---
title: Blog
url: 'https://patrik.kernstock.net/'
markdown: 'https://patrik.kernstock.net/index.md'
date: '2026-10-31'
---

# Blog

   May 1, 2025   

### [QuickTip: Disable cpu-microcode from loading on ESXi](https://patrik.kernstock.net/blog/quicktip-disable-cpu-microcode-from-loading-on-esxi)

Just a random quick-tip for labs: Disabling cpu-microcode for better CPU power efficiency – with trade-off being security. By default, ESXi will load the cpu-microcode module shipped with the installation, if it is newer and applicable than what BIOS provides. It is typically updated with regular ESXi updates. This can be disabled.

   [VMware](https://patrik.kernstock.net/category:VMware) [vSphere](https://patrik.kernstock.net/category:vSphere)    [cpu-microcode](https://patrik.kernstock.net/tag:cpu-microcode) [ESX](https://patrik.kernstock.net/tag:ESX) [Performance](https://patrik.kernstock.net/tag:Performance) [QuickTip](https://patrik.kernstock.net/tag:QuickTip) [Spectre & Meltdown](https://patrik.kernstock.net/tag:Spectre%20%26%20Meltdown)  

   December 27, 2021   

### [vCloud: "Failed to Start" after changing "Public Addresses" for API](https://patrik.kernstock.net/blog/vcloud-failed-to-start-after-changing-public-addresses-for-api)

This is one post of category "QuickTip" and "Lesson learned"… So I was getting hands on VMware vCloud in my HomeLab and admins who have gone through the administrative-side might know the Public Addresses functionality (see docs). However to note: Don’t ever think of changing the API-part to something…

   [VMware](https://patrik.kernstock.net/category:VMware)    [QuickTip](https://patrik.kernstock.net/tag:QuickTip) [vCloud](https://patrik.kernstock.net/tag:vCloud)  

   September 8, 2021   

### [QuickTip: Utilize TPS (Transparent Page Sharing) on ESXi to noticeable save memory](https://patrik.kernstock.net/blog/quicktip-utilize-tps-transparent-page-sharing-on-esxi-to-noticeable-save-memory)

TPS (Transparent Page Sharing) is a proprietary functionality in VMware ESX(i) which essentially does deduplication of memory pages used for virtual machines. To put it in other words: Identical memory content across multiple machines only consume memory one time. When you have multiple virtual machines…

   [VMware](https://patrik.kernstock.net/category:VMware) [vSphere](https://patrik.kernstock.net/category:vSphere)    [ESX](https://patrik.kernstock.net/tag:ESX) [HomeLab](https://patrik.kernstock.net/tag:HomeLab) [QuickTip](https://patrik.kernstock.net/tag:QuickTip) [TPS](https://patrik.kernstock.net/tag:TPS)  

   September 3, 2021   

### [Automate certificate renewal via Let's Encrypt on Avi/NSX ALB](https://patrik.kernstock.net/blog/automate-certificate-renewal-via-lets-encrypt-on-avi-nsx-alb)

This time I want to introduce the ability to request the famous Let’s Encrypt certificates on your NSX Advanced Load Balancer (also known as Avi Vantage) using comprehensive on-board functionality it offers. I was improving, adding new features and testing the script for quite some time now, which got…

   [VMware](https://patrik.kernstock.net/category:VMware) [NSX & Avi](https://patrik.kernstock.net/category:NSX%20%26%20Avi)    [Avi Load Balancer](https://patrik.kernstock.net/tag:Avi%20Load%20Balancer) [Let's Encrypt](https://patrik.kernstock.net/tag:Let%27s%20Encrypt)  

   August 30, 2021   

### [QuickTip: Manually trigger certificate renewal on Avi Controller/NSX ALB](https://patrik.kernstock.net/blog/quicktip-manually-trigger-certificate-renewal-on-avi-controller-nsx-alb)

Avi Controller (or NSX Advanced Load Balancer, as known now) is able to automatically run scripts to renew your certificates your Virtual Services use – this is done by such called Certificate Management and ControlScript. The certificate renewal is, by default, triggered 7 days before the certificate…

   [VMware](https://patrik.kernstock.net/category:VMware) [NSX & Avi](https://patrik.kernstock.net/category:NSX%20%26%20Avi)    [Avi Load Balancer](https://patrik.kernstock.net/tag:Avi%20Load%20Balancer) [Certificates](https://patrik.kernstock.net/tag:Certificates) [Let's Encrypt](https://patrik.kernstock.net/tag:Let%27s%20Encrypt) [QuickTip](https://patrik.kernstock.net/tag:QuickTip)  

   August 21, 2021   

### [Get admin password of the Embedded Harbor Registry on the Supervisor Cluster](https://patrik.kernstock.net/blog/quicktip-get-admin-password-of-the-embedded-harbor-registry-on-the-supervisor-cluster)

After enabling Workload Management in vCenter as part of vSphere with Tanzu, you can easily enable the Embedded Harbor Registry on the Supervisor Cluster. Bear in mind that this however requires NSX-T in your environment, as the Harbor pods are running directly on your ESXi hosts which act as your Kubernetes…

   [VMware](https://patrik.kernstock.net/category:VMware) [Tanzu & Kubernetes](https://patrik.kernstock.net/category:Tanzu%20%26%20Kubernetes)    [Harbor](https://patrik.kernstock.net/tag:Harbor) [Kubernetes](https://patrik.kernstock.net/tag:Kubernetes) [QuickTip](https://patrik.kernstock.net/tag:QuickTip) [Tanzu](https://patrik.kernstock.net/tag:Tanzu) [Tutorial](https://patrik.kernstock.net/tag:Tutorial)  

   August 9, 2021   

### [QuickTip: Enabling Fault Tolerance fails with "This device does not support vSphere Fault Tolerance."](https://patrik.kernstock.net/blog/quicktip-enabling-fault-tolerance-fails-with-this-device-does-not-support-vsphere-fault-tolerance)

This is just a quick note about something I’ve came across a few weeks ago. Here I was facing the following error when enabling enabling Fault Tolerance on one or more virtual machine: As you might see on the screenshot, there are unfortunately no additional pieces of information nor a task with more…

   [VMware](https://patrik.kernstock.net/category:VMware) [vSphere](https://patrik.kernstock.net/category:vSphere)    [Fault Tolerance](https://patrik.kernstock.net/tag:Fault%20Tolerance) [QuickTip](https://patrik.kernstock.net/tag:QuickTip) [vCenter](https://patrik.kernstock.net/tag:vCenter)  

   July 8, 2021   

### [QuickTip: Tanzu TKC/Guest Cluster: Error "Permission denied" when creating file with securityContext](https://patrik.kernstock.net/blog/quicktip-tkc-permission-denied-creating-file)

This time, I’m not getting into much detail about specific details around this topic. Consider this as a quick write-up/FYI. If you’ve ever encountered this issue or worked with securityContext‘s in Kubernetes, you might know what I’m talking about. Disclaimer: Before proceeding, please don’t see this…

   [VMware](https://patrik.kernstock.net/category:VMware) [Tanzu & Kubernetes](https://patrik.kernstock.net/category:Tanzu%20%26%20Kubernetes)    [QuickTip](https://patrik.kernstock.net/tag:QuickTip) [Tanzu](https://patrik.kernstock.net/tag:Tanzu)  

   June 22, 2021   

### ["Downscaling" SupervisorControlPlaneVM's from three to two nodes](https://patrik.kernstock.net/blog/downscaling-supervisorcontrolplanevms-from-three-to-two-nodes)

When enabling WCP (Workload Platform) on your vSphere cluster, by default 3 SupervisorControlPlaneVMs (SV) will be deployed. (Those VMs are also sometimes referred as "agents") Those VMs contain a Kubernetes cluster used to: provision your pods on your ESXi hosts, to provision your TKC (Tanzu Kubernetes…

   [VMware](https://patrik.kernstock.net/category:VMware) [Tanzu & Kubernetes](https://patrik.kernstock.net/category:Tanzu%20%26%20Kubernetes)    [Kubernetes](https://patrik.kernstock.net/tag:Kubernetes) [Tanzu](https://patrik.kernstock.net/tag:Tanzu) [Tutorial](https://patrik.kernstock.net/tag:Tutorial) [vCenter](https://patrik.kernstock.net/tag:vCenter)  

   June 9, 2021   

### [ADFS 2019: Allow logon with sAMAccountName](https://patrik.kernstock.net/blog/adfs-2019-allow-logon-with-samaccountname)

Active Directory Federation Services (ADFS) allows plenty of customizations when it comes to the website theme. One specific customization allows the logon using just the sAMAccountName (e.g. awesome-admin) instead of the UPN (User Principal Name) (e.g. awesome-admin \[at\] example.com), by modifying the…

   [Microsoft](https://patrik.kernstock.net/category:Microsoft)    [ADFS](https://patrik.kernstock.net/tag:ADFS) [QuickTip](https://patrik.kernstock.net/tag:QuickTip) [Windows](https://patrik.kernstock.net/tag:Windows) [Windows Server](https://patrik.kernstock.net/tag:Windows%20Server)

---

## Navigation

- Next: [HomeLab](https://patrik.kernstock.net/homelab.md)
- Children:
  - [nginx - Mein neuer Favourite (Tutorial)](https://patrik.kernstock.net/blog/nginx-mein-neuer-favourite-tutorial.md)
  - [How to create a iso with linux](https://patrik.kernstock.net/blog/how-to-create-a-iso-with-linux.md)
  - [nginx: 413 Request Entity Too Large](https://patrik.kernstock.net/blog/nginx-413-request-entity-too-large.md)
  - [Windows 7: Keine Sound anzeige / Kein Lautstärkeregler](https://patrik.kernstock.net/blog/windows-7-keine-sound-anzeige-kein-lautstarkeregler.md)
  - [Windows 7: 'Neues Textdokument' verschwunden](https://patrik.kernstock.net/blog/windows-7-neues-textdokument-verschwunden.md)
  - [Einfaches Linux Benchmark per Shell](https://patrik.kernstock.net/blog/einfaches-linux-benchmark-per-shell.md)
  - [Linux & IPTables: Einfache Portweiterleitung](https://patrik.kernstock.net/blog/linux-iptables-einfache-portweiterleitung.md)
  - [Linux: Hold package back / Paket zurückhalten](https://patrik.kernstock.net/blog/linux-hold-package-back-paket-zurueckhalten.md)
  - [Windows 7: Aero Oberfläche](https://patrik.kernstock.net/blog/windows-7-aero-oberflaeche.md)
  - [Linux: Kernel compilieren leicht gemacht \[Debian\]](https://patrik.kernstock.net/blog/linux-kernel-compilieren-leicht-gemacht-debian.md)
  - [VMware Workstation v8: Die Einstellung ProductKey kann nicht aus der Antwortdatei für die unbeaufsichtigte Installation gelesen werden.](https://patrik.kernstock.net/blog/vmware-windows-8.md)
  - [Paket trotz Fehler installieren](https://patrik.kernstock.net/blog/paket-trotz-fehler-installieren.md)
  - [OwnCloud - Your Cloud, Your Data, Your Way!](https://patrik.kernstock.net/blog/owncloud-your-cloud-your-data-your-way.md)
  - [Mein Raspberry Pi](https://patrik.kernstock.net/blog/mein-raspberry-pi.md)
  - [Raspberry Pi: Overclocking mit dem neuen Raspbian Betriebssystem!](https://patrik.kernstock.net/blog/raspberry-pi-overclocking-mit-dem-neuen-raspbian-betriebssystem.md)
  - [Netgear N150 Wireless USB Microadapter auf dem Raspberry Pi](https://patrik.kernstock.net/blog/netgear-n150-wireless-usb-microadapter-auf-dem-raspberry-pi.md)
  - [Fehlgeschlagene Pakete auf Linux deinstallieren](https://patrik.kernstock.net/blog/fehlgeschlagene-pakete-auf-linux-deinstallieren.md)
  - [Linux: IP mit iptables blockieren und freigeben](https://patrik.kernstock.net/blog/linux-ip-mit-iptables-blockieren-freigeben.md)
  - [Linux & MySQL: Backup per Konsole erstellen und einspielen](https://patrik.kernstock.net/blog/linux-mysql-backup-per-konsole-erstellen-und-einspielen.md)
  - [Linux: Split Screen in screen oder tmux](https://patrik.kernstock.net/blog/linux-split-screen-screen-oder-tmux.md)
  - [Linux: archey - Systeminformationen anzeigen](https://patrik.kernstock.net/blog/linux-archey-systeminformationen-anzeigen.md)
  - [MySQL & PHP: Vergleichen eines eingegebenen Passwortes mit ENCRYPT von MySQL](https://patrik.kernstock.net/blog/mysql-php-vergleichen-eines-eingegebenen-passwortes-mit-encrypt-von-mysql.md)
  - [SpamAssassin: Benutzerdefinierte Regeln](https://patrik.kernstock.net/blog/spamassassin-benutzerdefinierte-regeln.md)
  - [Linux: slurm - Network Load Monitor](https://patrik.kernstock.net/blog/linux-slurm-network-load-monitor.md)
  - [Linux: Traffic Übersicht mit jnettop](https://patrik.kernstock.net/blog/linux-traffic-uebersicht-mit-jnettop.md)
  - [Linux: Passwortstärke überprüfen mit cracklib](https://patrik.kernstock.net/blog/linux-passwortstaerke-ueberpruefen-mit-cracklib.md)
  - [Postfix: Mailwarteschlange ansehen, flushen und leeren](https://patrik.kernstock.net/blog/postfix-mailwarteschlange-ansehen-flushen-und-leeren.md)
  - [Linux: Status eines UNIX-Sockets von PHP5-FPM abrufen (ohne Webserver)](https://patrik.kernstock.net/blog/linux-status-eines-unix-sockets-von-php5-fpm-abrufen-ohne-webserver.md)
  - [Linux: Mehr Sicherheit durch /tmp-Partition Optionen (noexec)](https://patrik.kernstock.net/blog/linux-mehr-sicherheit-durch-tmp-partition-optionen-noexec.md)
  - [Linux: Dateien und Ordner zählen](https://patrik.kernstock.net/blog/linux-dateien-und-ordner-zaehlen.md)
  - [Linux: Codezeilen nach Programmiersprache mit cloc zählen](https://patrik.kernstock.net/blog/linux-codezeilen-nach-programmiersprache-mit-cloc-zaehlen.md)
  - [Linux: PHP5 Sessions zugunsten der Performance im Arbeitsspeicher ablegen](https://patrik.kernstock.net/blog/linux-php5-sessions-zugunsten-der-performance-im-arbeitsspeicher-ablegen.md)
  - [Linux: OpenSSL auf Debian Squeeze auf die aktuellste Version aktualisieren](https://patrik.kernstock.net/blog/linux-openssl-auf-debian-squeeze-auf-die-aktuellste-version-aktualisieren.md)
  - [Linux QuickTipp: PINGs unterdrücken](https://patrik.kernstock.net/blog/linux-quicktipp-pings-unterdruecken.md)
  - [Linux QuickTipp: DTRX - intelligentes Entpackungstool](https://patrik.kernstock.net/blog/linux-quicktipp-dtrx-intelligentes-entpackungstool.md)
  - [Motd und Last Login bei SSH-Anmeldung ausblenden](https://patrik.kernstock.net/blog/motd-und-last-login-bei-ssh-anmeldung-ausblenden.md)
  - [KVM: qcow2 Disk-Image mit Hilfe von qemu mounten](https://patrik.kernstock.net/blog/kvm-qcow2-disk-image-mit-hilfe-von-qemu-mounten.md)
  - [Firewall: Port blockieren und nur für einzelne IPs freigeben](https://patrik.kernstock.net/blog/firewall-port-blockieren-und-nur-fuer-einzelne-ips-freigeben.md)
  - [QuickTipp: Passwort mit Hilfe von Linux generieren](https://patrik.kernstock.net/blog/quicktipp-passwort-mit-hilfe-von-linux-generieren.md)
  - [QuickTipp: Aktivieren der Farben bei init.d-Scripten](https://patrik.kernstock.net/blog/quicktipp-aktivieren-der-farben-bei-init-d-scripten.md)
  - [QuickTipp: Fail2Ban für Proxmox VE für mehr Sicherheit](https://patrik.kernstock.net/blog/quicktipp-fail2ban-fuer-proxmox-ve.md)
  - [QuickTipp: MySQL - Speicherplatzverbrauch der Datenbanken](https://patrik.kernstock.net/blog/quicktipp-mysql-speicherplatzverbrauch-der-datenbanken.md)
  - [ext4 - Neue Partition belegt bereits Speicherplatz](https://patrik.kernstock.net/blog/ext4-neue-partition-belegt-bereits-speicherplatz.md)
  - [\[QuickTipp\] Speedtest via CLI](https://patrik.kernstock.net/blog/quicktipp-speedtest-via-cli.md)
  - [\[QuickTipp\] -bash: /bin/rm: Argument list too long](https://patrik.kernstock.net/blog/quicktipp-bash-bin-rm-argument-list-too-long.md)
  - [\[QuickTipp\] Zertifikatsdatei .pfx aus Zertifikat und Key erstellen (und umgekehrt)](https://patrik.kernstock.net/blog/quicktipp-zertifikatsdatei-pfx-aus-zertifikat-und-key-erstellen.md)
  - [VMware: Fehler beim Upgrade des HP MicroServer Gen8 von ESXi 5.5U1 auf 5.5U2](https://patrik.kernstock.net/blog/vmware-fehler-upgrade-hp-microserver-gen8-vmware-esxi-5-5u1-auf-5-5u2.md)
  - [Veeam: VSSControl: Failed to freeze guest, wait timeout](https://patrik.kernstock.net/blog/veeam-vsscontrol-failed-to-freeze-guest-wait-timeout.md)
  - [Neu von Veeam: Veeam Backup for Linux](https://patrik.kernstock.net/blog/bald-veeam-backup-for-linux.md)
  - [VMware VCSA 6: Bash-Shell "dauerhaft" aktivieren](https://patrik.kernstock.net/blog/vmware-vcsa-6-automatische-deaktivierung-der-bash-shell-deaktivieren.md)
  - [Windows CA: "The certificate validity period will be shorter..."](https://patrik.kernstock.net/blog/windows-ca-certificate-validity-period-will-shorter.md)
  - [Erster Eindruck: Veeam Backup for Linux](https://patrik.kernstock.net/blog/erster-eindruck-veeam-backup-linux.md)
  - [Ersteinrichtung: Veeam Backup for Linux](https://patrik.kernstock.net/blog/erstkonfiguration-veeam-backup-linux.md)
  - [PowerShell für Linux und macOS](https://patrik.kernstock.net/blog/powershell-fur-linux-und-macos.md)
  - [VMware vROPS: Upgrade von 6.3 auf 6.4 schlägt fehl](https://patrik.kernstock.net/blog/vmware-vrops-upgrade-von-6-3-auf-6-4-schlaegt-fehl.md)
  - [HPE Gen8: Redundant boot devices with FreeNAS](https://patrik.kernstock.net/blog/hpe-gen8-redundant-boot-devices-with-freenas.md)
  - [Windows in recovery mode: No fixed disks to show](https://patrik.kernstock.net/blog/windows-in-recovery-mode-no-fixed-disks-to-show.md)
  - [Log Insight: Change node IP address](https://patrik.kernstock.net/blog/vrli-change-node-ip-address.md)
  - [Log Insight: Node unreachable after upgrade from 4.8 to 8.0](https://patrik.kernstock.net/blog/log-insight-node-unreachable-after-upgrade-from-4-8-to-8-0.md)
  - [Horizon 7.10: Enabling dynamic codec switching](https://patrik.kernstock.net/blog/horizon-7-10-enabling-dynamic-codec-switching.md)
  - [VMware Appliance for Folding@Home](https://patrik.kernstock.net/blog/vmware-appliance-for-folding-at-home.md)
  - [VMware FAH Appliance: Making Of F@H-Stats](https://patrik.kernstock.net/blog/vmware-fah-appliance-making-of-fh-stats.md)
  - [Horizon Agent: Installation fails at VM_BlastUDPReservePorts](https://patrik.kernstock.net/blog/horizon-agent-installation-fails-at-vm_blastudpreserveports.md)
  - [Quick Tip: NSX-T 3.0: Removing VIBs manually from ESXi host](https://patrik.kernstock.net/blog/quick-tip-nsx-t-3-0-removing-vibs-manually-from-esxi-host.md)
  - [Let's Panic: ESXi failover not working, using Static LAG/etherchannel](https://patrik.kernstock.net/blog/lets-panic-esxi-failover-not-working-using-static-lag-etherchannel.md)
  - [piler installation guide](https://patrik.kernstock.net/blog/mailpiler-installation-guide.md)
  - [Quick Tip: Use USB storage devices as datastore on VMware ESXi](https://patrik.kernstock.net/blog/quick-tip-use-usb-storage-devices-as-datastore.md)
  - [vCenter 7.0, Lifecycle Manager fails downloading depot metadata & proxy](https://patrik.kernstock.net/blog/vcenter-7-0-lifecycle-manager-fails-downloading-depot-metadata-proxy.md)
  - [Solved Mystery: DRS, Powering On VM fails with "insufficient resources"](https://patrik.kernstock.net/blog/solved-mystery-drs-powering-on-vm-fails-with-insufficient-resources.md)
  - [Quick Tip: Get vCenter Instance UUID via SSH](https://patrik.kernstock.net/blog/quick-tip-get-vcenter-instance-uuid-via-ssh.md)
  - [piler update guide](https://patrik.kernstock.net/blog/piler-update-guide.md)
  - [vCenter 7.0 U2: vSphere Native Key Provider! (integrated KMS)](https://patrik.kernstock.net/blog/vcenter-7-0-u2-vsphere-native-key-provider-integrated-kms.md)
  - [vCenter 7.0 U2: "Swap File Location" cannot be changed to different datastore](https://patrik.kernstock.net/blog/vcenter-7-0-u2-swap-file-location-cannot-be-changed-to-different-datastore.md)
  - [Avi/NSX ALB: Deleting httppolicyset via CLI](https://patrik.kernstock.net/blog/nsx-alb-avi-deleting-httppolicyset-via-cli.md)
  - [ADFS 2019: Allow logon with sAMAccountName](https://patrik.kernstock.net/blog/adfs-2019-allow-logon-with-samaccountname.md)
  - ["Downscaling" SupervisorControlPlaneVM's from three to two nodes](https://patrik.kernstock.net/blog/downscaling-supervisorcontrolplanevms-from-three-to-two-nodes.md)
  - [QuickTip: Tanzu TKC/Guest Cluster: Error "Permission denied" when creating file with securityContext](https://patrik.kernstock.net/blog/quicktip-tkc-permission-denied-creating-file.md)
  - [QuickTip: Enabling Fault Tolerance fails with "This device does not support vSphere Fault Tolerance."](https://patrik.kernstock.net/blog/quicktip-enabling-fault-tolerance-fails-with-this-device-does-not-support-vsphere-fault-tolerance.md)
  - [Get admin password of the Embedded Harbor Registry on the Supervisor Cluster](https://patrik.kernstock.net/blog/quicktip-get-admin-password-of-the-embedded-harbor-registry-on-the-supervisor-cluster.md)
  - [QuickTip: Manually trigger certificate renewal on Avi Controller/NSX ALB](https://patrik.kernstock.net/blog/quicktip-manually-trigger-certificate-renewal-on-avi-controller-nsx-alb.md)
  - [Automate certificate renewal via Let's Encrypt on Avi/NSX ALB](https://patrik.kernstock.net/blog/automate-certificate-renewal-via-lets-encrypt-on-avi-nsx-alb.md)
  - [QuickTip: Utilize TPS (Transparent Page Sharing) on ESXi to noticeable save memory](https://patrik.kernstock.net/blog/quicktip-utilize-tps-transparent-page-sharing-on-esxi-to-noticeable-save-memory.md)
  - [vCloud: "Failed to Start" after changing "Public Addresses" for API](https://patrik.kernstock.net/blog/vcloud-failed-to-start-after-changing-public-addresses-for-api.md)
  - [QuickTip: Disable cpu-microcode from loading on ESXi](https://patrik.kernstock.net/blog/quicktip-disable-cpu-microcode-from-loading-on-esxi.md)