VMware virtualization environments 编辑

Follow this guidance if you use VMware to provide virtual machines.

Install vCenter Server and the appropriate management tools. (No support is provided for vSphere vCenter Linked Mode operation.)

If you plan to use MCS, do not disable the Datastore Browser feature in vCenter Server (described in https://kb.vmware.com/s/article/2101567). If you disable this feature, MCS does not work correctly.

Required privileges

Create a VMware user account and one or more VMware roles with a set or all of the privileges listed below. Base the roles’ creation on the specific level of granularly required over the user’s permissions to request the various Citrix Virtual Apps and Desktops operations at any time. To grant the user specific permissions at any point, associate them with the respective role, at the DataCenter level at a minimum.

The following tables show the mappings between Citrix Virtual Apps and Desktops operations and the minimum required VMware privileges.

Add connections and resources

SDKUser interface
System.Anonymous, System.Read, and System.ViewAdded automatically. Can use the built-in read-only role.

Provision machines (Machine Creation Services)

SDKUser interface
Datastore.AllocateSpaceDatastore > Allocate space
Datastore.BrowseDatastore > Browse datastore
Datastore.FileManagementDatastore > Low level file operations
Network.AssignNetwork > Assign network
Resource.AssignVMToPoolResource > Assign virtual machine to resource pool
VirtualMachine.Config.AddExistingDiskVirtual machine > Configuration > Add existing disk
VirtualMachine.Config.AddNewDiskVirtual machine > Configuration > Add new disk
VirtualMachine.Config.AdvancedConfigVirtual machine > Configuration > Advanced
VirtualMachine.Config.RemoveDiskVirtual machine > Configuration > Remove disk
VirtualMachine.Interact.PowerOffVirtual machine > Interaction > Power Off
VirtualMachine.Interact.PowerOnVirtual machine > Interaction > Power On
VirtualMachine.Inventory.CreateFromExistingVirtual machine > Inventory > Create from existing
VirtualMachine.Inventory.CreateVirtual machine > Inventory > Create new
VirtualMachine.Inventory.DeleteVirtual machine > Inventory > Remove
VirtualMachine.Provisioning.CloneVirtual machine > Provisioning > Clone virtual machine
VirtualMachine.State.CreateSnapshotvSphere 5.0, Update 2 and vSphere 5.1, Update 1: Virtual machine > State > Create snapshot. vSphere 5.5: Virtual machine > Snapshot management > Create snapshot

If you want the VMs you create to be tagged, add the following permissions for the user account.

To ensure that you use a clean base image for creating new VMs, tag VMs created with Machine Creation Services to exclude them from the list of VMs available to use as base images.

SDKUser interface
Global.ManageCustomFieldsGlobal > Manage custom attributes
Global.SetCustomFieldGlobal > Set custom attribute

Provision machines (Citrix Provisioning)

All privileges from Provision machines (Machine Creation Services) and the following.

SDKUser interface
VirtualMachine.Config.AddRemoveDeviceVirtual machine > Configuration > Add or remove device
VirtualMachine.Config.CPUCountVirtual machine > Configuration > Change CPU Count
VirtualMachine.Config.MemoryVirtual machine > Configuration > Memory
VirtualMachine.Config.SettingsVirtual machine > Configuration > Settings
VirtualMachine.Provisioning.CloneTemplateVirtual machine > Provisioning > Clone template
VirtualMachine.Provisioning.DeployTemplateVirtual machine > Provisioning > Deploy template

Power management

SDKUser interface
VirtualMachine.Interact.PowerOffVirtual machine > Interaction > Power Off
VirtualMachine.Interact.PowerOnVirtual machine > Interaction > Power On
VirtualMachine.Interact.ResetVirtual machine > Interaction > Reset
VirtualMachine.Interact.SuspendVirtual machine > Interaction > Suspend

Image update and rollback

SDKUser interface
Datastore.AllocateSpaceDatastore > Allocate space
Datastore.BrowseDatastore > Browse datastore
Datastore.FileManagementDatastore > Low level file operations
Network.AssignNetwork > Assign network
Resource.AssignVMToPoolResource > Assign virtual machine to resource pool
VirtualMachine.Config.AddExistingDiskVirtual machine > Configuration > Add existing disk
VirtualMachine.Config.AddNewDiskVirtual machine > Configuration > Add new disk
VirtualMachine.Config.AdvancedConfigVirtual machine > Configuration > Advanced
VirtualMachine.Config.RemoveDiskVirtual machine > Configuration > Remove disk
VirtualMachine.Interact.PowerOffVirtual machine > Interaction > Power Off
VirtualMachine.Interact.PowerOnVirtual machine > Interaction > Power On
VirtualMachine.Interact.ResetVirtual machine > Interaction > Reset
VirtualMachine.Inventory.CreateFromExistingVirtual machine > Inventory > Create from existing
VirtualMachine.Inventory.CreateVirtual machine > Inventory > Create new
VirtualMachine.Inventory.DeleteVirtual machine > Inventory > Remove
VirtualMachine.Provisioning.CloneVirtual machine > Provisioning > Clone virtual machine

Delete provisioned machines

SDKUser interface
Datastore.BrowseDatastore > Browse datastore
Datastore.FileManagementDatastore > Low level file operations
VirtualMachine.Config.RemoveDiskVirtual machine > Configuration > Remove disk
VirtualMachine.Interact.PowerOffVirtual machine > Interaction > Power Off
VirtualMachine.Inventory.DeleteVirtual machine > Inventory > Remove

Create AppDisks

Valid for VMware vSphere minimum version 5.5 and XenApp and XenDesktop minimum version 7.8.

SDKUser interface
Datastore.AllocateSpaceDatastore > Allocate space
Datastore.BrowseDatastore > Browse datastore
Datastore.FileManagementDatastore > Low level file operations
VirtualMachine.Config.AddExistingDiskVirtual machine > Configuration > Add existing disk
VirtualMachine.Config.AddNewDiskVirtual machine > Configuration > Add new disk
VirtualMachine.Config.AdvancedConfigVirtual machine > Configuration > Advanced
VirtualMachine.Config.EditDeviceVirtual machine > Configuration > Modify Device Settings
VirtualMachine.Config.RemoveDiskVirtual machine > Configuration > Remove disk
VirtualMachine.Interact.PowerOffVirtual machine > Interaction > Power Off
VirtualMachine.Interact.PowerOnVirtual machine > Interaction > Power On

Delete AppDisks

Valid for VMware vSphere minimum version 5.5 and XenApp and XenDesktop minimum version 7.8.

SDKUser interface
Datastore.BrowseDatastore > Browse datastore
Datastore.FileManagementDatastore > Low level file operations
VirtualMachine.Config.RemoveDiskVirtual machine > Configuration > Remove disk
VirtualMachine.Interact.PowerOffVirtual machine > Interaction > Power Off

Obtain and import a certificate

To protect vSphere communications, Citrix recommends that you use HTTPS rather than HTTP. HTTPS requires digital certificates. Citrix recommends you use a digital certificate issued from a certificate authority in accordance with your organization’s security policy.

If you are unable to use a digital certificate issued from a certificate authority, and your organization’s security policy permits it, you can use the VMware-installed self-signed certificate. Add the VMware vCenter certificate to each Delivery Controller.

  1. Add the fully qualified domain name (FQDN) of the computer running vCenter Server to the hosts file on that server, located at %SystemRoot%/WINDOWS/system32/Drivers/etc/. This step is required only if the FQDN of the computer running vCenter Server is not already present in the domain name system.

  2. Obtain the vCenter certificate using any of the following three methods:

    From the vCenter server.

    1. Copy the file rui.crt from the vCenter server to a location accessible on your Delivery Controllers.
    2. On the Controller, navigate to the location of the exported certificate and open the rui.crt file.

    Download the certificate using a web browser. If you are using Internet Explorer, depending on your user account, you may need to right-click on Internet Explorer and choose Run as Administrator to download or install the certificate.

    1. Open your web browser and make a secure web connection to the vCenter server (for example https://server1.domain1.com).
    2. Accept the security warnings.
    3. Click on the address bar displaying the certificate error.
    4. View the certificate and click the Details tab.
    5. Select Copy to file and export in .CER format, providing a name when prompted to do so.
    6. Save the exported certificate.
    7. Navigate to the location of the exported certificate and open the .CER file.

    Import directly from Internet Explorer running as an administrator.

    • Open your web browser and make a secure web connection to the vCenter server (for example https://server1.domain1.com).
    • Accept the security warnings.
    • Click on the address bar displaying the certificate error.
    • View the certificate.
  3. Import the certificate into the certificate store on each of your Controllers.

    1. Click Install certificate, select Local Machine, and then click Next.
    2. Select Place all certificates in the following store, and then click Browse. Select Trusted People and then click OK. Click Next and then click Finish.

    If you change the name of the vSphere server after installation, you must generate a new self-signed certificate on that server before importing the new certificate.

Configuration considerations

Create a master VM:

Use a master VM to provide user desktops and applications in a machine catalog. On your hypervisor:

  1. Install a VDA on the master VM, selecting the option to optimize the desktop, which improves performance.
  2. Take a snapshot of the master VM to use as a back-up.

Create a connection:

In the connection creation wizard:

  • Select the VMware connection type.
  • Specify the address of the access point for the vCenter SDK.
  • Specify the credentials for a VMware user account you set up earlier that has permissions to create new VMs. Specify the username in the form domain/username.

VMware SSL thumbprint

The VMware SSL thumbprint feature addresses a frequently-reported error when creating a host connection to a VMware vSphere hypervisor. Previously, administrators had to manually create a trust relationship between the Delivery Controllers in the Site and the hypervisor’s certificate before creating a connection. The VMware SSL thumbprint feature removes that manual requirement: the untrusted certificate’s thumbprint is stored on the Site database so that the hypervisor can be continuously identified as trusted by Citrix Virtual Apps and Desktops, even if not by the Controllers.

When creating a vSphere host connection in Studio, a dialog box allows you to view the certificate of the machine you are connecting to. You can then choose whether to trust it.

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。
列表为空,暂无数据

词条统计

浏览:97 次

字数:17097

最后编辑:6 年前

编辑次数:0 次

    我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
    原文