VCF 9.1 Fleet Management API (3): Automated Password Management | #vExpert David ZhangVCF 9.1 Fleet Management API (3): Automated...In our previous posts, we discussed automating certificate lifecycles using both custom and integrated Certificate Authorities. Today, we turn our attention to another foundational security pillar: credential rotation and password management.Broadcom Social Media Advocacy

VCF 9.1 API Access (4): vCenter Authentication | #vExpert David ZhangVCF 9.1 API Access (4): vCenter AuthenticationIn this post, we will walk through how to leverage your centralized VCF VIDB API token to get access to VCF SSO-enabled vCenter. By utilizing this secure token-exchange architecture, you can execute programmatic tasks against vCenter APIs without ever... Continue Reading →

Defending the VCF 9.1 Core: Virtual Patching, IDPS, and Surviving the “Mythos” Era of AI Threats | Joe TietzDefending the VCF 9.1 Core: Virtual Patching,...Executive Summary: The Speed of the Adversary Has Changed In early April 2026, the cybersecurity landscape experienced a tectonic shift. Anthropic announced Project Glasswing and the restricted release of Claude Mythos... Continue Reading →

VMs with Virtual SCSI Bus Sharing | #vExpert Vincent JansenVMs with Virtual SCSI Bus SharingIf you’ve ever spent time patching a set of ESXi hosts, the following scenario will likely feel all too familiar. You kick off the deployment of a new cluster image in a VMware HA cluster. Everything starts smoothly, updates are rolling... Continue Reading →

Why the Old CVE Math Just Broke for Java AppsWhy the Old CVE Math Just Broke for Java AppsIt’s Monday morning. Your boss walks up, says “scrap the backlog, we’ve got a list of CVEs longer than that curved screen we bought you last year, the CISO is coming, fix them,” and goes to brunch.... Continue Reading →

OpenRewrite, AI, and chaining CVEs - patching Java apps in 2026OpenRewrite, AI, and chaining CVEs - patching...It's Monday morning. Your boss walks up, says "scrap the backlog, we've got a list of CVEs longer than that curved screen we bought you last year, the CISO is coming, fix them," and goes to brunch. A year... Continue Reading →

Ditching External KMS: The AngrySysOps Guide to vSphere Native Key Provider | #vExpert Piotr TarnawskiDitching External KMS: The AngrySysOps Guide to...Let’s be honest: managing external Key Management Servers (KMS) for vSphere VM encryption has always been a massive pain. Introducing the Native Key Provider (NKP). No external KMS required. It’s built right into vCenter, it’s... Continue Reading →

VCF 9.1 in a Minilab | Tom FojtaVCF 9.1 in a MinilabThis is follow up to my previous blog post Deploying VCF 9 in a Minilab - I have made some changes in my lab and upgraded to VCF 9.1. My original HW BOM: Two GMKtec K8 Plus mini PCs. One with 96 GB and... Continue Reading →

Guardrails in VCF Automation 9.1 | #vExpert Rutger BlomGuardrails in VCF Automation 9.1Self-service without guardrails is just delegated infrastructure access with a nicer interface. In this post I look at guardrails in the VCF Automation 9.1 All Apps model, and how organizations, quotas, namespaces, networking, policies, and extensibility work together to make private cloud [...]Broadcom... Continue Reading →

VCF 9.1 - Interactive Upgrade Planning Tool | William LamVCF 9.1 - Interactive Upgrade Planning ToolOne of the biggest advantages of VMware Cloud Foundation (VCF) 9.1 is its flexibility and broad support for existing customer environments, meeting customers where they are at in their Private Cloud journey. From existing standalone vSphere deployments with VCF Operations... Continue Reading →