Latest posts
-
VMSA-2026-0006: Critical vCenter Auth Bypass and ESX Escape, Patch This Week
VMSA-2026-0006 landed on 29 July 2026 with patches for VMware ESX, vCenter, Workstation and Fusion. Here is what is confirmed so far, and the exact order I patch vSphere in when an advisory like this drops.
-
CPU Deprecation in VCF 9.x: Is Your Hardware Still Supported?
Broadwell-EP and all Skylake variants are hard-blocked in VCF 9.x. Cascade Lake and AMD Rome still run but show deprecation warnings. Here’s the full CPU table and what it means for your upgrade plan.
-
VCF 9.1 Is Here: Every New Feature Worth Knowing About
VMware Cloud Foundation 9.1 went GA on 12 May 2026, roughly eleven months after VCF 9.0 landed. I’ve been working through the release notes and TechDocs since day one and there’s more here than the usual maintenance release. A handful of these features are things the community has been asking for across several release cycles.…
-
VCF 9.0.2.0 Released: SSL Auto-Renewal, DVS Sync Fix, and What Got Patched
VMware Cloud Foundation 9.0.2.0 dropped on 20 January 2026. No CVEs this time, which is a nice change of pace from 9.0.1.0. What you do get is a set of operational improvements, some genuinely useful new automation for SSL certificates, and a solid round of bug fixes that address a few pain points I’d been…
-
Patching VCF 9.0 Step by Step: Bundles, Pre-checks, and the Upgrade Sequence
Applying a patch release to VCF is one of those tasks that looks intimidating on paper and is actually pretty manageable once you’ve done it a couple of times. The VCF 9.0.1.0 and 9.0.2.0 posts on this blog cover what changed in each patch release. This post covers how to actually apply them — the…
-
VCF 9.0 Security Hardening: The Practical Guide
Security hardening conversations tend to go one of two ways. Either they happen before an audit, which means you’re scrambling to document what you’ve already done (or haven’t), or they happen after an incident, which is the version of the conversation nobody wants. The better approach is to bake hardening into how you operate VCF…
-
VCF 9.0.1.0 Released: Security Advisory, 30+ vCenter Fixes, and Full BOM
VMware Cloud Foundation 9.0.1.0 landed on 29 September 2025, and if you’re running a production VCF 9.0 environment, this one is not optional. There’s a security advisory in the mix, and the vCenter fixes alone are worth the upgrade window. I’ve been tracking this release since the advisory dropped. Here’s what actually matters. The Security…
-
VCF 9.0 LCM Upgrade Step by Step: From Download to Done
The first time I ran a VCF upgrade through LCM I probably spent more time reading documentation than actually running the upgrade. The process itself isn’t that complicated once you’ve done it, but the number of moving parts — SDDC Manager, ESXi, vCenter, NSX, Aria components — means there’s a lot to keep track of.…
-
VCF 9.0 Day-2 Operations Field Guide: Patching, Certs, Fleet, Cost, and Security
What day-to-day life looks like running VCF 9.0 in production — lifecycle patching, automated certificate rotation, fleet management, cost chargeback, and continuous security compliance.
-
VCF 9.0 vs. Running It Separately: An Honest Comparison
An unvarnished look at VCF 9.0 as a unified platform versus managing vSphere, vSAN, and NSX individually. Where the platform premium pays off — and where it doesn’t.