Supervisor enablement is blocked when vLCM image compliance fails on ESXi hosts because of a noncompliant image, incompatible hosts, or legacy BIOS boot.

KB 393663: Fix Supervisor Deployment Stuck at “Installed and Started Kubernetes Node Agent on the ESXi Host”

TL;DR When vSphere Supervisor deployment stalls at Installed and Started Kubernetes Node Agent on the ESXi Host, do not treat the message itself as the root cause. For the failure documented in Broadcom KB 393663, the important evidence is repeated Apply Solution activity plus vCenter WCP log entries stating that the solution specification in the … Explore: KB 393663: Fix Supervisor Deployment Stuck at “Installed…

Architecture showing protected workloads and recovery control-plane services feeding dependency-aware VCF 9.1 recovery across management and application layers.

Protecting the Recovery Control Plane: A VCF 9.1 Management-Component Backup and Fleet DR Runbook

TL;DR Protecting workload virtual machines does not automatically protect the VMware Cloud Foundation services needed to discover, authorize, network, orchestrate, and validate their recovery. A complete VCF 9.1 recovery strategy needs several distinct mechanisms: native file-based backups for components such as SDDC Manager, vCenter Server, and NSX Manager; image-based protection for VCF Operations; backup and … Explore: Protecting the Recovery Control Plane: A VCF 9.1…

Workflow diagram illustrating The Runbook at a Glance for The vCenter Log Partition Runbook: Find Growth, Preserve Evidence, Restore Headroom.

The vCenter Log Partition Runbook: Find Growth, Preserve Evidence, Restore Headroom

A full /storage/log partition on a vCenter Server Appliance is not just a housekeeping problem. It is a management-plane risk. In a standalone vSphere environment, it can interrupt administration, log collection, patching, and service stability. In VMware Cloud Foundation, the blast radius is larger because vCenter is tied into SDDC Manager workflows, workload domain lifecycle … Explore: The vCenter Log Partition Runbook: Find Growth, Preserve…

Conceptual diagram illustrating The Mental Model: vCLS Is Cluster Plumbing, Not Workload for vCLS Retreat Mode: When to Use It, What It Breaks, and How to Exit Cleanly.

vCLS Retreat Mode: When to Use It, What It Breaks, and How to Exit Cleanly

Disable vCLS on a Cluster via Retreat Mode KB 316514 vSphere Cluster Services usually stay in the background until they get in the way of something operational. Most teams first notice vCLS when a cluster task is blocked, a warning appears after maintenance, or a handful of small system VMs show up and someone asks … Explore: vCLS Retreat Mode: When to Use It, What…

Decision diagram illustrating Decision Workflow: Do Not Start With the Reset for When Fibre Channel Paths Lie: A Safe Fabric Login Reset Runbook for ESXi.

When Fibre Channel Paths Lie: A Safe Fabric Login Reset Runbook for ESXi

There are storage incidents where the host looks half-recovered. The fabric switch is back online. The link light is good. The array port is healthy. Some paths may even show up again. But inside ESXi, the storage view still does not match reality. A datastore has fewer paths than expected. An RDM-backed workload is not … Explore: When Fibre Channel Paths Lie: A Safe Fabric…

Diagram illustrating Scenario for VM Network Troubleshooting from Guest OS to Uplink: A Layer by Layer VMware Runbook.

VM Network Troubleshooting from Guest OS to Uplink: A Layer by Layer VMware Runbook

Virtual machine network problems rarely arrive with a clean label. The ticket usually says something like “the VM is unreachable,” “the application cannot connect,” “ping fails,” “internet access is down,” or “VMs on different hosts cannot talk.” The underlying cause might be inside the guest OS, on the VM’s virtual NIC, in the port group, … Explore: VM Network Troubleshooting from Guest OS to Uplink:…

Diagram illustrating Objective for Patching vCenter Through VAMI Without Turning It Into a Recovery Event.

Patching vCenter Through VAMI Without Turning It Into a Recovery Event

Patching vCenter should not feel dramatic. The workflow in the Appliance Management Interface is straightforward: log in to VAMI, check for updates, stage, install, validate. Broadcom KB 316584 documents that basic path for vCenter Server 7.x and 8.x, including two patching options: using a URL-based repository or mounting a patch ISO as a local CD-ROM … Explore: Patching vCenter Through VAMI Without Turning It Into…

Diagram illustrating PDL and APD at a Glance for PDL vs APD: The Storage Failure Model Every vSphere Operator Needs.

PDL vs APD: The Storage Failure Model Every vSphere Operator Needs

Storage failures in vSphere are rarely just “storage is down.” That phrase may be accurate from the application owner’s point of view, but it is not precise enough for the operator who has to decide what happens next. A host that has lost all paths to a datastore behaves differently from a host that has … Explore: PDL vs APD: The Storage Failure Model Every…

Diagram illustrating Symptoms and Risk Signals for Using vCert Without Guesswork: A vCenter Certificate Recovery Runbook.

Using vCert Without Guesswork: A vCenter Certificate Recovery Runbook

vCenter certificate failures tend to show up at the worst possible time: during an upgrade precheck, after a maintenance window has already started, when services will not start cleanly, or when a certificate alarm has been ignored long enough to become someone else’s emergency. The mistake is treating certificate recovery as a button-click exercise. The … Explore: Using vCert Without Guesswork: A vCenter Certificate Recovery…

Diagram illustrating VMCA as a Trust Factory, Not Just a Certificate Store for The VMCA Reset Decision: When Regenerating vSphere Certificates Is the Right Move.

The VMCA Reset Decision: When Regenerating vSphere Certificates Is the Right Move

Certificates in vSphere are easy to underestimate until they become the reason vCenter will not authenticate, services will not start cleanly, NSX loses trust in its Compute Manager, or SDDC Manager stops interacting with the management domain the way it should. That is why a VMCA reset should not be treated as a generic “renew … Explore: The VMCA Reset Decision: When Regenerating vSphere Certificates…

Conceptual diagram illustrating The Safer Operating Model for From Fixcerts to vCert: A Safer vCenter Certificate Recovery Path.

From Fixcerts to vCert: A Safer vCenter Certificate Recovery Path

Quick answer: Fixcerts or vCert? Broadcom has deprecated the Fixcerts certificate-replacement script and directs operators to vCert. Identify the affected certificates and confirm your backup and rollback plan before remediation. The current vCert guidance says the tool is intended for use under Broadcom Global Support direction. Start with prerequisites and safety checks, then review post-recovery … Explore: From Fixcerts to vCert: A Safer vCenter Certificate…