vshield

vCloud Networking and Security license in Evaluation Mode

A customer has a VMware vSphere 5.1 environment with VMware Horizon View 5.2 environment and Trend Micro Deep Security installed. Trend Micro Deep Security uses the VMware vShield Endpoint framework. In the vSphere license manager asset the “vCloud Networking and Security” license is displayed in evaluation mode and has a expire date.

image

This is strange because vSphere 5.1 > includes a vShield Endpoint license. So no extra vShield licenses are required.  I found a KB about vShield Endpoint. It states:

The vShield Endpoint asset may show up as unlicensed or with an evaluation license in the vCenter Server console, but functionality is fully enabled.

So you don’t have to worry that vShield Endpoint stops working. This is by design and will probably fixed in a later version.

Enable the vShield driver in VMware tools

One of the steps of a vShield Endpoint based deployment is to enable the vShield driver in VMware tools.  The vShield driver is not enabled by default. This can be done manually or automatically for example in the golden image of a VDI desktop.

Here are the manually steps when the VMware tools already are installed:

  • In the vSphere client open a Console session
  • Select VM – Guest – Install/Upgrade VMware Tools
  • Choose Interactive Tools Upgrade

image

  • In the VM open the setup program

image

  • Choose Next

image

  • Choose Modify

image

  • Expand the VMCI Driver section, select  vShield Drivers and  select “This feature will be installed on the local hard drive”

image

  • Next – modify

If you are installing VMware Tools in a number of Windows virtual machines, you can automate its installation by using the following syntax:

  • Mount/Extract the VMware Tools ISO 
setup.exe /S /v /qn REBOOT=R ADDLOCAL=VMCI REMOVE=Hgfs

or choose Automatic Tools Upgrade 

image

In the advanced Options field enter:

/v /qn ADDLOCAL=VMCI,VShield REMOVE=Hgfs