Search the VMware Knowledge Base (KB)
View by Article ID

EVO:RAIL 1.0 Patch Release for Shell Shock Vulnerability (2091654)

  • 0 Ratings

Purpose

This article provides steps to upgrade the EVO:RAIL appliance to address the Shell Shock security vulnerability.

Resolution

VMware vCenter Server

  • Create a snapshot or backup copy of the vCenter Server virtual appliance. This can be done by connecting to the VMware vSphere Web Client via https://hostname:9443 , where hostname is the IP address or hostname of the EVO:RAIL management interface.
  • Create a copy of the vCenter Server upgrade file VMware-vCenter-Server-Appliance-5.5.0.20100-2170515-updaterepo.zip  from your Qualified EVO:RAIL Partner.
  • Verify that you are logged in to the EVO:RAIL management interface as administrator@vsphere.local or as a user with administrator privileges. The URL format is https://hostname:7443 , where hostname is the IP address or hostname of the EVO:RAIL management interface.
  1. Click the Config icon in the left menu bar.
  2. Click Upload and select the .zip file.
  3. Click OK.
  4. EVO:RAIL uploads the .zip file and displays a confirmation dialog box.
  5. Click Upgrade to confirm.
  6. The vCenter Server virtual machine will restart automatically. The user will receive a notification that they are disconnected from the EVO:RAIL management interface. It will take up to 15 minutes for the vCenter Server virtual machine to restart and initialize all the services.

vRealize Log Insight

  • Create a snapshot or backup copy of the vRealize Server Log Insight virtual machine. This can be accomplished by connecting to the vSphere Web Client via https://hostname:9443 , where hostname is the IP address or hostname of the EVO:RAIL management interface.
  • Create a copy of the vRealize Server Log Insight upgrade bundle VMware-vCenter-Log-Insight-2.0.5-2193079.pak file from your Qualified EVO:RAIL Partner.
  • Verify that you are logged in to the vRealize Server Log Insight user interface as an Admin user. The URL format is https://log-insight-host , where log-insight-host is the IP address or hostname of the vRealize Server Log Insight server. If you use Internet Explorer 9, verify that you have Adobe Flash Player installed on your system.
  1. Click the configuration drop-down menu and select Administration.
  2. Under Management, click Appliance.
  3. Click Upload PAK and select the .pak file.
  4. Click Upgrade and Log Insight will upload the .pak file and display a confirmation dialog box.
  5. Click Upgrade to confirm.
  6. Accept the EULA to complete the procedure.

Backing up the vCenter Server and Log Insight on Node 1 in an EVO:RAIL Appliance

  • Create a copy of vCenter Server Appliance in uncompressed OVA (ovf) files from your Qualified EVO:RAIL Partner. The name of OVA file uploaded to the FTP site is VMware-vCenter-Server-Appliance-5.5.0.20100-2170515.ova
  • Create a copy of vCenter Server Log Insight in uncompressed OVA (ovf) files from your Qualified EVO:RAIL Partner. The name of OVA file uploaded to the FTP site is VMware-vCenter-Log-Insight-2.0.5-2193079.ova
  1. In the Node 1, navigate to vcsa-restore-original folder, located at /vmfs/volumes/ApplianceID-01-service-datastore1/images/.
  2. Delete all of the existing files in the vcsa-restore-original folder.
  3. Upload the vCenter Server Appliance in uncompressed OVA (ovf) format to the service VMFS volume located on Node 1 (ApplianceID-01-service-datastore1) in the vcsa-restore-original folder.
  4. In the Node 1, navigate to log-insight-original folder, located at /vmfs/volumes/ApplianceID-01-service-datastore1/images/.
  5. Delete all of the existing files in the log-insight-original folder, located at /vmfs/volumes/ApplianceID-01-service-datastore1/images/.
  6. Upload vRealize Server Log Insight in uncompressed OVA (ovf) format to service VMFS volume located on Node 1 (ApplianceID-01-service-datastore1) in the log-insight-original folder.

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 0 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)




Please enter the Captcha code before clicking Submit.
  • 0 Ratings
Actions
KB: