundunderC:Files\SE\NetworkShutdownModule3.
Open"hashutdown.
bat"inatexteditorandeditthefollowingscriptvariablesasrequired:a.
SERVER:TheIPaddressoftheESXihostb.
USERNAME:UseraccountwithAdministratorprivilegesfortheESXihostorvCenterc.
PASSWORD:Passwordfortheuseraccountabove.
d.
DATACENTER:NameofthedatacentrecontainerthatcontainstheCLUSTER.
ESXiClusterShutdownESXiClusterenvironment,usethefollowingsteps:InstallthePowerShellandPowerCLIprerequisites,asoutlinedinsection3.
1InstallSchneiderElectricNetworkShutdownModule3.
07onasupported.
OncecompletetheshutdownscriptscanbefoundunderC:\ProgramNetworkShutdownModule\esxi,oronthecustompathchosenatinstalltime.
Open"hashutdown.
bat"inatexteditorandeditthefollowingscriptvariablesasSERVER:TheIPaddressoftheESXihostorvCenterServer.
USERNAME:UseraccountwithAdministratorprivilegesfortheESXiServer.
PASSWORD:Passwordfortheuseraccountabove.
DATACENTER:Nameofthedatacentrecontainerthatcontainsthe3.
1.
supportedWindowsProgramchosenatinstalltime.
Open"hashutdown.
bat"inatexteditorandeditthefollowingscriptvariablesasUSERNAME:UseraccountwithAdministratorprivilegesfortheESXiDATACENTER:Nameofthedatacentrecontainerthatcontainsthe9e.
CLUSTER:NameoftheclusterthatcontainstheESXihoststobeshutdown.
f.
VMSHUTDOWNDELAY:AVMshutdowndelay,specifiedinseconds.
AfterrequestingaShutDownfortheVM,thescriptwillwaitthislongtoallowtimefortheVMshutdownproceduretocomplete.
Oncethisdelayhaselapsed,aPowerOffcommandisgiven.
ThevalueforthisfieldshouldbesufficientlylongtoallowgracefulshutdownofyourVMs.
g.
OSSHUTDOWNDELAY:Adelayinseconds.
ThisdelayispassedtotheshutdownprocedureoftheNSMhost;togiveusersawarningthatshutdownisimminent.
4.
Verifythatthepathsspecifiedarecorrectandeditthemasrequired.
Thedefaultpathsgivenmaybedifferentdependingonyourhost,e.
g.
ifyouareusinga32bitor64bitversionofWindows.
a.
POWERSHELL_PATH:Thepathtothepowershell.
exeexecutable.
b.
VMWARE_PATH:Thepathtothevim.
psc1fileinstalledaspartoftheVMwarePowerCLI.
c.
SCRIPT_PATH:Thepathtotheshutdown.
ps1scriptinstalledwithNetworkShutdownModule.
d.
LOG_PATH:Apathtoafolderwherescriptlogswillbecreated.
Pleaseensurethisisalocalwritablelocation,otherwisetheshutdownscriptwillfailtocreateanexecutionlog.
5.
IntheNetworkShutdownModuleuserinterfacegototheActions(advanced)->SystemShutdown->Settingspage.
6.
Enterthefullpathtohashutdown.
batunder"Commandline".
Ifthispathcontainsspaces,ensurethefullpathiswithinquotes.
Click"SaveChanges"toapply.
7.
GototheShutdownsettingspage,anddeselect"UsecentralconfigurationprovidedbyNetworkManagementCard/Proxy".
8.
Enteradurationvalueinsecondsunder"Shutdownduration".
Click"SaveChanges"toapply.
NOTE:ThisvaluemustbelongenoughtoallowalloftheVMstobeshutdowncleanlyfollowedbytheESXiandNetworkShutdownModulehosts.
9.
GototheActions(advanced)->SystemShutdown->Eventspage.
Select/CheckaNotificationAlarmtoinitiatetheshutdown,forexample,UtilityFailureandSavechange(s).
4.
2.
1ClusterShutdownProcedureTheshutdownsequenceoccursasfollows:1.
UPSgoesonBattery.
2.
Theconfiguredbatfileisexecuted(hashutdown.
bat),whichcallstheassociatedPowerShellscript(hashutdown.
ps1).
3.
ThisscriptattachestotheESXihostorvCenterServer,andenumeratesthepoweredonVMsinthecluster.
TheseVMsaresavedtothevmlist.
csvfileinthelogdirectory.
a.
PleaseNote:OnlythoseVMswhichareassociatedwithhostswhichareinthe"Connected"or"Maintenance"statesareenumerated.
VMsassociatedwithhostsinthe"Disconnected"or"NotResponding"statescannotbeenumerated,andtheirhostscannotbesafelyshutdownbythisscript.
4.
Thescriptattemptstoshutdowneachvirtualmachineinthecluster.
10NOTE:VMwaretoolsmustbeinstalledoneachVM,otherwiseaPowerOffcommandissent.
5.
AfterVMSHUTDOWNDELAYseconds,thescriptchecksforanyremainingVMsthatarepoweredonandissuesapoweroffcommandtothosethatarestillrunning.
ThisisnecessarytoallowtheESXihost(s)toentermaintenancemode.
6.
IftheESXihostisinthe"Connected"state,thescriptwillthencommandtheESXihost(s)toentermaintenancemode.
7.
ThentheESXihostsareshutdown.
8.
AfterOSSHUTDOWNDELAYseconds,theNetworkShutdownModulehostwillshutdown.
TheNetworkShutdownModulehostwillalwaysshutdownafterallESXihostshaveshutdown.
9.
OnceallcomputersconnectedtotheUPShavebeenshutdown,theUPSshutsoff(interruptsthesupplyofpowertotheloads)toprotectthebattery.
NOTE:ThisfunctionisnotauthorisedonsomeUPSs.
10.
AssumingtheUPSshutofffunctionisavailable,whenpowerisrestored,theUPSwillrestartprovidingpowertoattachedequipment.
UsingBIOSsettingsontheESXihostsyoumaybeabletoinitiateasystemstartwhenpowerisrestored.
NOTE:ESXihostswillpowerupinmaintenancemode.
**ENDOFDOCUMENT**