Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add vTPM to VMware provisioning #3602

Open
wants to merge 5 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -12,8 +12,8 @@ To use the CLI instead of the {ProjectWebUI}, see the xref:cli-Adding_VMware_Det
. In the *CPUs* field, enter the number of CPUs to allocate to the host.
. In the *Cores per socket* field, enter the number of cores to allocate to each CPU.
. In the *Memory* field, enter the amount of memory in MiB to allocate to the host.
. In the *Firmware* checkbox, select either _BIOS_ or _UEFI_ as firmware for the host.
By default, this is set to _automatic_.
. In the *Firmware* field, select the firmware type for the host.
Lennonka marked this conversation as resolved.
Show resolved Hide resolved
By default, this is set to *automatic*.
. In the *Cluster* list, select the name of the target host cluster on the VMware environment.
. From the *Resource pool* list, select an available resource allocations for the host.
. In the *Folder* list, select the folder to organize the host.
Expand All @@ -28,6 +28,8 @@ By default, this is set to _automatic_.
. From the *SCSI controller* list, select the disk access method for the host.
. If you want to use eager zero thick provisioning, select the *Eager zero* checkbox.
By default, the disk uses lazy zero thick provisioning.
. Optional: Select *Virtual TPM* if you want to add a Virtual Trusted Platform Module for enhanced security.
This is compatible with UEFI firmware only.
. From the *Network Interfaces* list, select the network parameters for the host's network interface.
At least one interface must point to a {SmartProxy}-managed network.
. Optional: Click *Add Interface* to create another network interfaces.
Expand All @@ -46,7 +48,7 @@ $ hammer compute-profile create --name "_My_Compute_Profile_"
[options="nowrap" subs="+quotes"]
----
$ hammer compute-profile values create \
--compute-attributes "cpus=1,corespersocket=2,memory_mb=1024,cluster=MyCluster,path=MyVMs,start=true" \
--compute-attributes "cpus=1,corespersocket=2,memory_mb=1024,cluster=MyCluster,path=MyVMs,virtual_tpm=true,start=true" \
--compute-profile "_My_Compute_Profile_" \
--compute-resource "_My_VMware_" \
--interface "compute_type=VirtualE1000,compute_network=mynetwork \
Expand Down
9 changes: 7 additions & 2 deletions guides/common/modules/proc_creating-a-vmware-user.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -3,9 +3,9 @@

The VMware vSphere server requires an administration-like user for {ProjectServer} communication.
For security reasons, do not use the `administrator` user for such communication.
Instead, create a user with the following permissions:
Instead, create a user with the required privileges.

For VMware vCenter Server version 8.0 or 7.0, set the following permissions:
Lennonka marked this conversation as resolved.
Show resolved Hide resolved
In VMware vCenter Server version 8.0 or 7.0, set the following privileges:

* All Privileges -> Datastore -> Allocate Space, Browse datastore, Update Virtual Machine files, Low level file operations
* All Privileges -> Network -> Assign Network
Expand All @@ -15,3 +15,8 @@ For VMware vCenter Server version 8.0 or 7.0, set the following permissions:
* All Privileges -> Virtual Machine -> Edit Inventory (All)
* All Privileges -> Virtual Machine -> Provisioning (All)
* All Privileges -> Virtual Machine -> Guest Operations (All)

Additionally, if you want to create virtual machines with a Virtual Trusted Platform Module (TPM) for enhanced security, set the following privileges:

* All Privileges -> Cryptographic operations -> Clone, Encrypt, Encrypt new, Migrate, Register VM
* All Privileges -> Cryptographic operations -> Direct Access {endash} required to open a console session
Lennonka marked this conversation as resolved.
Show resolved Hide resolved