Professional Documents
Culture Documents
Ws7 Manual
Ws7 Manual
Workstation7.0.WithWorkstation,youcanconvertanexisting
physicalPCintoaVMwarevirtualmachineorcreateanewvirtualmachine.Each
virtualmachinerepresentsacompletePC,includingtheprocessor,memory,network
connectionsandperipheralports.UseWorkstationtodothefollowing:
Hostlegacyapplicationsandovercomeplatformmigrationissues.
Configureandtestnewsoftwareorpatchesinanisolatedenvironment.
Automatetasksforsoftwaredevelopmentandtesting.
DemonstratemultitierconfigurationsonasinglePC.
Intended Audience
Thisbookisintendedforanyonewhoneedstoinstall,upgrade,oruseVMware
Workstation.Workstationuserstypicallyincludepeoplewhodosoftwaredevelopment
andtestingorworkwithmultipleoperatingsystemsorcomputingenvironments:
softwaredevelopers,QAengineers,trainers,salespeoplewhorundemos,andanyone
whowantstocreatevirtualmachines.
Document Feedback
VMwarewelcomesyoursuggestionsforimprovingourdocumentation.Ifyouhave
comments,sendyourfeedbacktodocfeedback@vmware.com.
About This Book
Workstation Users Manual
20 VMware, Inc.
Technical Support and Education Resources
Thefollowingsectionsdescribethetechnicalsupportresourcesavailabletoyou.To
accessthecurrentversionofthisbookandotherbooks,goto
http://www.vmware.com/support/pubs.
Online and Telephone Support
Touseonlinesupporttosubmittechnicalsupportrequests,viewyourproductand
contractinformation,andregisteryourproducts,goto
http://www.vmware.com/support.
Customerswithappropriatesupportcontractsshouldusetelephonesupportforthe
fastestresponseonpriority1issues.Goto
http://www.vmware.com/support/phone_support.html.
Support Offerings
TofindouthowVMwaresupportofferingscanhelpmeetyourbusinessneeds,goto
http://www.vmware.com/support/services.
VMware Professional Services
VMwareEducationServicescoursesofferextensivehandsonlabs,casestudy
examples,andcoursematerialsdesignedtobeusedasonthejobreferencetools.
Coursesareavailableonsite,intheclassroom,andliveonline.Foronsitepilot
programs andimplementationbestpractices,VMwareConsultingServicesprovides
offeringsto helpyouassess,plan,build,andmanageyourvirtualenvironment.To
accessinformationabouteducationclasses,certificationprograms,andconsulting
services,gotohttp://www.vmware.com/services.
VMware, Inc. 21
1
VMwareWorkstationisadesktopsoftwarethatallowsyoutorunmultiple
x86compatibledesktopandserveroperatingsystemssimultaneouslyonasinglePC,
infullynetworked,portablevirtualmachineswithnorebootingorharddrive
partitioningrequired.Thischapterincludesthefollowingtopics:
ProductBenefitsonpage 21
OverviewofThisManualonpage 22
HostSystemRequirementsonpage 23
VirtualMachineSpecificationsonpage 29
SupportedGuestOperatingSystemsonpage 32
Product Benefits
Workstationisusedinthesoftwaredevelopment,qualityassurance,training,sales,and
ITfields.
Workstationstreamlinessoftwaredevelopmentandtesting:
DevelopandtestmultipleoperatingsystemsandapplicationsonasinglePC.
Connectvirtualmachinestosimulateandtestmultitierconfigurations.
Usemultiplesnapshotsanddebuggingsupporttofacilitatetesting.
Archivetestenvironmentsonfileserverswheretheycanbeeasilyrestoredor
shared.
Introduction and System
Requirements 1
Workstation Users Manual
22 VMware, Inc.
WorkstationenhancesproductivityofITprofessionals:
Configureandtestdesktopsandserversasvirtualmachinesbeforedeploying
themtoproduction.
Testnewmultitierapplications,applicationupdates,andoperatingsystem
patchesonasinglePC.
Hostlegacyapplicationswithinvirtualmachines,facilitatingoperatingsystem
migrationsandeliminatingtheneedtoportlegacyapplications.
Createavirtuallibraryofenduserconfigurationsonashareddrive.
Workstationfacilitatescomputerbasedtrainingandsoftwaredemos:
Packageanddeployclassroommaterialinvirtualmachines.
Allowstudentstoexperimentwithmultipleoperatingsystems,applications,and
toolsinsecure,isolatedvirtualmachines.
Configurevirtualmachinestoundoallchangesatshutdown.
Democomplexormultitierconfigurationsonasinglelaptop.
Overview of This Manual
IfyouareaveteranWorkstationuser,seetheWorkstationReleaseNotesforalistof
newfeatures.Forupgradeinstructions,seePreparingforanUpgradeonpage 47.
IfyouarenewtoWorkstation,thefirstchaptersofthismanualthroughChapter 7,
GettingStartedwithVirtualMachines,onpage 147guideyouthroughthekey
stepsforinstallingthesoftwareandprovideanintroductiontousingWorkstation.
Laterchaptersprovideindepthinformationaboutthesophisticatedfeaturesof
Workstation.Thesechaptersareintendedforexpertusers.
Chapter 18,LearningtheBasicsofVMwareACE,onpage 381throughChapter 22,
InstallingACEPackages,onpage 465describehowtousetheACEfeaturesincluded
withtheversionofWorkstationthatrunsonWindowshosts.VMwareACEauthoring
featuresenableyoutopackageanddeployPocketACEanddesktopvirtualmachines
withencryption,restrictednetworkaccess,anddevicecontrol.
VMware, Inc. 23
Chapter 1 Introduction and System Requirements
Host System Requirements
Likephysicalcomputers,thevirtualmachinesrunningunderWorkstationperform
betteriftheyhavefasterprocessorsandmorememory.
Thetermshostandguestdescribephysicalandvirtualmachines:
HostThephysicalcomputeronwhichyouinstalltheWorkstationsoftwareis
calledthehostcomputer,anditsoperatingsystemisthehostoperatingsystem.
GuestTheoperatingsystemrunninginsideavirtualmachineiscalledaguest
operatingsystem.
Fordefinitionsoftheseandotherspecialterms,seeGlossaryonpage 489.
PC Hardware
Standardx86compatibleorx8664compatiblepersonalcomputer
1.3GHzorfasterCPUminimum
Multiprocessorsystemsaresupported.
Supportfor64bitguestoperatingsystemsisavailablewithIntelVTorAMDV
CPUs.
ForhardwarerequirementstosupportWindows7Aerographics,see
RecommendationsforWindows7AeroGraphicsSupportonpage 24.
Memory
Youneedenoughmemorytorunthehostoperatingsystem,plusthememoryrequired
foreachguestoperatingsystemandforapplicationsonthehostandguest.The
minimummemoryrequirementis1GB,VMwarerecommendstohave2GBandabove.
Formoreinformationonmemoryrequirements,seeyourguestoperatingsystemand
applicationdocumentation.
Asofversion7.0ofWorkstation,thetotalamountofmemoryyoucanassigntoall
virtualmachinesrunningonasinglehostislimitedonlybytheamountofRAMonthe
host.Themaximumamountofmemoryforeachvirtualmachineis32GB.
FormemoryrequirementstosupportWindows7Aerographics,see
RecommendationsforWindows7AeroGraphicsSupportonpage 24.
Workstation Users Manual
24 VMware, Inc.
Display
16bitor32bitdisplayadapterisrecommended.Fordisplayrequirementstosupport
Windows7Aerographics,seeRecommendationsforWindows7AeroGraphics
Supportonpage 24.
Recommendations for Windows 7 Aero Graphics Support
TosupportWindows7Aerographics,VMwarerecommendsthefollowing
configuration:
CPU
IntelDualCore,2.2GHzandabove
AMDAthlon4200+andabove
HostGCPU
nVidiaGeForce8800GTandabove
ATIRadeonHD2600andabove
Memoryatleast3GBofhostsystemmemory,1GBofmemoryallocatedtothe
guestoperatingsystem,and256MBgraphicsmemory.
Disk Drives
Guestoperatingsystemscanresideonphysicaldiskpartitionsorinvirtualdiskfiles.
Hard Disks
IDEandSCSIharddrivesaresupported.
VMwarerecommendsatleast1GBfreediskspaceforeachguestoperatingsystem
andtheapplicationsoftwareusedwithit.Ifyouuseadefaultsetup,theactualdisk
spaceneedsareapproximatelythesameasthoseforinstallingandrunningthe
guestoperatingsystemandapplicationsonaphysicalcomputer.
200MB(Linux)or1.5GB(Windows)freediskspaceisrequiredforbasic
installation.Deletetheinstallerafterwardstoreclaimdiskspace.
NOTEUsethelatestgraphicsdriverrecommendedforyourhost.
VMware, Inc. 25
Chapter 1 Introduction and System Requirements
Optical CD-ROM/DVD-ROM Drives
IDEandSCSIopticaldrivesaresupported.
CDROMandDVDROMdrivesaresupported.
ISOdiskimagefilesaresupported.
Floppy Drives
Virtualmachinescanconnecttothehostsdiskdrives.Floppydiskimagefilesarealso
supported.
Local Area Networking
YoucanuseanyEthernetcontrollerthatthehostoperatingsystemsupports.
NonEthernetnetworksaresupportedbyusingbuiltinnetworkaddress
translation(NAT)orusingacombinationofhostonlynetworkingplusrouting
softwareonthehostoperatingsystem.
Host Operating System
VMwareWorkstationisavailableforWindowsandLinuxhostoperatingsystems.
VMwareACEfeaturesareincludedonlyintheversionofWorkstationthatrunson
Windowshosts.
AWebbrowserisrequiredfortheWorkstationHelpsystem.
Workstation Users Manual
26 VMware, Inc.
Windows Host Operating Systems
WorkstationsupportsthefollowingWindows32bitand64bithostoperatingsystems.
Table 1-1. Supported Windows Host Operating Systems
Operating System Type Operating System Edition
32bit Windows7UltimateEdition
Windows7EnterpriseEdition
Windows7Professional
Windows7HomeBasicandPremium
WindowsVistaEnterpriseEdition,SP1,SP2
WindowsVistaBusinessEdition,SP1,SP2
WindowsVistaHomeBasicandPremiumEditions,SP1,SP2
WindowsVistaUltimateEdition,SP1,SP2
Listedversionsarealsosupportedwithnoservicepack.
WindowsServer2008Enterprise,SP1,R2
WindowsServer2008Standard,SP1,R2
WindowsServer2003StandardEditionwithSP1,R2,SP2
WindowsServer2003SmallBusinessEditionwithSP1,R2,SP2
WindowsServer2003EnterpriseEditionwithSP1,R2,SP2
WindowsXPHomeEditionwithSP2orlaterservicepack
WindowsXPProfessionalwithSP2orlaterservicepack
64bit Windows7UltimateEdition
Windows7EnterpriseEdition
Windows7Professional
Windows7HomeBasicandPremium
WindowsVistaEnterpriseEdition,SP1,SP2
WindowsVistaBusinessEdition,SP1,SP2
WindowsVistaHomeBasicandPremiumEditions,SP1,SP2
WindowsVistaUltimateEdition,SP1,SP2
Listedversionsarealsosupportedwithnoservicepack.
WindowsServer2008Enterprise,SP1,R2
WindowsServer2008Standard,SP1,R2
WindowsServer2003StandardEditionwithSP1,R2,SP2
WindowsServer2003SmallBusinessEditionwithSP1,R2,SP2
WindowsServer2003EnterpriseEditionwithSP1,
R2,SP2Windows
WindowsXPProfessionalx64EditionwithSP1orlaterservice
pack
VMware, Inc. 27
Chapter 1 Introduction and System Requirements
Linux Host Operating Systems
WorkstationsupportsthefollowingLinux32bitand64bitdistributionsandkernels
forthehostoperatingsystems.Workstationmightnotrunonsystemsthatdonotmeet
theserequirements.
AsnewerLinuxkernelsanddistributionsarereleased,VMwaremodifiesandtestsits
productsforstabilityandreliabilityonthosehostplatforms.VMwaremakesevery
efforttoaddsupportfornewkernelsanddistributionsinatimelymanner,butuntila
kernelordistributionisaddedtothefollowinglist,itsusewithVMwareproductsisnot
supported.LookfornewerprebuiltmodulesintheDownloadsareaoftheVMware
Website.
InWorkstation7.0,onlyLinuxkernelsversion2.6.9andlateraresupported.
Table 1-2. Supported Linux Host Operating Systems
Operating System Type Operating System Edition
32bit AsianuxServer3
CentOS5.2
CentOS5.1
CentOS5.0
Mandriva2009
Mandriva2008,20081
OracleEnterpriseLinux5.2
OracleEnterpriseLinux5.1
OracleEnterpriseLinux5.0
RedHatEnterpriseLinux5.3WS,AS,ES
RedHatEnterpriseLinux5.2WS,AS,ES
RedHatEnterpriseLinux5.1WS,AS,ES
RedHatEnterpriseLinux5.0WS,AS,ES
RedHatEnterpriseLinux4.8WS,AS,ES
RedHatEnterpriseLinux4.7WS,AS,ES
RedHatEnterpriseLinux4.6WS,AS,ES
RedHatEnterpriseLinuxWS4.5(formerly4.0Update5)WS,AS,
ES
SUSELinuxEnterpriseServer11
SUSELinuxEnterpriseServer10SP1,SP2
SUSELinuxEnterpriseDesktop11
SUSELinuxEnterpriseDesktop10,SP1,SP2
Listedversionsarealsosupportedwithnoservicepack.
Workstation Users Manual
28 VMware, Inc.
32bit openSUSE11.2
openSUSE11.1
openSUSE11
openSUSE10.3
openSUSE10.2(formerlyknownasSUSELinux10.2)
UbuntuLinux9.04
UbuntuLinux8.10
UbuntuLinux8.04,8.04.1,8.04.2,8.04.3
UbuntuLinux6.06
64bit AsianuxServer3
CentOS5.2
CentOS5.1
CentOS5.0
Mandriva2009
Mandriva2008,20081
Note:On64bitMandrivahosts,some32bitcompatibility
librariesarerequired.Specifically,32bitglibc,X11,and
libXtst.soarerequired.
OracleEnterpriseLinux5.2
OracleEnterpriseLinux5.1
OracleEnterpriseLinux5.0
RedHatEnterpriseLinux5.3WS,AS,ES
RedHatEnterpriseLinux5.2WS,AS,ES
RedHatEnterpriseLinux5.1WS,AS,ES
RedHatEnterpriseLinux5.0WS,AS,ES
RedHatEnterpriseLinux4.8WS,AS,ES
RedHatEnterpriseLinux4.7WS,AS,ES
RedHatEnterpriseLinux4.6WS,AS,ES
RedHatEnterpriseLinuxWS4.5(formerly4.0Update5)WS,AS,
ES
SUSELinuxEnterpriseServer11
SUSELinuxEnterpriseServer10SP1,SP2
SUSELinuxEnterpriseDesktop11
SUSELinuxEnterpriseDesktop10,SP1,SP2
Listedversionsarealsosupportedwithnoservicepack.
Table 1-2. Supported Linux Host Operating Systems (Continued)
Operating System Type Operating System Edition
VMware, Inc. 29
Chapter 1 Introduction and System Requirements
Virtual Machine Specifications
ThefollowingsectionsdescribethedevicesthatWorkstationvirtualmachinessupport.
Processor
Sameprocessorasthatonhostcomputer.
Onevirtualprocessoronahostwithoneormorelogicalprocessors.
Uptofourvirtualprocessors(fourwayvirtualsymmetricmultiprocessing,or
Virtual SMP)onahostwithatleasttwologicalprocessors.
Thefollowingareconsideredtohavetwologicalprocessors:
AmultiprocessorhostwithtwoormorephysicalCPUs.
AsingleprocessorhostwithamulticoreCPU.
Asingleprocessorhostwithhyperthreadingenabled.
SeeUseFourWayVirtualSymmetricMultiprocessingonpage 366.
Chip Set
Intel440BXbasedmotherboard
NS338SIO
82093AAIOAPIC
64bit openSUSE11.2
openSUSE11.1
openSUSE11
openSUSE10.3
openSUSE10.2(formerlyknownasSUSELinux10.2)
UbuntuLinux9.04
UbuntuLinux8.10
UbuntuLinux8.04,8.04.1,8.04.2,8.04.3
UbuntuLinux6.06
Note:On64bitUbuntu6.xhosts,some32bitcompatibility
librariesarerequired.Specifically,32bitglibcandX11are
required.
Table 1-2. Supported Linux Host Operating Systems (Continued)
Operating System Type Operating System Edition
Workstation Users Manual
30 VMware, Inc.
BIOS
PhoenixBIOS4.0Release6withVESABIOS
Memory
Youcanallocateupto32GBofmemoryforavirtualmachine,dependingonhost
memory.
Nomaximumlimitforthetotalavailableforallvirtualmachines.
Graphics
VGAandSVGAaresupported.
IDE Drives
Uptofourdevicesdisks,CDROMorDVDROM(DVDdrivescanbeusedto
readdataDVDROMdiscs;DVDvideoisnotsupported).
Harddiskscanbevirtualdisksorphysicaldisks.
IDEvirtualdisksupto950GB.
CDROMcanbeaphysicaldeviceoranISOimagefile.
SCSI Devices
Upto60devices.
SCSIvirtualdisksupto950GB.
Harddiskscanbevirtualdisksorphysicaldisks.
GenericSCSIsupportallowsdevicestobeusedwithoutneedfordriversinthe
hostoperatingsystem.Workswithscanners,CDROM,DVDROM,tapedrives
andotherSCSIdevices.
LSILogicLSI53C10xxUltra320SCSII/Ocontroller.
Mylex(BusLogic)BT958compatiblehostbusadapter(requiresaddondriver
fromVMwareforWindowsXPandWindowsServer2003).
VMware, Inc. 31
Chapter 1 Introduction and System Requirements
Floppy Drives
Uptotwo1.44MBfloppydevices.
Physicaldrivesorfloppyimagefiles.
Serial (COM) Ports
Uptofourserial(COM)ports.
Outputtoserialports,WindowsorLinuxfiles,ornamedpipes.
Parallel (LPT) Ports
Uptothreebidirectionalparallel(LPT)ports.
Outputtoparallelportsorhostoperatingsystemfiles.
USB Ports
USB1.1UHCIcontroller.
USB2.0EHCIcontroller.(UsethevirtualmachinesettingseditortoenableUSB2.0
support.SeeEnabletheUSB2.0ControllerforaVirtualMachineonpage 352.)
Supportsmostdevices,includingUSBprinters,scanners,PDAs,harddiskdrives,
memorycardreaders,anddigitalcameras,aswellasstreamingdevicessuchas
webcams,speakers,andmicrophones.
Keyboard
104keyWindows95/98enhanced.
Mouse and Drawing Tablets
PS/2andUSBmouse.
Serialtabletssupported.
USBtabletssupported.
Workstation Users Manual
32 VMware, Inc.
Ethernet Card
Upto10virtualEthernetcards.
AMDPCnetPCIIIcompatible.
For64bitguests:IntelPro/1000MTServerAdaptercompatible.
Sound
Soundoutputandinput.
EmulatesCreativeLabsSoundBlasterAudioPCI.(DoesnotsupportMIDIinputor
gameportcontroller/joysticks.)
Virtual Networking
Supportfor10virtualEthernetswitchesonMicrosoftWindowshostoperating
systems.Supportfor255virtualEthernetswitchesonLinuxhosts.Threeswitches
areconfiguredbydefaultforbridged,hostonly,andNATnetworking.
SupportformostEthernetbasedprotocols,includingTCP/IP,NetBEUI,Microsoft
Networking,Samba,NovellNetWare,andNetworkFileSystem.
BuiltinNATsupportsclientsoftwareusingTCP/IP,FTP,DNS,HTTP,andTelnet,
includingVPNsupportforPPTPoverNAT.
Supported Guest Operating Systems
Table 13providesasimplifiedlistofguestoperatingsystemssupportedforvirtual
machinesrunninginWorkstation.Forthemostrecentlist,includingdetailsabout
specificoperatingsystemversions,servicepacks,andupdatessupported,seethe
onlineVMwareCompatibilityGuide.GototheVMwareWebsiteandselectResources>
CompatibilityGuides,andclicktheViewtheGuest/HostOStabontheVMware
CompatibilityGuideWebsitelink.Theguidealsoprovidesnotesoninstallingthe
mostcommonguestoperatingsystems.
VMware, Inc. 33
Chapter 1 Introduction and System Requirements
Table 1-3. Guest Operating Systems
Operating System Type Operating System Edition
Windows32bit Windows7UltimateEdition
Windows7EnterpriseEdition
Windows7Professional
Windows7HomeBasicandPremium
WindowsVistaHomeBasicandPremium
WindowsVistaBusiness
WindowsVistaEnterprise
WindowsVistaUltimate
WindowsServer2008StandardEditionwithoutHyperV
WindowsServer2008DatacenterEditionwithoutHyperV
WindowsServer2008EnterpriseEditionwithoutHyperV
WindowsServer2003StandardEdition
WindowsServer2003SmallBusinessEdition
WindowsServer2003WebEdition
WindowsServer2003Enterprise
WindowsXPProfessional
WindowsXPHomeEdition
WindowsPE
WindowsRE
Windows2000Professional
Windows2000Server
Windows2000AdvancedServer
WindowsNT4.0WorkstationwithSP6
WindowsNT4.0ServerwithSP6
WindowsNT4.0TerminalServerEditionwithSP6
WindowsMe
Windows98
Windows95
Windows3.1(withWindowsforWorkgroups)
MicrosoftMSDOS MSDOS
Workstation Users Manual
34 VMware, Inc.
Windows64bit Windows7UltimateEdition
Windows7EnterpriseEdition
Windows7Professional
Windows7HomeBasicandPremium
WindowsVistaHomeBasicandPremium
WindowsVistaBusiness
WindowsVistaEnterprise
WindowsVistaUltimate
WindowsServer2008x64StandardEditionwithoutHyperV
WindowsServer2008Datacenterx64EditionwithoutHyperV
WindowsServer2008Enterprisex64EditionwithoutHyperV
WindowsServer2003StandardEdition
WindowsServer2003SmallBusinessEdition
WindowsServer2003WebEdition
WindowsServer2003Enterprise
WindowsServerx64
WindowsXPProfessional
WindowsPE
WindowsRE
Table 1-3. Guest Operating Systems (Continued)
Operating System Type Operating System Edition
VMware, Inc. 35
Chapter 1 Introduction and System Requirements
Linux32bit AsianuxServer
CentOS
MandrakeLinux
MandrivaLinux
MandrivaCorporateDesktop
MandrivaCorporateServer
NovellLinuxDesktop
OracleEnterpriseLinux
RedHatLinux
RedHatEnterpriseLinuxServer
RedHatEnterpriseLinuxAdvancedServer(AS)
RedHatEnterpriseLinuxEnterpriseServer(ES)
RedHatEnterpriseLinuxWorkstation
RedHatEnterpriseLinuxDesktopwithorwithoutthe
WorkstationOption
RedHatEnterpriseLinuxAdvancedPlatform
SUSELinux
openSUSELinux
SUSELinuxEnterpriseServer
SUSELinuxEnterpriseDesktop
TurbolinuxServer
TurbolinuxEnterpriseServer
TurbolinuxWorkstation
TurbolinuxDesktop
UbuntuLinux
Table 1-3. Guest Operating Systems (Continued)
Operating System Type Operating System Edition
Workstation Users Manual
36 VMware, Inc.
Linux64bit AsianuxServer
CentOS
MandrivaLinux
MandrivaCorporateDesktop
MandrivaCorporateServer
OracleEnterpriseLinux
RedHatEnterpriseLinuxServer
RedHatEnterpriseLinuxAdvancedServer(AS)
RedHatEnterpriseLinuxEnterpriseServer(ES)
RedHatEnterpriseLinuxWorkstation
RedHatEnterpriseLinuxDesktopwithorwithoutthe
WorkstationOption
RedHatEnterpriseLinuxAdvancedPlatform
SUSELinux
openSUSELinux
SUSELinuxEnterpriseServer
SUSELinuxEnterpriseDesktop
TurbolinuxServer
UbuntuLinux
NovellNetWare32Bit NetWare
NovellOpenEnterprise
Server32bit
OpenEnterpriseServer32bit
FreeBSD32bit FreeBSD32bit
Note:IfyouuseSCSIvirtualdiskslargerthan2GBwith
FreeBSD4.04.3,theguestoperatingsystemdoesnotboot.To
workaroundthisissue,seetheVMwareGuestOperatingSystem
InstallationGuide.
FreeBSD64bit FreeBSD64bit
Sun32bit Solarisx8632bit
SunJavaDesktopSystem(JDS)
Sun64bit Solarisx8664bit
Table 1-3. Guest Operating Systems (Continued)
Operating System Type Operating System Edition
VMware, Inc. 37
Chapter 1 Introduction and System Requirements
Support for 64-Bit Guest Operating Systems
Workstationsupportsvirtualmachineswith64bitguestoperatingsystemsonlyon
hostmachinesthathaveoneofthesupported64bitprocessors.Whenyoupowerona
virtualmachinewitha64bitguestoperatingsystem,Workstationperformsaninternal
check.IfthehostCPUisnotasupported64bitprocessor,youcannotpoweronthe
virtualmachine.
Workstationsupportsvirtualmachineswith64bitguestoperatingsystems,running
onhostmachineswiththefollowingprocessors:
RevisionDorlaterofAMDAthlon64,Opteron,Turion64,andSempron
IntelPentium4andCore2,andCorei7processorswithEM64TandIntel
VirtualizationTechnology
Workstationsupportsvirtualmachineswith64bitguestoperatingsystemsonlyon
hostmachinesthathaveoneofthesupported64bitprocessors.Whenyoupowerona
virtualmachinewitha64bitguestoperatingsystem,Workstationperformsaninternal
check.IfthehostCPUisnotasupported64bitprocessor,youcannotpoweronthe
virtualmachine.
VMwarealsoprovidesastandaloneutilitythatyoucanusewithoutWorkstationto
performthesamecheckanddeterminewhetheryourCPUissupportedfor
Workstationvirtualmachineswith64bitguestoperatingsystems.Downloadthe64bit
processorcheckutilityfromthedownloadsareaoftheVMwareWebsite.
Workstationsupportsvirtualmachineswith64bitguestoperatingsystemsonlyin
versions6.0andlater.IfyourversionofWorkstationis5.0orearlier,upgradetoversion
6.0orlaterfor64bitguestoperatingsystemsupport.Avirtualmachinecreatedin
Workstationversion6.0witha64bitoperatingsystemcannotbepoweredonor
resumedinWorkstationversions5.0andearlier.
Workstation Users Manual
38 VMware, Inc.
VMware, Inc. 39
2
ThischapterdiscusseshowtoinstallWorkstationonyourLinuxorWindowshost.
This chaptercontainsthefollowingtopics:
InstallationPrerequisitesonpage 39
SharingaWorkstationHostwithOtherVMwareProductsonpage 40
InstallWorkstationonaWindowsHostonpage 41
InstallWorkstationonaLinuxHostonpage 44
PreparingforanUpgradeonpage 47
UpgradeWorkstationonaWindowsHostonpage 48
UpgradeWorkstationonaLinuxHostonpage 51
Installation Prerequisites
InstallingVMwareWorkstationisusuallyasimpleprocessofrunningastandard
installationwizard.
Beforeyouruntheinstallationprogram,besureyouhavethefollowing:
AcompatiblehostVerifythatthecomputerandhostoperatingsystemmeetthe
systemrequirementsforrunningWorkstation.SeeHostSystemRequirements
onpage 23.
WorkstationinstallationsoftwareIfyouhavethepackageddistributionof
Workstation,theinstallationsoftwareisontheinstallationmediainyourpackage.
Ifyouhavetheelectronicdistribution,theinstallationsoftwareisinthefileyou
downloaded.
WorkstationisavailableforWindowsandLinuxhostcomputers.Theinstallation
filesforbothhostplatformsareincludedinthepackageddistribution.
Installing and Upgrading
VMware Workstation 2
Workstation Users Manual
40 VMware, Inc.
WorkstationorVMwareACEserialnumberYourserialnumberisonthe
registrationcardinyourpackage.IfyoupurchasedWorkstationorVMwareACE
online,theserialnumberissentbyemail.
YourserialnumberallowsyoutouseWorkstationonlyonthehostoperating
systemforwhichyoulicensedthesoftware.Forexample,ifyouhaveaserial
numberforaWindowshost,youcannotrunthesoftwareonaLinuxhost.
Youneedonelicenseforeachuser.
TouseWorkstationonadifferenthostoperatingsystem,purchasealicenseonthe
VMwareWebsite.Youcanalsoobtainanevaluationlicenseatnochargefora
30dayevaluationofthesoftware.Formoreinformation,gototheVMwareWeb
site.
IfyoudonotentertheWorkstationserialnumberatinstallationtime(anoption
availableonaWindowshost),youarepromptedtoenteritthefirsttimeyou
attempttopoweronavirtualmachine.
AguestoperatingsystemAfterWorkstationisinstalled,youneedtheoperating
systeminstallationCDs,DVDs,orISOimagefilestosetupaguestinavirtual
machine.
(Optional)EclipseorMicrosoftVisualStudioToinstalltheIntegratedVirtual
DebuggerforEclipseorVisualStudiopluginsincludedwithWorkstation,Eclipse
orVisualStudiomustbeinstalledonthehostbeforeyouruntheWorkstation
installer.IfyouinstalloneorbothoftheseprogramsafteryouinstallWorkstation,
runtheWorkstationinstalleragainandselecttheModifyoptiontoinstallthe
pluginsatthattime.
FormoreinformationaboutsupportedversionsofVisualStudioandEclipse,see
thefollowingguidesontheVMwareWebsite:
IntegratedVirtualDebuggerforEclipseDevelopersGuide
IntegratedVirtualDebuggerforVisualStudioDevelopersGuide
Sharing a Workstation Host with Other VMware Products
YoucannothaveVMwareWorkstationinstalledonthesamehostmachinewithanother
VMwareproduct,suchasVMwarePlayer,VMwareServer,ortheVMwareVirtual
MachineConsole.TheonlyVMwareproductsthatcanshareahostmachinewith
WorkstationaretheVMwareVirtualCenterclientsoftwareandVMwareConverter.If
youplantoinstallVMwareWorkstationonahostmachinethatalreadycontains
anotherVMwareproduct,youmustuninstallthatproductfirst.
VMware, Inc. 41
Chapter 2 Installing and Upgrading VMware Workstation
Afteryoucompletetheprerequisitesanddeterminewhichcomputeryouwanttouse
forhostingWorkstation,seetheappropriateplatformspecificinstallationtopic.
Install Workstation on a Windows Host
Beforeyoubegin,makesureyouhavetheitemslistedinInstallationPrerequisiteson
page 39.Althoughyoucanentertheserialnumberafterinstallation,VMware
recommendsenteringitatinstallationtime.
ThistopicdescribeshowtouseaninstallationwizardtoinstallWorkstation.Toinstead
usethecommandlineinterfacetoperformasilentinstallationonmanycomputers,see
InstallWorkstationSilentlyonpage 42.
To install Workstation on a Windows host
1 LogintoyourMicrosoftWindowshostastheAdministratoruserorasauserwho
isamemberoftheWindowsAdministratorsgroup.
Loginaslocaladministrator(thatis,donotlogintothedomain,unlessyour
domainaccountisalsoalocaladministrator).
AlthoughanadministratormustinstallWorkstation,auserwithout
administrativeprivilegescanruntheprogramafteritisinstalled.
2 FromtheStartmenu,chooseRunandspecifythepathtoeithertheCD/DVDdrive
orthedownloadedinstallerfile:
Ifyouareinstallingfromtheinstallationmedia,enterD:\setup.exe,where
D:isthedriveletterforyourCD/DVDdrive.
Ifyouareinstallingfromadownloadedfile,browsetothedirectorywhere
yousavedthedownloadedinstallerfile,andruntheinstaller.
ThefilenameissimilartoVMware-workstation-<xxxx-xxxx>.exe,where
<xxxx-xxxx>isaseriesofnumbersrepresentingtheversionandbuild
numbers.
OnWindowsVistaandWindows7,whentheUserAccountControldialogbox
promptsyouforpermissiontoruntheinstaller,clickContinue.
IfyouhaveanearlierversionofWorkstationinstalledonyoursystem,theinstaller
removesthatversionbeforeinstallingthenewversion.Aftertheuninstallationis
complete,youmightbepromptedtorestartyourcomputerbeforetheinstallercan
installthenewversion.
3 Whenthewizardopensandfinishescomputingspacerequirements,clickNext.
Workstation Users Manual
42 VMware, Inc.
4 OntheSetupTypepage,selectTypicalunlessyoudonotwanttoinstallthe
applicableWorkstationIDEplugins,orifyouhaveEclipseorVisualStudio
installedinanonstandardlocation.
IfyouhaveVisualStudioorEclipseinstalled,theinstallerinstallsanintegrated
virtualdebugger.Ifyoudonotwantaplugininstalled,selecttheCustomsetup,
andselectnottoinstallthatcomponent.
IfyouselectCustom,youcanusetheSpacebuttontofindouthowmuchdisk
spaceisrequiredforeachcomponentoftheinstallation.ClickHelpfora
descriptionofwhateachtypeoficoninthelistmeans.
5 (Optional)OntheDestinationFolderpage(fortypicalsetups)ortheCustomSetup
page(forcustomsetups),ifyoudonotwantWorkstationinstalledinthedirectory
thatisshown,clickChangeandspecifyadifferentdirectory.
Ifyouspecifyadirectorythatdoesnotexist,theinstallercreatesitforyou.
You cannotinstallWorkstationonanetworkdrive.
6 Followtherestofthewizardprompts.
Someinstallationsmightrequirethatyourebootyourcomputer.Whenyourestart,you
donotneedtologinasauserwithAdministratorprivileges.
Install Workstation Silently
IfyouareinstallingWorkstationonseveralWindowshostcomputersanddonotwant
torespondtowizardprompts,youcanusethesilentinstallationfeatureofthe
MicrosoftWindowsInstaller(MSI).Thisfeatureisconvenient,forexample,inalarge
enterprise.
Beforeyoubegin,ensurethatthehostcomputerhasversion2.0orhigheroftheMSI
runtimeengine.ThisversionoftheinstallerisavailableinversionsofWindows
beginningwithWindowsXPandisavailableseparatelyfromMicrosoft.Foradditional
detailsonusingtheMicrosoftWindowsInstaller,seetheMicrosoftWebsite.
VMware, Inc. 43
Chapter 2 Installing and Upgrading VMware Workstation
To install Workstation silently
1 Openacommandpromptandenterthefollowingcommandtosilentlyextractthe
administrativeinstallationimagefromtheVMwareWorkstationinstaller:
setup.exe /s /e <install_temp_path>
setup.exeisthenameoftheinstallerontheinstallationmedia.Ifyouareusinga
downloadedinstaller,thefilenameissimilarto
VMwareWorkstation-<xxxx>.exe,where<xxxx>isaseriesofnumbers
representingtheversionandbuildnumbers.
<install_temp_path>isthefullpathtothefolderwhereyouwanttostorethe
administrativeinstallationimage.
2 Enterthefollowingcommandononelinetorunasilentinstallationusingmsiexec
andtheadministrativeinstallationimageyouextractedinthepreviousstep:
msiexec -i "<install_temp_path>\VMware Workstation.msi"
[INSTALLDIR="<path_to_program_directory>"] ADDLOCAL=ALL
[REMOVE=<feature_name,feature_name>] /qn
ToinstallWorkstationinalocationotherthanthedefault,changethepaththat
followsINSTALLDIR=tospecifythelocation.
UsetheoptionalREMOVE=<property>toskipinstallationofcertainfeatures.
The REMOVE=<property>settingcantakeoneormoreofthevalueslistedin
Table 21.
Ifyouspecifymorethanonevalue,useacommatoseparatethevalues.
For example,REMOVE=Authd,NAT.
IfyouspecifyREMOVE=Network,theinstallerskipsinstallationofcertain
networkingcomponents,includingNATandDHCP.Youdonotneedtospecify
DHCPorNATseparately.
Table 2-1. Values for the REMOVE Property
Value Description
Authd VMwareauthorizationservice,whichisusedtoperformtaskswhenyouare
notrunningWorkstationasanAdministratoruser.
Network Networkingcomponents,includingthevirtualbridgeandthehostadapters
forhostonlynetworkingandNATnetworking.Donotremovethis
componentifyouwanttouseNATorDHCP.
DHCP VirtualDHCPserver.
NAT VirtualNATdevice.
Workstation Users Manual
44 VMware, Inc.
Youcancustomizetheinstallationfurtherbyusingtheformat
<property>="<value>"toaddanyoftheinstallationpropertieslistedin
Table 22tothecommand.Avalueof1meanstrue.Avalueof0meansfalse.Ifyou
usetheserialnumberproperty,entertheserialnumberwithhyphens
(xxxxxxxxxxxxxxxxxxxx).
OthercustomconfigurationsaredescribedinAdvancedVirtualNetworkingon
page 303andUsingNATonpage 316.
Set Up a Custom Networking Configuration
Tosetupthecustomnetworkingconfiguration,createfourvirtualmachinesanduse
thevirtualmachinesettingseditortoadjustthesettingsfortheirvirtualnetwork
adapters.Installtheappropriateguestoperatingsystemsandapplicationsoftwarein
eachvirtualmachineandmaketheappropriatenetworkingsettingsineachvirtual
machine.
virtual
network
adapter
virtual network switch
(VMnet2)
virtual network switch
(VMnet3)
virtual network switch
(VMnet0)
virtual machine 4
internal PC
virtual
network
adapter
virtual
network
adapter
virtual
network
adapter
virtual machine 1
firewall
virtual
network
adapter
virtual
network
adapter
virtual machine 3
firewall
virtual machine 2
Web server
host
network
adapter
virtual bridge
VMware, Inc. 293
Chapter 14 Configuring a Virtual Network
To set up a custom networking configuration
1 SetupfourvirtualmachinesusingtheNewVirtualMachinewizard:
a ChooseFile>New>VirtualMachine.
b Createthefirstvirtualmachinewithbridgednetworkingsothatitcanconnect
toanexternalnetworkbyusingthehostcomputersnetworkadapter.
c Createtheotherthreevirtualmachineswithoutnetworking.
Settingupvirtualnetworkadaptersandinstallationoftheoperatingsystems
areperformedinStep 7.
2 Configurenetworksettingsforthefirstvirtualmachine:
a Openthefirstvirtualmachine,butdonotpoweriton.
b Usethevirtualmachinesettingseditortoaddasecondvirtualnetwork
adapter.
SeeChangingaNetworkingConfigurationonpage 295.
c ConnectthesecondadaptertoCustom(VMnet2).
3 Configurenetworksettingsforthesecondvirtualmachine.
a Openavirtualmachine,butdonotpoweriton.
b Usethevirtualmachinesettingseditortoaddavirtualnetworkadapter.
c ConnecttheadaptertoCustom(VMnet2).
4 Configurenetworksettingsforthethirdvirtualmachine:
a Openvirtualmachine3,butdonotpoweriton.
b Usethevirtualmachinesettingseditortoaddavirtualnetworkadapter.
c ConnecttheadaptertoCustom(VMnet2).
d Usethevirtualmachinesettingseditortoaddasecondvirtualnetwork
adapter.
e ConnectthesecondadaptertoCustom(VMnet3).
5 Configurenetworksettingsforthefourthvirtualmachine:
a Openvirtualmachine4,butdonotpoweriton.
b Usethevirtualmachinesettingseditortoaddavirtualnetworkadapter.
c ConnecttheadaptertoCustom(VMnet3).
Workstation Users Manual
294 VMware, Inc.
6 DeterminethenetworkaddressesusedforVMnet2andVMnet3:
OnWindowshosts,openacommandpromptandrunthefollowing
command:
ipconfig /all
Notethenetworkaddressesthateachvirtualadapteruses.
OnLinuxhosts,openaterminalandrunthefollowingcommand:
ifconfig
Notethenetworkaddressesthateachvirtualswitchuses.
7 Poweroneachvirtualmachineinturnandinstalltheappropriateguestoperating
system.
8 OnWindowsandLinuxhosts,toconfigurenetworkaddressesusingtheDHCP
server,dothefollowing:
a ChooseEdit>VirtualNetworkEditor.
OnLinux,chooseApplications>SystemTools>VirtualNetworkEditor,or
theequivalentmenupathforyourversionofLinux.
b SelectVMnet2andchecktheUselocalDHCPservicetodistributeIPaddress
toVMsoption.
Formoreinformationonchangingsubnets,seeChangeSubnetorDHCP
SettingsonaWindowsHostonpage 300andChangeSubnetorDHCP
SettingsonaLinuxHostonpage 300.
9 Configurethenetworkingineachguestoperatingsystem:
Machine1Forthebridgednetworkadapterinvirtualmachine1,usethe
networkingsettingsneededforaconnectiontotheexternalnetwork.Ifthe
virtualmachinereceivesitsIPaddressfromaDHCPserverontheexternal
network,thedefaultsettingsshouldwork.
Forthesecondnetworkadapterinvirtualmachine1,manuallyassignan
IP addressintherangeyouareusingwithVMnet2.
Machine2AssignanIPaddressintherangeyouareusingwithVMnet2.
Machine3NetworkadaptersareconnectedtoVMnet2andVMnet3.Assign
anIPaddressinthevirtualnetworksrangeitisconnectedto.
Machine4AssignanIPaddressintherangeyouareusingwithVMnet3.
10 Installthenecessaryapplicationsoftwareineachvirtualmachine.
VMware, Inc. 295
Chapter 14 Configuring a Virtual Network
Changing a Networking Configuration
Youcanusethevirtualmachinesettingseditortoaddvirtualnetworkadapterstoyour
virtualmachineandchangethenetworkingconfigurationofexistingadapters.
Find the Network Type of a Virtual Machine
Unlessyousetupacustomnetworkconnection,avirtualmachineusesabridged,NAT,
orhostonlynetworkconnection.IfyouusetheTypicalsetuppathintheNewVirtual
Machinewizardtocreateavirtualmachine,thenewvirtualmachineusestheNAT
networktype.
Formoreinformation,seeCommonNetworkingConfigurationsonpage 286.
To find the network type of a virtual machine
1 Selectthevirtualmachine.
2 ChooseVM>Settings>Hardware.
3 Selectthenetworkadapter.
TheNetworkConnectionsectiondisplaysthedetailsthatletsyoutochangethe
settings.
Tochangethenetworktype,seeModifyExistingVirtualNetworkAdapterson
page 296.
Add Virtual Network Adapters
Youcanaddupto10virtualnetworkadapterstoavirtualmachine.
To add virtual network adapters
1 Selectthevirtualmachinetowhichyouwanttoaddtheadapter.
2 ChooseVM>Settings.
3 OntheHardwaretab,clickAdd.
4 SelectNetworkAdapterandclickNext.
5 Selectthenetworktypetouse.
Workstation Users Manual
296 VMware, Inc.
6 (Optional)IfyouselectCustom,choosetheVMnetnetworktousefromthe
dropdownmenu.
AlthoughVMnet0,VMnet1,andVMnet8aretechnicallyavailableinthislist,they
areusuallyusedforbridged,hostonly,andNATconfigurations,respectively.You
mustperformanotherproceduretomakethemavailableforuseincustom
configurations.ChooseoneoftheotherVMnetswitches.
7 ClickFinish.
Thenewadapterisadded.
8 ClickOKtosaveyourconfiguration.
Modify Existing Virtual Network Adapters
Beforeyoubeginmodifyingthevirtualnetworkadapters,determinethenetworktype
youwanttoassign.SeeCommonNetworkingConfigurationsonpage 286.
To modify existing virtual network adapters
1 Selectthevirtualmachine.
2 ChooseVM>Settings.
3 OntheHardwaretab,selecttheadaptertomodify.
4 Selectthenetworktypetouse.
5 (Optional)IfyouselectCustom,choosetheVMnetvirtualnetworktouseforthe
networkfromthedropdownmenu.
AlthoughVMnet0,VMnet1,andVMnet8aretechnicallyavailableinthismenu,
theyareusuallyusedforbridged,hostonly,andNATconfigurations,respectively.
Youmustperformanotherproceduretomakethemavailableforuseincustom
configurations.ChooseoneoftheotherVMnetswitches.
6 ClickOK.
7 BesuretheguestoperatingsystemisconfiguredtouseanappropriateIPaddress
onthenewnetwork.
IftheguestisusingDHCP,releaseandrenewthelease.IftheIPaddressisset
statically,besuretheguesthasanaddressonthecorrectvirtualnetwork.
VMware, Inc. 297
Chapter 14 Configuring a Virtual Network
Configuring Bridged Networking
WindowsandLinuxhostsallowyoutoconfigurebridgednetworking.Youcanview
andchangethesettingsforbridgednetworkingonyourhost,determinewhich
networkadaptersonyourhosttouseforbridgednetworking,andmapspecific
networkadapterstospecificvirtualnetworks,calledVMnets.
Configure VMnet0 Automatic Bridged Networking on a Windows
Host
WhenyouconfigureVMnet0bridgednetworkingthechangeyoumakeaffectsallthe
virtualmachinesthatusebridgednetworkingonthehost.
To configure VMnet0 bridged networking on a Windows host
1 ChooseEdit>VirtualNetworkEditor.
Bydefault,VMnet0issettouseautomaticbridgingmodeandbridgestoallofthe
activenetworkadaptersonthehostcomputer.
2 ClicktheAutomaticSettings,andselectthecheckboxfortheavailablephysical
networkadapter(s)toautomaticallybridgetoVMnet0.
Toplacerestrictionsonanetworkadapter,seeAddorRemoveaHostNetwork
AdapterfromtheListofIncludedAdapters.
3 ClickOK.
Add or Remove a Host Network Adapter from the List of Included
Adapters
Onhostsystemswithmultiplephysicalnetworkadapters,thechoiceofwhichadapter
Workstationusesisarbitrary.Therefore,youcanplaceorremoverestrictionsona
networkadapterofyourchoice.
To add or remove a host network adapter from the list of included adapters
1 ChooseEdit>VirtualNetworkEditor.
2 ClickAutomaticSettings.
3 IntheIncludeadapterssection,dooneofthefollowing:
Toremoveanadapter,deselecttheadapter.
Toaddanadapter,selecttheadapter.
4 ClickOK.
Workstation Users Manual
298 VMware, Inc.
Designate a Physical Network Adapter to Bridge to Custom Virtual
Switches
Beforeyouchangethebridgedadaptermappings,checkwhichvirtualnetworkthe
physicalnetworkadapterisgoingtobeassignedto.
To designate a physical network adapter to bridge to custom virtual switches
1 ChooseEdit>VirtualNetworkEditor.
2 ChooseanadapterfromtheBridgedtodropdownmenu.
YoucancreateacustombridgednetworkonvirtualswitchesVMnet2toVMnet7.
OnWindows,youcanalsouseVMnet9.OnLinux,youcanalsousevmnet10
throughvmnet255.
3 ClickOK.
Configure vmnet0 Automatic Bridged Networking on a Linux
Host
Bydefault,vmnet0issettouseautomaticbridgingmodeandbridgestooneofthe
activenetworkadaptersonthehostcomputer.
To configure vmnet0 automatic bridged networking on a Linux host
1 OntheLinuxhost,dooneofthefollowing:
Fromthedesktop,
Openaterminalwindowandenterthefollowingcommand:
/usr/bin/vmware-netcfg
2 Whenprompted,entertheadministratorpassword.
3 Ifthetableinthenetworkeditordoesnotdisplayarowforvmnet0,click
Add NetworkandcompletetheAddVirtualNetworkdialogbox.
CAUTIONIfyoureassignaphysicalnetworkadaptertoadifferentvirtualnetwork,any
virtualmachinethatisusingtheoriginalnetworklosesitsnetworkconnectivity
throughthatnetwork.Youmustthenchangethesettingforeachaffectedvirtual
machinesnetworkadapterindividually.
Thiscanbeespeciallytroublesomeifyourhosthasonlyonephysicalnetworkadapter
andyoureassignittoaVMnetotherthanVMnet0.Inthiscase,eventhoughtheVMnet
stillappearstobebridgedtoanautomaticallychosenadapter,theonlyadapteritcan
usewasassignedtoanotherVMnet.
VMware, Inc. 299
Chapter 14 Configuring a Virtual Network
4 Selectthevmnet0rowinthetableandselectBridged.
5 Dooneofthefollowing:
Touseautomaticbridging,clickAutomaticSettingsandcompletethedialog
box.
Ifyouselectmultiplecheckboxes,thevirtualmachinebridgestothefirst
availablehostnetworkadapter.Ifaniteminthelistisdisabled,theadapteris
notavailablebecauseitisalreadybeingusedtobridgetoanothervmnet.
Tospecifyonehostnetworkadapter,usetheBridgetolistbox.
6 ClickSave.
Setting Up a Second Automatic Bridged Network Interface
Ifyouhavetwonetworkadaptersinstalledonyourhostcomputerthatareconnected
totwodifferentnetworks,youmightwantyourvirtualmachinesonthathostcomputer
tobridgetobothnetworkadapterssothatthevirtualmachinescanaccesseitherorboth
physicalnetworks.
WhenyouinstallWorkstationonahostcomputerwithmultiplenetworkadapters,you
canconfiguremultiplebridgednetworks.OnaWindowshost,tosetupmultiple
bridgednetworksseeConfigureVMnet0AutomaticBridgedNetworkingona
WindowsHostonpage 297.OnaLinuxhost,tosetupmultiplebridgednetworkssee
Configurevmnet0AutomaticBridgedNetworkingonaLinuxHostonpage 298.
Changing the Subnet or DHCP Settings for a Virtual
Network
OnWindowsandLinuxhosts,youcanusethevirtualnetworkeditortomakechanges
tosubnetandDHCPsettings.
IPnetworksaredividedusingsubnetmasks.Whenyoumodifythesubnetmask,
WorkstationautomaticallyupdatestheIPaddresssettingsforothercomponentssuch
asDHCP,NAT,andhostvirtualadapterifthedefaultsettingswereneverchanged.
The specificsettingsthatareautomaticallyupdatedincludeDHCPleaserange,DHCP
serveraddress,NATgatewayaddress,andhostvirtualadapterIPaddress.
However,ifyouchangedanyofthesesettingsfromtheirdefaultvalue,Workstation
doesnotupdatethatsettingautomaticallyifthevalueisinthevalidrange.Ifthevalue
exceedsthevalidrange,Workstationresetsthesettingsbasedonthesubnetrange.
Workstationpresumesthatcustomsettingsarenottobemodified.Thisisthecaseeven
ifyoulaterchangedthesettingbacktothedefault.
Workstation Users Manual
300 VMware, Inc.
Change Subnet or DHCP Settings on a Windows Host
Tochangethesubnetsettings,configurethesubnetmask.Thedefaultsubnetmaskis
255.255.255.0(aClassCaddress).Typically,thismeansyoushouldmodifyonlythe
thirdnumberintheIPaddress,forexample,xin192.168.x.0or198.16.x.0.Ingeneral,
donotchangethesubnetmask.Certainvirtualnetworkservicesmightnotworkaswell
withacustomizedsubnetmask.
To change subnet or DHCP settings on a Windows host
1 ChooseEdit>VirtualNetworkEditor.
2 ChangethesubnetIPaddressintheSubnetIPfieldandmodifythesubnetmask
intheSubnetmaskfield.
Theaddressshouldspecifyavalidnetworkaddressthatissuitableforusewiththe
subnetmask.
3 ClickOK.
4 IntheDHCPsettingsdialogbox,youcanchangetherangeofIPaddresses
providedbytheWorkstationDHCPserveronaparticularvirtualnetwork.
YoucanalsosetthedurationofDHCPleasesprovidedtoclientsonthevirtual
network.
5 ClickOK.
Change Subnet or DHCP Settings on a Linux Host
NATandhostonlynetworktypescanhavesettingsforsubnetIP.Youcanusethe
virtualnetworkeditortochangesubnetsettingsforavirtualnetworkonaLinuxhost.
YoucanalsousethevirtualnetworkeditortospecifythatalocalDHCPservice
distributesIPaddressestovirtualmachines.TochangeDHCPsettingsfurther,editthe
dhcp.conffile.SeeConfiguretheDHCPServeronaLinuxHostonpage 306.
To change subnet or DHCP settings on a Linux host
1 OntheLinuxhost,dooneofthefollowing:
Fromthedesktop,chooseApplications>SystemTools>VirtualNetwork
Configuration,ortheequivalentmenupathforyourversionofLinux.
Openaterminalwindowandenterthefollowingcommand:
/usr/bin/vmware-netcfg
2 Whenprompted,entertheadministratorpassword.
VMware, Inc. 301
Chapter 14 Configuring a Virtual Network
3 Ifthetableinthenetworkeditordoesnotdisplayarowforthenetworktypeyou
want,clickAddNetworkandcompletetheAddVirtualNetworkdialogbox.
Usevmnet1forahostonlynetworktype,andusevmnet8foraNATnetworktype.
4 SelecttherowinthetablethatcorrespondstothenetworktoeditandselectNAT
orHostonly,asappropriate.
5 UsetheappropriatecheckboxestospecifywhethertouseaDHCPservice,ahost
virtualadapter,orboth.
6 TospecifysubnetIP,dooneofthefollowing:
ToautomaticallyselectanunusedsubnetIP,leavetheSubnetIPtextbox
empty.
Thenexttimeyoustartthevirtualnetworkeditor,thesubnetIPappearsinthe
textbox.
TypethesubnetIPyouwanttouseintheSubnetIPtextbox.
7 ClickSave.
Configuring Host Virtual Network Adapters
WhenyouinstallWorkstation,twonetworkadaptersareaddedtotheconfigurationof
yourhostoperatingsystem.Oneletsthehosttoconnecttothehostonlynetwork,and
theotherletsthehosttoconnecttotheNATnetwork.
Thepresenceofvirtualnetworkadaptershasaslightperformancecost,because
broadcastpacketsmustgototheextraadapters.OnWindowsnetworks,browsingyour
networkmightbeslowerthanusual.Insomecases,theseadaptersinteractwiththe
hostcomputersnetworkingconfigurationinundesirableways.
Connect or Disconnect a Host Virtual Network Adapter
Beforeyoudisconnectahostvirtualnetworkadapterdeterminewhetheryouaregoing
tousethevirtualnetworkadapter.
To connect or disconnect a host virtual network adapter
1 ChooseEdit>VirtualNetworkEditor.
2 ClicktheConnectahostvirtualadaptertothisnetworkoptiontoconnect.
3 DeselecttheConnectahostvirtualadaptertothisnetworkoptiontodisconnect.
Workstation Users Manual
302 VMware, Inc.
Setting Up Two Separate Host-Only Networks
Setupmultiplehostonlynetworksonthesamehostcomputerinsituationssuchasthe
following:
Tohavetwovirtualmachinesconnectedtoonehostonlynetwork,andother
virtualmachinesconnectedtoanotherhostonlynetworktoisolatethenetwork
trafficoneachnetwork.
Totestroutingbetweentwovirtualnetworks.
Totestavirtualmachinewithmultiplenetworkinterfacecards,withoutusingany
physicalnetworkadapters.
OnWindowsandLinuxhosts,thefirsthostonlynetworkissetupautomaticallywhen
youinstallWorkstation.TosetupmultiplehostonlynetworksonWindowsandLinux
hostsseeConnectorDisconnectaHostVirtualNetworkAdapteronpage 301.
OnaLinuxhost,afterthehostonlynetworksaresetup,atleastfournetworkinterfaces
appear:eth0,lo,vmnet1,andvmnet2.Thesefourinterfacesshouldhavedifferent
IP addressesonseparatesubnets.
VMware, Inc. 303
15
Thischapterprovidesdetailedinformationaboutnetworkingcapabilitiesand
specializedconfigurationsforexpertusers.Thischapterincludesthefollowing
advancedvirtualnetworkingtopics:
SelectingIPAddressesonaHostOnlyNetworkorNATConfigurationon
page 304
AvoidingIPPacketLeakageinaHostOnlyNetworkonpage 306
MaintainingandChangingtheMACAddressofaVirtualMachineonpage 308
ControllingRoutingInformationforaHostOnlyNetworkonLinuxonpage 310
PotentialIssueswithHostOnlyNetworkingonLinuxonpage 311
ConfiguringHostOnlyVirtualMachinesonpage 312
SetUpRoutingBetweenTwoHostOnlyNetworksonpage 314
UsingVirtualNetworkAdaptersinPromiscuousModeonaLinuxHoston
page 316
UsingNATonpage 316
AdvancedNATConfigurationonpage 319
UsingSambawithWorkstationonpage 328
Advanced Virtual
Networking 15
Workstation Users Manual
304 VMware, Inc.
Selecting IP Addresses on a Host-Only Network or NAT
Configuration
Thehostandallvirtualmachinesconfiguredforhostonlynetworkingareconnected
tothenetworkthroughavirtualswitch.Typically,allthepartiesonthisnetworkuse
theTCP/IPprotocolsuite,althoughothercommunicationprotocolscanbeused.
Anetworkaddresstranslation(NAT)configurationalsosetsupaprivatenetwork,
whichmustbeaTCP/IPnetwork.ThevirtualmachinesconfiguredforNATare
connectedtothatnetworkthroughavirtualswitch.Ahostvirtualadapterconnectsthe
hostcomputertotheprivatenetworkusedforNAT.
Eachvirtualmachineandthehostmustbeassignedaddressesontheprivatenetwork.
ThisistypicallydonebyusingtheDHCPserverincludedwithWorkstation.Thisserver
doesnotservicevirtualorphysicalmachinesresidingonbridgednetworks.
AddressescanalsobeassignedstaticallyfromapoolofaddressesthattheDHCPserver
doesnotassign.
How the Subnet Number Is Assigned
WhenhostonlynetworkingisenabledatthetimeWorkstationisinstalled,thesubnet
IPaddressforthevirtualnetworkisautomaticallyselectedasanunusedprivatesubnet
IPaddress.ANATconfigurationalsousesanunusedprivatenetworkautomatically
selectedwhenyouinstallWorkstation.
Find the Network Type Used on a Virtual Machine
Beforeyouassignasubnetnumber,determinethenetworktypeusedonthevirtual
machine.
To find the network type used on a virtual machine
ChooseEdit>VirtualNetworkEditor.
ThesubnetnumberassociatedwiththevirtualnetworkislistedintheSubnetAddress
column.
VMware, Inc. 305
Chapter 15 Advanced Virtual Networking
Determining Whether to Use DHCP or Statically Assign
Addresses
UsingDHCPtoassignIPaddressesissimplerandmoreautomaticthanstatically
assigningthem.MostWindowsoperatingsystems,forexample,arepreconfiguredto
useDHCPatboottime,soWindowsvirtualmachinescanconnecttothenetworkthe
firsttimetheyarebooted,withoutadditionalconfiguration.Ifyouwantyourvirtual
machinestocommunicatewitheachotherusingnamesinsteadofIPaddresses,
however,youmustsetupanamingconvention,anameserverontheprivatenetwork,
orboth.InthatcaseitmightbesimplertousestaticIPaddresses.
Ingeneral,ifyouhavevirtualmachinesyouintendtousefrequentlyorforextended
periodsoftime,itismostconvenienttoassignthemstaticIPaddressesorconfigurethe
VMwareDHCPservertoalwaysassignthesameIPaddresstoeachofthesevirtual
machines.
DHCP Conventions for Assigning IP Addresses
Fortemporaryvirtualmachines,useDHCPandletitallocateanIPaddress.
ForeachhostonlyorNATnetwork,theavailableIPaddressesareallocatedusingthe
conventionsshowninTable 151andTable 152,where<net>isthenetworknumber
assignedtoyourhostonlyorNATnetwork.WorkstationalwaysusesaClassCaddress
forhostonlyandNATnetworks.
Table 15-1. IP Address Use on a Host-Only Network
Range Address Use Example
<net>.1 Hostmachine 192.168.0.1
<net>.2<net>.127 Staticaddresses 192.168.0.2192.168.0.127
<net>.128<net>.253 DHCPassigned 192.168.0.128192.168.0.253
<net>.254 DHCPserver 192.168.0.254
<net>.255 Broadcasting 192.168.0.255
Table 15-2. IP Address Use on a NAT Network
Range Address Use Example
<net>.1 Hostmachine 192.168.0.1
<net>.2 NATdevice 192.168.0.2
<net>.3<net>.127 Staticaddresses 192.168.0.3192.168.0.127
<net>.128<net>.253 DHCPassigned 192.168.0.128192.168.0.253
Workstation Users Manual
306 VMware, Inc.
Configure the DHCP Server on a Windows Host
OnaWindowshost,usethevirtualnetworkeditortoconfiguretheDHCPserver.
To configure the DHCP server on a Windows host
1 ChooseEdit>VirtualNetworkEditor.
2 ClickDHCPSettingstochangesettingsfortheselectedvirtualnetwork.
3 IntheDHCPSettingsdialogboxthatappears,makechangesandclickOK.
Configure the DHCP Server on a Linux Host
EditingtheDHCPserverconfigurationfilerequiresinformationthatisbestobtained
directlyfromtheDHCPserverdocumentation.Consultthedhcpd(8)and
dhcpd.conf(8)manualpages.
To configure the DHCP server on a Linux host
ToconfigurethehostonlyDHCPserver,edittheDHCPconfigurationfilefor
vmnet1(/etc/vmware/vmnet1/dhcp/dhcp.conf).
ToconfiguretheDHCPserverfortheNATnetwork,edittheconfigurationfilefor
vmnet8(/etc/vmware/vmnet8/dhcp/dhcp.conf).
Avoiding IP Packet Leakage in a Host-Only Network
Eachhostonlynetworkshouldbeconfinedtothehostmachineonwhichitissetup.
Packetsthatvirtualmachinessendonthisnetworkshouldnotleakouttoaphysical
networkattachedtothehost.Packetleakagecanoccuronlyifamachineactively
forwardspackets.
Ifyouusedialupnetworkingsupportinavirtualmachineandpacketforwardingis
enabled,hostonlynetworktrafficmightleakoutthroughthedialupconnection.
To preventtheleakage,disablepacketforwardinginyourguestoperatingsystem.
<net>.254 DHCPserver 192.168.0.254
<net>.255 Broadcasting 192.168.0.255
Table 15-2. IP Address Use on a NAT Network (Continued)
Range Address Use Example
NOTETheeditsmadeinsidethereadonlysectionoftheDHCPconfigurationfileare
lostthenexttimeyourunthenetworkeditor.
VMware, Inc. 307
Chapter 15 Advanced Virtual Networking
Ifthehostcomputerhasmultiplenetworkadapters,itmightbeintentionally
configuredtouseIPforwarding.Ifthatisthecase,youdonotwanttodisable
forwarding.Toavoidpacketleakage,youmustenableapacketfilteringfacilityand
specifythatpacketsfromthehostonlynetworkshouldnotbesentoutsidethehost
computer.Consultyouroperatingsystemdocumentationfordetailsonhowto
configurepacketfiltering.
Disable Packet Forwarding on Windows Hosts
SystemsusingserverversionsofWindowsoperatingsystemscanforwardIPpackets
thatarenotaddressedtothem.Bydefault,thesesystemsandWindowsVistaand
Windows7systemshaveIPpacketforwardingdisabled.IPforwardingisnota
problemonWindows XPProfessionalorWindows XPHomeEditionhosts.
IfyoufindpacketsleakingfromahostonlynetworkonaWindowshostcomputer,
checkwhetherforwardingwasenabledonthehostmachine.Ifitisenabled,disableit.
To disable packet forwarding on Windows hosts
Dooneofthefollowing:
StoptheRoutingandRemoteAccessservice:
a ChooseStart>Runandenterservices.mscintheRundialogbox.
b IntheServiceswindowthatappears,disabletheRoutingandRemoteAccess
service.
UseWindowsAdministrativeToolstodisableroutingandremoteaccess:
a OnaWindows2003Serverhost,chooseStart>Programs>Administrative
Tools>RoutingandRemoteAccess.
Aniconontheleftislabeledwiththehostname.Ifagreendotappearsover
theicon,IPforwardingisturnedon.
b ToturnoffIPforwarding,rightclicktheiconanddisableRoutingand
RemoteAccess.
Areddotappears,indicatingthatIPforwardingisdisabled.
Workstation Users Manual
308 VMware, Inc.
Disable Packet Forwarding on Linux Hosts
IfyoufindpacketsleakingfromahostonlynetworkonaLinuxhostcomputer,check
whetherforwardingwasmistakenlyenabledonthehostmachine.Ifitisenabled,
disableit.
To disable packet forwarding on Linux hosts
DependingonwhichtypeofLinuxsystemyouhave,useoneofthefollowingmethods:
Disableforwardingbywritinga0(zero)tothespecialfile
/proc/sys/net/ipv4/ip_forward.Asroot(su-),enterthefollowingcommand:
echo "0" > /proc/sys/net/ipv4/ip_forward
UseaconfigurationoptionthatisappropriateforyourLinuxdistribution.
For example,youmightuseacontrolpanel,specifyasettingatthetimeyou
compileyourkernel,orenteraspecificationwhenyoubootyoursystem.
Fordetailsaboutthemethodtousewithyourdistribution,consultyouroperating
systemdocumentation.
Maintaining and Changing the MAC Address of a Virtual
Machine
Whenavirtualmachineispoweredon,Workstationassignseachofitsvirtualnetwork
adaptersanEthernetmediaaccesscontrol(MAC)address.AMACaddressisthe
uniqueaddressassignedtoeachEthernetnetworkdevice.
ThesoftwareguaranteesthatvirtualmachinesareassigneduniqueMACaddresses
withinagivenhostsystem.ThevirtualmachineisassignedthesameMACaddress
everytimeitispoweredonifbothofthefollowingconditionsaretrue:
Thevirtualmachineisnotmoved.Thatis,thepathnameandfilenameforthe
virtualmachinesconfigurationfileremainthesame.
Nochangesaremadetocertainsettingsintheconfigurationfile.
However,WorkstationcannotguaranteetoautomaticallyassignuniqueMAC
addressesforvirtualmachinesthatrunonmultiplehostsystems.
Avoiding MAC Address Changes
ToavoidchangesintheMACaddressautomaticallyassignedtoavirtualmachine,do
notmovethevirtualmachinesconfigurationfile.Movingittoadifferenthost
computerorevenmovingittoadifferentlocationonthesamehostcomputerchanges
theMACaddress.
VMware, Inc. 309
Chapter 15 Advanced Virtual Networking
Donotchangecertainsettingsinthevirtualmachinesconfiguration(.vmx)file.If you
neveredittheconfigurationfilebyhandanddonotremovethevirtualnetwork
adapter,thesesettingsremainunchanged.Ifyoudoedittheconfigurationfilebyhand,
donotremoveorchangethefollowingoptions:
ethernet[n].generatedAddress
ethernet[n].addressType
ethernet[n].generatedAddressOffset
uuid.location
uuid.bios
ethernet[n].present
Intheseoptions,[n]isthenumberofthevirtualnetworkadapter,forexample0.
Assign the Same MAC Address to Any Virtual Machine Manually
AssigntheMACaddressmanuallyinsteadofallowingWorkstationtoassignitto
guaranteethefollowing:
ThesameMACaddressisassignedtoagivenvirtualmachineeverytimeyou
poweriton,evenifthevirtualmachineismoved.
AuniqueMACaddressisprovidedforeachvirtualmachinewithinanetworked
environment.
To assign the same MAC address to any virtual machine manually
1 Useatexteditortoremovefromtheconfiguration(.vmx)filethethreelinesthat
beginwiththefollowing:
ethernet[n].generatedAddress
ethernet[n].addressType
ethernet[n].generatedAddressOffset
Intheseoptions,[n]isthenumberofthevirtualnetworkadapter,forexample,0.
OnaLinuxhost,avirtualmachinecreatedwithanearlierVMwareproductmight
haveaconfigurationfilewitha.cfgextension.
NOTETopreserveavirtualnetworkadaptersMACaddress,youmustbecarefulnot
toremovetheadapter.Ifyouremovetheadapterbutlaterrecreateit,theadapter
mightreceiveadifferentMACaddress.
Workstation Users Manual
310 VMware, Inc.
2 AddthefollowinglinetotheconfigurationfileabovetheUUIDlinesinthefile:
ethernet[n].address = 00:50:56:XX:YY:ZZ
Inthisline,thefourthpairofnumbers,XX,mustbeavalidhexadecimalnumber
between00hand3Fh,andYYandZZmustbevalidhexadecimalnumbersbetween
00handFFh.YoumustusetheaboveformatbecauseWorkstationvirtual
machinesdonotsupportarbitraryMACaddresses.
AvalueforXX:YY:ZZthatisuniqueamongyourhardcodedaddressesavoids
conflictsbetweentheautomaticallyassignedMACaddressesandthemanually
assignedaddresses.
Controlling Routing Information for a Host-Only Network
on Linux
Ahostonlynetworkisafullfledgednetwork.Ithasanetworkinterfaceassociated
withit(vmnet1)thatismarkedupatthetimethehostoperatingsystemisbooted.
Routingserverprocessesthatoperateonthehostoperatingsystem,suchasroutedand
gated,automaticallydiscoverthehostonlynetworkandpropagateinformationon
howtoreachthenetworkunlessyouexplicitlyconfigurethemnottodoso.
Ifeitheroftheseprocessesisbeingrunonlytoreceiveroutinginformation,theeasiest
solutionistoruntheroutingconfigurationwitha-qoptionsothatthehostonly
networkdoesnotsupplybutonlyreceivesroutinginformation.
If,however,routingservicesarerunningbecausetheyaretosupplyrouting
information,configurethemsothattheydonotadvertiseroutestothehostonly
network.
TheversionofroutedincludedwithmanydistributionsofLinuxhasnosupportfor
specifyingthataninterfaceshouldnotbeadvertised.Consulttherouted(8)manual
pageforyoursystem.
Forgated,configurationyoumustexplicitlyexcludethevmnet1interfacefromany
protocolactivity.Ifyouneedtorunvirtualmachinesonahostonlynetworkona
multihomedsystemwheregatedisusedandhaveproblemsdoingso,contactVMware
technicalsupportbysubmittingasupportrequestontheVMwareWebsite.
VMware, Inc. 311
Chapter 15 Advanced Virtual Networking
Potential Issues with Host-Only Networking on Linux
Thefollowingarecommonissuesyoumightencounterwhenyouareconfiguringa
hostonlynetworkonLinux.
DHCPD on the Linux Host Does Not Work After Installing
Workstation
IfyouwererunningtheDHCPserverdhcpdutilityonyourmachinebeforeyou
installedWorkstation,itprobablywasconfiguredtorespondtoDHCPrequestsfrom
clientsonanynetworkinterfacepresentonthemachine.Whenhostonlynetworking
isconfigured,anadditionalnetworkinterface,vmnet1,ismarkedupandavailablefor
use,anddhcpdmightnoticethis.
Insuchcases,somedhcpdimplementationsabortiftheirconfigurationfilesdonot
includeasubnetspecificationfortheinterface.Thiscanhappenevenifdhcpdisnot
supposedtorespondtomessagesthatarrivethroughtheinterface.
Thebestsolutionistoaddalinetothedhcpdconfigurationfileinthefollowingformat:
subnet <net>.0 netmask 255.255.255.0 {}
Here <net>isthenetworknumberassignedtoyourhostonlynetwork,forexample,
192.168.0.Thislineintheconfigurationfileinformsdhcpdaboutthehostonlynetwork
andtellsitexplicitlynottorespondtoanyDHCPrequestsarrivingfromit.
Analternativesolutionistoexplicitlystatethesetofnetworkinterfacesfordhcpdto
monitoreachtimeyoustarttheprogram.Forexample,ifyourmachinehasone
Ethernetinterface,eth0,eachtimeyoustartdhcpd,listtheinterfaceonthecommand
line:
dhcpd eth0
Thispreventsdhcpdfromsearchingforallavailablenetworkinterfaces.
IfthesesolutionsdonotworkforyourDHCPserverprogram,itmightbeanoldDHCP
server.YoucantryupgradingtoamorecurrentversionofDHCPavailablefromthe
InternetSystemsConsortium(ISC)Website.
DHCP and DDNS
UseDHCPtosupplyIPaddressesaswellasotherinformation,suchastheidentityof
ahostrunninganameserverandthenearestrouterorgateway.TheDHCPserverin
Workstationdoesnotprovideameanstodynamicallyestablisharelationshipbetween
theIPaddressitassignsandaclientsname(thatis,toupdateaDNSserverusing
dynamicdomainnameservice(DDNS).
Workstation Users Manual
312 VMware, Inc.
Tousenamestocommunicatewithothervirtualmachines,youmusteithereditthe
DHCPconfigurationfileforvmnet1(/etc/vmware/vmnet1/dhcpd/dhcpd.conf),or
useIPaddressesthatarestaticallyboundtoahostname.EditingtheDHCPserver
configurationfilerequiresinformationthatisbestobtaineddirectlyfromtheDHCP
serverdocumentation.Consultthedhcpd(8)anddhcpd.conf(8)manualpages.
Configuring Host-Only Virtual Machines
Ifyouhavealreadycreatedtwohostonlyinterfaces(VMnet1andVMnet2),youcanset
upyourvirtualmachinesforoneofthefollowingconfigurations:
Configuration1Thevirtualmachineisconfiguredwithonevirtualnetwork
adapter,andthatvirtualadapterisconnectedtothedefaulthostonlyinterface
(VMnet1).Tousethisconfiguration,seeSetUpUsingConfiguration1or2on
page 312.
Configuration2Thevirtualmachineisconfiguredwithonevirtualnetwork
adapter,andthatvirtualadapterisconnectedtothenewlycreatedhostonly
interface(VMnet2).Tousethisconfiguration,seeSetUpUsingConfiguration1
or2onpage 312.
Configuration3Thevirtualmachineisconfiguredwithtwovirtualnetwork
adapters.Onevirtualadapterisconnectedtothedefaulthostonlyinterface
(VMnet1)andtheothervirtualadapterisconnectedtothenewlycreatedhostonly
interface(VMnet2).Tousethisconfiguration,seeSetUpUsingConfiguration3
onpage 313.
Set Up Using Configuration 1 or 2
Usethevirtualmachinesettingseditortoconnectthevirtualmachinetothedefault
hostonlyadapteroracustomhostonlyadapter.
To set up using configuration 1 or 2
1 Selectthevirtualmachine.
2 ChooseVM>Settings.
3 OntheHardwaretab,selectNetworkAdapter.
NOTETheeditsmadeinsidethereadonlysectionoftheDHCPconfigurationfileare
lostthenexttimeyourunthenetworkeditor.
VMware, Inc. 313
Chapter 15 Advanced Virtual Networking
4 IntheNetworkConnectionsection,dooneofthefollowing:
Toconnecttothedefaulthostonlyinterface(VMnet1),selectHostonly.
Toconnecttothenewlycreatedhostonlyinterface,selectCustom,andchoose
VMnet2fromthedropdownmenuontheright.
5 (Optional)Ifnonetworkadapterisshowninthelistofdevices,addone,as
describedinAddVirtualNetworkAdaptersonpage 295.
Set Up Using Configuration 3
Makesurethattherearetwonetworkdevicesforthisvirtualmachine.Formore
informationonaddingvirtualnetworkadapters,seeAddVirtualNetworkAdapters
onpage 295.
To set up using configuration 3
1 Selectthevirtualmachine.
2 Makesurethevirtualmachineispoweredoff.
3 ChooseVM>Settings.
4 OntheHardwaretab,selectthefirstNetworkAdapter.
5 IntheNetworkConnectionsection,selectHostonly.
Thisadapterisconnectedtothedefaulthostonlyinterface(VMnet1).
6 Selectthesecondnetworkadapterinthelist,andintheNetworkConnection
section,selectCustomandchooseVMnet2fromthedropdownmenu.
Complete Configuring the Virtual Network Adapters
TocompletetheconfigurationyoumustassignanIPaddressontheappropriateVMnet
subnettoeachvirtualnetworkadapterasyouwouldforphysicaladaptersona
physicalcomputer.
To complete configuring the virtual network adapters
1 Poweronthevirtualmachineandinstallyourguestoperatingsystem.
Inconfigurations1and2,youseeonenetworkadapter.Inconfiguration3,yousee
twonetworkadapterswithintheguest.
2 AssignIPaddressestothevirtualnetworkadapters.
Workstation Users Manual
314 VMware, Inc.
3 (Optional)ToseetheIPaddressthatahostonlynetworkisusing:
OnWindowshosts,openacommandpromptandrunthefollowing
command:
ipconfig /all
OnLinuxhosts,openaterminalandrunthefollowingcommand:
ifconfig
Set Up Routing Between Two Host-Only Networks
Ifyouaresettingupacomplextestnetworkthatusesvirtualmachines,youmightwant
tohavetwoindependenthostonlynetworkswitharouterbetweenthem.
Useoneofthefollowingmethods.Inbothcases,youneedtwohostonlyinterfaces.:
Theroutersoftwarerunsonthehostcomputer.
Theroutersoftwarerunsonitsownvirtualmachine.
Theexamplesdescribedhereoutlinethesimplestcase,withonevirtualmachineon
eachofthehostonlynetworks.Formorecomplexconfigurations,youcanaddmore
virtualmachinesandhostonlynetworks,asappropriate.
To set up routing between two host-only networks
1 Setuptheconnectiontothefirst(default)hostonlyinterface,asdescribedinSet
UpUsingConfiguration1or2onpage 312.
2 Setuptheconnectiontothesecond(VMnet2)hostonlyinterface,asdescribedin
SetUpUsingConfiguration1or2onpage 312.
3 (Optional)Toruntheroutersoftwareonavirtualmachine,setupathirdvirtual
machinewithconnectionstothetwohostonlyinterfaces,asdescribedinSetUp
UsingConfiguration3onpage 313.
Toruntheroutersoftwareonyourhostcomputer,skipthisstep.
4 StoptheVMnetDHCPserverservice:
OnaWindowshost,chooseEdit>VirtualNetworkEditor>DHCP,selectthe
serviceandclickStop.
OnaLinuxhost,openaterminalandusethefollowingcommandtostopthe
vmnet-dhcpdservice:
killall -TERM vmnet-dhcpd
5 Installguestoperatingsystemsineachofthevirtualmachines.
VMware, Inc. 315
Chapter 15 Advanced Virtual Networking
6 Installtheroutersoftware,eitheronthehostcomputerorinthethirdvirtual
machine,dependingontheapproachyouareusing.
7 Configurenetworkinginthefirsttwovirtualmachinestouseaddressesonthe
appropriatehostonlynetwork:
OnWindowshosts,openacommandpromptandruntheipconfig /all
commandtodeterminewhichIPaddresseseachhostonlynetworkisusing.
OnLinuxhosts,openaterminalandruntheifconfigcommandto
determinewhichIPaddresseseachhostonlynetworkisusing.
8 AssignIPaddressesbydoingoneofthefollowing:
Ifyouarerunningtherouteronthehostcomputer,assigndefaultrouter
addressesbasedontheaddressesofthehostonlyadaptersonthehost
computer.
Inthefirstvirtualmachinesnetworkingconfiguration,thedefaultrouter
addressshouldbetheIPaddressforthehostonlyadapterconnectedto
VMnet1.Inthesecondvirtualmachinesnetworkingconfiguration,the
defaultrouteraddressshouldbetheIPaddressforthehostonlyadapter
connectedtoVMnet2.
Ifyouarerunningtheroutersoftwareinathirdvirtualmachine,setthe
defaultrouteraddressesinthefirsttwovirtualmachinesbasedonthe
addressesthatthethirdvirtualmachineuses.
Inthefirstvirtualmachinesnetworkingconfiguration,thedefaultrouter
addressshouldbetheIPaddressforthethirdvirtualmachinesnetwork
adapterconnectedtoVMnet1.Inthesecondvirtualmachinesnetworking
configuration,thedefaultrouteraddressshouldbetheIPaddressforthethird
virtualmachinesnetworkadapterconnectedtoVMnet2.
Youcannowpingtheroutermachinefromvirtualmachines1and2.Iftherouter
softwareissetupcorrectly,youcancommunicatebetweenthefirstandsecond
virtualmachines.
Workstation Users Manual
316 VMware, Inc.
Using Virtual Network Adapters in Promiscuous Mode on
a Linux Host
Workstationdoesnotallowthevirtualnetworkadaptertogointopromiscuousmode
unlesstheuserrunningWorkstationhaspermissiontomakethatsetting.This
restrictionfollowsthestandardLinuxpracticethatonlytherootusercanputanetwork
interfaceintopromiscuousmode.
WhenyouinstallandconfigureWorkstation,youmustruntheinstallationastheroot
user.Workstationcreatesthevmnetdeviceswithrootownershipandrootgroup
ownership,whichmeansthatonlytherootuserhasreadandwritepermissionstothe
devices.
Tosetthevirtualmachinesnetworkadaptertopromiscuousmode,youmustlaunch
Workstationastherootuserbecauseyoumusthavereadandwriteaccesstothevmnet
device.Forexample,ifyouareusingbridgednetworking,youmusthaveaccessto
/dev/vmnet0.
Tograntselectedotherusersreadandwriteaccesstothevmnetdevice,youcancreate
anewgroup,addtheappropriateuserstothegroup,andgrantthatgroupreadand
writeaccesstotheappropriatedevice.Youmustmakethesechangesonthehost
operatingsystemastherootuser(su -).Forexample,youcanenterthefollowing
commands:
chgrp <newgroup> /dev/vmnet0
chmod g+rw /dev/vmnet0
Here<newgroup>isthegroupthatshouldbeabletosetvmnet0topromiscuousmode.
Foralluserstobeabletosetthevirtualnetworkadapter(/dev/vmnet0intheexample)
topromiscuousmode,runthefollowingcommandonthehostoperatingsystemasthe
rootuser:
chmod a+rw /dev/vmnet0
Using NAT
NATprovidesawayforvirtualmachinestousemostclientapplicationsoveralmost
anytypeofnetworkconnectionavailabletothehost.Theonlyrequirementisthatthe
networkconnectionmustsupportTCP/IP.
NATisusefulwhenyouhavealimitedsupplyofIPaddressesorareconnectedtothe
networkthroughanonEthernetnetworkadapter.NATworksbytranslatingaddresses
ofvirtualmachinesinaprivateVMnetnetworktotheaddressofthehostmachine.
Whenavirtualmachinesendsarequesttoaccessanetworkresource,itappearstothe
networkresourceasiftherequestiscomingfromthehostmachine.
VMware, Inc. 317
Chapter 15 Advanced Virtual Networking
ThehostcomputerhasahostvirtualadapterontheNATnetworkidenticaltothehost
virtualadapteronthehostonlynetwork.Thisadapterallowsthehostandthevirtual
machinestocommunicatewitheachotherforsuchpurposesasfilesharing.TheNAT
deviceneverforwardstrafficfromthehostvirtualadapter.
How the NAT Device Uses the VMnet8 Virtual Switch
TheNATdeviceisconnectedtotheVMnet8virtualswitch.Virtualmachinesconnected
totheNATnetworkalsousetheVMnet8virtualswitch.
TheNATdevicewaitsforpacketscomingfromvirtualmachinesontheVMnet8virtual
network.Whenapacketarrives,theNATdevicetranslatestheaddressofthevirtual
machinetotheaddressofthehostbeforeforwardingthepackettotheexternal
network.Whendataarrivesfromtheexternalnetworkforthevirtualmachineonthe
privatenetwork,theNATdevicereceivesthedata,replacesthenetworkaddresswith
theaddressofthevirtualmachineandforwardsthedatatothevirtualmachineonthe
virtualnetwork.Thistranslationoccursautomaticallyandrequiresminimal
configurationontheguestandthehost.
DHCP on the NAT Network
Tomakenetworkingconfigurationeasy,aDHCPserverisinstalledwhenyouinstall
Workstation.VirtualmachinesrunningonthenetworkwiththeNATdevicecansend
outDHCPrequeststodynamicallyobtaintheirIPaddresses.
TheDHCPserverontheNATnetwork,whichisalsousedinhostonlynetworking
configurations,dynamicallyallocatesIPaddressesintherangeof<net>.128through
<net>.254,where<net>isthenetworknumberassignedtoyourNATnetwork.
WorkstationalwaysusesaClassCaddressforNATnetworks.IPaddresses<net>.3
through<net>.127canbeusedforstaticIPaddresses.IPaddress<net>.1isreserved
forthehostadapterand<net>.2isreservedfortheNATdevice.Formoreinformation,
seeDHCPConventionsforAssigningIPAddressesonpage 305.
InadditiontotheIPaddress,theDHCPserverontheNATnetworksendsout
configurationinformationthatenablesthevirtualmachinetooperate.Thisinformation
includesthedefaultgatewayandtheDNSserver.IntheDHCPresponse,theNAT
deviceinstructsthevirtualmachinetousetheIPaddress<net>.2asthedefault
gatewayandDNSserver.ThisroutingcausesallIPpacketsdestinedfortheexternal
networkandDNSrequeststobeforwardedtotheNATdevice.
Workstation Users Manual
318 VMware, Inc.
DNS on the NAT Network
TheNATdeviceactsasaDNSserverforthevirtualmachinesontheNATnetwork.
The NATdeviceisaDNSproxyandforwardsDNSrequestsfromthevirtualmachines
toaDNSserverthatthehostknows.ResponsesreturntotheNATdevice,whichthen
forwardsthemtothevirtualmachines.
IftheygettheirconfigurationinformationfromDHCP,thevirtualmachinesonthe
NATnetworkautomaticallyusetheNATdeviceastheDNSserver.However,the
virtualmachinescanbestaticallyconfiguredtouseanotherDNSserver.
ThevirtualmachinesintheprivateNATnetworkarenotaccessiblethroughDNS.To
havethevirtualmachinesrunningontheNATnetworkaccesseachotherbyDNS
names,youmustsetupaprivateDNSserverconnectedtotheNATnetwork.
External Access from the NAT Network
AvirtualmachineontheNATnetworkcanuseanyprotocolusingTCPorUDPaslong
asthevirtualmachineinitiatesthenetworkconnection.Thisistrueformostclient
applicationssuchasWebbrowsing,Telnet,passivemodeFTP,anddownloading
streamingvideo.AdditionalprotocolsupportisbuiltintotheNATdevicetoallowFTP
andICMPecho(ping)toworktransparentlythroughtheNAT.
Ontheexternalnetworktowhichthehostisconnected,anyvirtualmachineonthe
NATnetworkappearstobethehostitself,becauseitsnetworktrafficusesthehosts
IP address.ThevirtualmachinecansendandreceivedatausingTCP/IPtoanymachine
thatisaccessiblefromthehost.
Beforeanycommunicationcanoccur,theNATdevicemustsetupamapbetweenthe
virtualmachinesaddressontheprivateNATnetworkandthehostsnetworkaddress
ontheexternalnetwork.
Whenavirtualmachineinitiatesanetworkconnectionwithanothernetworkresource,
thismapiscreatedautomatically.Theoperationistransparenttotheuserofthevirtual
machineontheNATnetwork.Noadditionalworkneedstobedone.
NetworkconnectionsthatareinitiatedfromoutsidetheNATnetworktoavirtual
machineontheNATnetworkarenottransparent.Whenamachineontheexternal
networkattemptstoinitiateaconnectionwithavirtualmachineontheNATnetwork,
itcannotreachthevirtualmachinebecausetheNATdevicedoesnotforwardthe
request.
However,youcanconfigureportforwardingmanuallyontheNATdevicesothat
networktrafficdestinedforacertainportcanstillbeforwardedautomaticallytoa
virtualmachineontheNATnetwork.SeeAdvancedNATConfigurationonpage 319.
VMware, Inc. 319
Chapter 15 Advanced Virtual Networking
FilesharingofthetypeusedbyWindowsoperatingsystemsandSambaispossible
amongcomputersontheNATnetwork,includingvirtualmachinesandthehost
computer.IfyouareusingWINSserversonyournetwork,avirtualmachineusing
NATnetworkingcanaccesssharedfilesandfoldersonthehostthattheWINSserver
knowsifthosesharedfilesandfoldersareinthesameworkgroupordomain.
Advanced NAT Configuration
YoucanconfigureNATtomakecustomconfigurationsettingsforWindowsandLinux.
Configure NAT on a Windows Host
UsethevirtualnetworksettingstoconfigureNATonaWindowshost.ToedittheNAT
configurationfile,seeCustomNATandDHCPConfigurationonaWindowsHoston
page 319.
To configure NAT on a Windows host
1 ChooseEdit>VirtualNetworkEditor.
2 UsethecontrolsintheNATSettingsmenutoconfigureNAT:
TostopandstartthevirtualNATdevice,clicktheappropriatebuttons.
ToeditNATsettingsforavirtualnetwork,choosetheVMnetnetworkfrom
thedropdownmenuandclickEdit.
3 ClickDNSSettingstosetuporchangeportforwardingortospecifyDNSservers
thatthevirtualNATdeviceshoulduse.
4 ClickOK.
Custom NAT and DHCP Configuration on a Windows Host
IfyouareanadvanceduseronaWindowshostcomputer,youcanedittheNATand
DHCPconfigurationfilestomakecustomconfigurationsettings.Ifyourhostoperating
systemisinstalledontheCdrive,theconfigurationfilesforNATandDHCPareinthe
followinglocations:
Workstation Users Manual
320 VMware, Inc.
Usethevirtualnetworkeditor(Edit>VirtualNetworkEditor)tochangemanykey
NATandDCHPsettings.
Ifyoumakemanualchangestotheconfigurationfiles,thosechangesmightbelost
whenyouusethevirtualnetworkeditor.Makebackupcopiesofthefilesbeforeyou
changeanysettingsinthevirtualnetworkeditor.Youcanthencopyyourmanual
changesbackintotheappropriateconfigurationfiles.
Specifying Connections from Ports Below 1024
WhenaclientmachinemakesaTCPorUDPconnectiontoaserver,theconnection
comesfromaparticularportontheclient(thesourceport)andconnectstoaparticular
portontheserver(thedestinationport).Forsecurityreasons,someserversaccept
connectionsonlyfromsourceportsbelow1024.Youmightseethisconfigurationon
machinesusedasNFSfileservers,forexample.
IfavirtualmachineusingNATattemptstoconnecttoaserverthatrequirestheclient
touseasourceportbelow1024,theNATdevicemustforwardtherequestfromaport
below1024.Youcanspecifythisbehaviorinthevmnetnat.conffile.
Thisbehavioriscontrolledbyentriesinsectionsheaded[privilegedUDP]and
[privilegedTCP].Youmightneedtoaddsettingstoormodifysettingsineitheror
bothofthesesections,dependingonthekindofconnectionyouneedtomake.
Youcansettwoparameters,eachofwhichappearsonaseparateline.
Table 15-3. NAT and DHCP File Locations
File Type Location
NAT OnWindowsXP:C:\Documents and Settings\All
Users\Application Data\VMware\vmnetnat.conf
OnWindowsVistaandWindows7:
C:\ProgramData\VMware\vmnetnat.conf
Formoreinformationaboutthisfile,seeContentsoftheNAT
ConfigurationFileonpage 321.
DHCP OnWindowsXP:C:\Documents and Settings\All
Users\Application Data\VMware\vmnetdhcp.conf
OnWindowsVistaandWindows7:
C:\ProgramData\VMware\\vmnetdhcp.conf
VMware, Inc. 321
Chapter 15 Advanced Virtual Networking
Configuring NAT on a Linux Host
UsethedefaultNATconfigurationfileonthehosttoconfiguretheNATdevice.
This fileislocatedin/etc/vmware/vmnet8/nat/nat.conf.
ForanexampleofaNATconfigurationfile,seeSampleLinuxnat.confFileon
page 327.
Contents of the NAT Configuration File
TheNATconfigurationfileisinthefollowinglocations:
OnaWindowshost:
C:\Documents and Settings\All Users\Application Data\VMware\vmnetnat.conf
Ifyoueditthisfileandthenusethevirtualnetworkeditor(Edit>VirtualNetwork
Editor)youreditsmightbelost.
OnaLinuxhost:
/etc/vmware/vmnet8/nat/nat.conf
TheNATconfigurationfileisdividedintosections.Eachsectionconfiguresapartofthe
NATdevice.Textsurroundedbysquarebrackets,suchas[dns],marksthebeginning
ofasection.Ineachsectionisaconfigurationparameterthatcanbeset.
The configurationparameterstaketheformip = 192.168.27.1/24.TheNAT
configurationfilecontainsthefollowingsections.
Table 15-4. Parameters to Map Virtual Machine Source and Destination Ports
Parameter Description
autodetect = <n> TheautodetectsettingdetermineswhethertheVMwareNATdevice
automaticallyattemptstomapvirtualmachinesourceportsbelow
1024toNATsourceportsbelow1024.Asettingof1meanstrue.A
settingof0meansfalse.OnaWindowshost,thedefaultis1(true).
OnaLinuxhost,thedefaultis0(false).
port = <n> Theportsettingspecifiesadestinationport(where<n>istheporton
theserverthatacceptstheconnectionfromtheclient).Whenevera
virtualmachineconnectstothespecifiedportonanyserver,theNAT
deviceattemptstomaketheconnectionfromasourceportbelow
1024.Youcanincludeoneormoreportsettingsinthe
[privilegedUDP]or[privilegedTCP]sectionorinbothsections,
asrequiredfortheconnectionsyouneedtomake.Entereachport
settingonaseparateline.
Workstation Users Manual
322 VMware, Inc.
The [host] Section
The[host]sectionincludesparameterstoconfiguretheNATconnection.
ipTheIPaddressthattheNATdeviceshoulduse.Itcanbefollowedbyaslash
andthenumberofbitsinthesubnet.
netmaskThesubnetmasktousefortheNATnetwork.DHCPaddressesare
allocatedfromthisrangeofaddresses.
configportAportthatcanbeusedtoaccessstatusinformationabouttheNAT
device.
deviceTheVMnetdevicetouse.Windowsdevicesareoftheformvmnet<x>
where<x>isthenumberoftheVMnet.Linuxdevicesareoftheform
/dev/vmnet<x>.
activeFTPFlagtoindicateifactiveFTPistobeallowed.ActiveFTPallows
incomingconnectionstobeopenedbytheremoteFTPserver.Turningthisoff
meansthatonlypassivemodeFTPworks.Setthisflagto0toturnitoff.
The [udp] Section
timeoutNumberofsecondstokeeptheUDPmappingfortheNATnetwork.
The [dns] Section
The[dns]sectionisforWindowshostsonly.Linuxdoesnotusethissection.
policyPolicytouseforDNSforwarding.Acceptedvaluesinclude:
orderSendoneDNSrequestatatimeintheorderofthenameservers.
rotateSendoneDNSrequestatatimeandrotatethroughtheDNSservers.
burstSendtothreeserversandwaitforthefirstonetorespond.
timeoutTimeinsecondsbeforeretryingaDNSrequest.
retriesNumberofretriesbeforetheNATdevicestopstryingtorespondtoa
DNSrequest.
autodetectFlagtoindicatewhethertheNATdeviceshoulddetecttheDNS
serversavailabletothehost.
nameserver1IPaddressofaDNSservertouse.
VMware, Inc. 323
Chapter 15 Advanced Virtual Networking
nameserver2IPaddressofaDNSservertouse.
nameserver3IPaddressofaDNSservertouse.
Ifautodetectisonandsomenameserversarespecified,theDNSserversspecified
innameserver1,nameserver2,andnameserver3areaddedbeforethelistof
detectedDNSservers.
The [netbios] Section
The[netbios]sectionappliestoWindowshostsonly.Linuxdoesnotusethissection.
nbnsTimeout = 2Timeout,inseconds,forNBNSqueries.
nbnsRetries = 3NumberofretriesforeachNBNSquery.
nbdsTimeout = 3Timeout,inseconds,forNBDSqueries.
The [incomingtcp] Section
Usethe[incomingtcp]sectiontoconfigureTCPportforwardingforNAT.Inthis
section,youcanassignaportnumbertoanIPaddressandportnumberonavirtual
machine.
Thefollowinglineshowstheformatusedinthissection:
8887 = 192.168.27.128:21
Thisexamplecreatesamapfromport8887onthehosttotheIPaddress192.168.27.128
andport21.Whenthismapissetandanexternalmachineconnectstothehostatport
8887,thenetworkpacketsareforwardedtoport21(thestandardportforFTP)onthe
virtualmachinewithIPaddress192.168.27.128.
The [incomingudp] Section
Usethe[incomingudp]sectiontoconfigureUDPportforwardingforNAT.Inthis
section,youcanassignaportnumbertoanIPaddressandportnumberonavirtual
machine.
Thefollowinglineshowstheformatusedinthissection.Itillustratesawaytoforward
Xservertrafficfromthehostport6000tothevirtualmachinesport6001:
6000 = 192.168.27.128:6001
Thisexamplecreatesamapfromport6000onthehosttotheIPaddress192.168.27.128
andport6001.Whenthismapissetandanexternalmachineconnectstothehostatport
6000,thenetworkpacketsareforwardedtoport6001onthevirtualmachinewith
IP address192.168.27.128.
Workstation Users Manual
324 VMware, Inc.
Considerations for Using NAT
ConsiderthefollowingitemswhenyouuseNAT:
NATcausessomeperformanceloss.
BecauseNATrequiresthateverypacketsenttoandreceivedfromavirtual
machinemustbeintheNATnetwork,anunavoidableperformancepenalty
occurs.
NATisnotperfectlytransparent.
NATdoesnotusuallyallowconnectionstobeinitiatedfromoutsidethenetwork,
althoughyoucanmanuallyconfiguretheNATdevicetosetupserverconnections.
ThepracticalresultisthatsomeTCPandUDPprotocolsthatrequireaconnection
beinitiatedfromtheservermachine,somepeertopeerapplications,forexample,
donotworkautomatically,andsomemightnotworkatall.
NATprovidessomefirewallprotection.
AstandardNATconfigurationprovidesbasiclevelfirewallprotectionbecausethe
NATdevicecaninitiateconnectionsfromtheprivateNATnetwork,butdeviceson
theexternalnetworkusuallycannotinitiateconnectionstotheprivateNAT
network.
Using NAT with NetLogon
WhenyouuseNATnetworkinginavirtualmachinewithaWindowsguestoperating
systemrunningonaWindowshost,youcanuseNetLogontologintoaWindows
domainfromthevirtualmachine.YoucanthenaccessfilesharesthattheWINSserver
knows.
TouseNetLogon,youneedtoknowhowWINSserversandWindowsdomain
controllerswork.Thissectionexplainshowtosetupthevirtualmachinetouse
NetLogon.Thesetupprocessissimilartothewayyousetupaphysicalcomputeron
oneLANthatisusingadomaincontrolleronanotherLAN.
TologintoaWindowsdomainoutsidethevirtualNATnetwork,thevirtualmachine
needsaccesstoaWINSserverforthatdomain.Youcanconnectthevirtualmachineto
aWINSserverinthefollowingways:
ConnecttotheWINSserverthattheDHCPserverusedontheNATnetwork
provides,iftheWINSserverisalreadysetuponthehost.
ManuallyentertheIPaddressoftheWINSservertoconnectfromthevirtual
machinetoaWINSservernotsetuponthehost.
VMware, Inc. 325
Chapter 15 Advanced Virtual Networking
Use NAT to Connect to an Existing WINS Server Set Up on the Host
TouseNATtoconnect,aWINSserverinthesameworkgroupordomainmustbeset
uponthehost.ThisprocedureappliestotheWindows 2000,XP,2003Server,NT,Me,
and9xguestversions.
DifferencesforWindowsVistaandWindows7,arenotedinthespecificsteps.
To use NAT to connect to an existing WINS server set up on the host
1 Inthevirtualmachine,rightclickMyNetworkPlacesandchooseProperties.
ForWindowsVista,opentheNetworkandSharingCenterandclicktheView
Statuslinkfortheconnectionthatusestheneededvirtualnetworkadapter.
ForWindows7,opentheNetworkandSharingCenterandclickoneofthe
LocalAreaConnectionlinksfortheconnectionthatusestheneededvirtual
networkadapter.
2 IntheNetworkConnectionswindow,rightclickthevirtualnetworkadapterand
chooseProperties.
ForWindowsVista,intheLocalAreaConnectionStatuswindow,click
PropertiesandclickContinuewhenpromptedforpermission.
ForWindows7,intheLocalAreaConnectionStatuswindow,clickProperties.
3 InthePropertiesdialogbox,selectInternetProtocol(TCP/IPv4)andclick
Properties.
4 IntheTCP/IPPropertiesdialogbox,clickAdvanced.
5 OntheWINStab,underNetBIOSsetting,selectDefault:UseNetBIOSsetting
fromDHCPServer.
6 ClickOKtwiceandclickClose.
Enter the IP Address of a WINS Server Manually
UsetheIPaddresstoconnecttoaWINSserverinthesameworkgroupordomainthat
isnotalreadysetuponthehost.
Workstation Users Manual
326 VMware, Inc.
To enter the IP address of a WINS server manually
1 Inthevirtualmachine,rightclickMyNetworkPlacesandchooseProperties.
ForWindowsVista,opentheNetworkandSharingCenterandclicktheView
Statuslinkfortheconnectionthatusestheneededvirtualnetworkadapter.
ForWindows7,opentheNetworkandSharingCenterandclickoneofthe
LocalAreaConnectionlinkfortheconnectionthatusestheneededvirtual
networkadapter.
2 IntheNetworkConnectionswindow,rightclickthevirtualnetworkadapterand
chooseProperties.
ForWindowsVista,intheLocalAreaConnectionStatuswindow,click
PropertiesandclickContinuewhenpromptedforpermission.
ForWindows7,intheLocalAreaConnectionStatuswindow,clickProperties.
3 InthePropertiesdialogbox,selectInternetProtocol(TCP/IPv4)andclick
Properties.
4 IntheTCP/IPPropertiesdialogbox,clickAdvanced.
5 OntheWINStab,clickAdd.
6 IntheTCP/IPWINSServerdialogbox,entertheIPaddressfortheWINSserverin
theWINSserverfieldandclickAdd.
TheIPaddressoftheWINSserverappearsintheWINSaddresseslistontheWINS
tab.
7 RepeatStep 5andStep 6foreachWINSservertowhichyouwanttoconnectfrom
thisvirtualmachine.
8 ClickOKtwiceandclickClose.
NowthatthevirtualmachinehasanIPaddressforaWINSserver,youcanuse
NetLogoninthevirtualmachinetologintoadomainandaccesssharesinthat
domain.However,youraccessislimitedtosharesofvirtualmachinesthatareon
thesameNATnetworkorarebridgedonthesamedomain.
Forexample,iftheWINSservercoversadomainwithadomaincontroller,youcan
accessthatdomaincontrollerfromthevirtualmachineandaddthevirtual
machinetothedomain.YouneedtoknowtheAdministratoruserIDand
passwordforthedomaincontroller.
VMware, Inc. 327
Chapter 15 Advanced Virtual Networking
Sample Linux nat.conf File
# Linux NAT configuration file
[host]
# NAT gateway address
ip = 192.168.237.2/24
hostMAC = 00:50:56:C0:00:08
# enable configuration; disabled by default for security reasons
#configport = 33445
# vmnet device if not specified on command line
device = vmnet8
# Allow PORT/EPRT FTP commands (they need incoming TCP stream...)
activeFTP = 1
# Allows the source to have any OUI. Turn this one if you change the OUI
# in the MAC address of your virtual machines.
#allowAnyOUI = 1
[udp]
# Timeout in seconds, 0 = no timeout, default = 60; real value might
# be up to 100% longer
timeout = 30
[dns]
# This section applies only to Windows.
#
# Policy to use for DNS forwarding. Accepted values include order,
# rotate, burst.
#
# order: send one DNS request at a time in order of the name servers
# rotate: send one DNS request at a time, rotate through the DNS servers
# burst: send to three servers and wait for the first one to respond
policy = order;
# Timeout in seconds before retrying DNS request.
timeout = 2
# Retries before giving up on DNS request
retries = 3
# Automatically detect the DNS servers (not supported in Windows NT)
autodetect = 1
# List of DNS servers to use. Up to three may be specified
#nameserver1 = 208.23.14.2
Workstation Users Manual
328 VMware, Inc.
#nameserver2 = 63.93.12.3
#nameserver3 = 208.23.14.4
[netbios]
# This section applies only to Windows.
# Timeout for NBNS queries.
nbnsTimeout = 2
# Number of retries for each NBNS query.
nbnsRetries = 3
# Timeout for NBDS queries.
nbdsTimeout = 3
[incomingtcp]
# Use these with care - anyone can enter into your virtual machine through
# these...
# FTP (both active and passive FTP is always enabled)
# ftp localhost 8887
#8887 = 192.168.27.128:21
# WEB (make sure that if you are using named webhosting, names point to
# your host, not to guest... And if you are forwarding port other
# than 80 make sure that your server copes with mismatched port
# number in Host: header)
# lynx http://localhost:8888
#8888 = 192.168.27.128:80
# SSH
# ssh -p 8889 root@localhost
#8889 = 192.168.27.128:22
[incomingudp]
# UDP port forwarding example
#6000 = 192.168.27.128:6001
Using Samba with Workstation
IfyouhaveSambaonyourLinuxhost,youcanconfigureSambasothatitworkswith
Workstation.
ModifyyourSambaconfigurationsothatitincludestheIPsubnetthatthevmnet1
Workstationvirtualnetworkadapteruses.Todeterminewhichsubnetvmnet1isusing,
runthefollowingcommand:
/sbin/ifconfig vmnet1
VMware, Inc. 329
Chapter 15 Advanced Virtual Networking
MakesuretheSambapasswordfileincludesentriesforallusersofthevirtualmachine
whowillaccessthehostsfilesystem.TheusernamesandpasswordsintheSamba
passwordfilemustmatchthoseusedforloggingontotheguestoperatingsystem.
Add Users to the Samba Password File
YoucanaddusernamesandpasswordstotheSambapasswordfileatanytimefroma
terminalwindowonyourLinuxhostcomputer.
To add users to the Samba password file
1 Logintotherootaccount:
su
2 RuntheSambapasswordcommand:
smbpasswd -a <username>
Here<username>istheusernametoadd.
3 Followtheinstructionsonthescreen.
4 Logoutoftherootaccount:
exit
Using a Samba Server for Bridged and Host-Only Networks
TouseyourSambaserverforhostonlyandbridgednetworking,youmustmodifyone
parameterinthesmb.conffile.Youcandefinetheinterfaceparametersothatyour
Sambaserverservesmultipleinterfaces.Anexampleofthisisthefollowing:
interface = eth0 vmnet1
ThisexampletellstheSambaservertomonitoranduseboththeeth0andvmnet1
interfaces,whicharetheinterfacesthatbridgedandhostonlynetworkinguse,
respectively.
Workstation Users Manual
330 VMware, Inc.
Use Samba Without Network Access
TomakeSambainaccessiblefromyourphysicalnetworkinterface,youmustconfigure
theconfigurationfile.
To use Samba without network access
1 Opentheconfigurationfile:
/etc/samba/smb.conf
2 Addthefollowinglinetotheconfigurationfileandsavethechanges.
interfaces = vmnet*
3 RestartSamba.
VMware, Inc. 331
16
Thischapterdescribeshowtousevariousdeviceswithavirtualmachine.
Thischapterincludesthefollowingtopics:
UsingParallelPortsonpage 331
UsingSerialPortsonpage 335
ConfiguringKeyboardFeaturesonpage 339
UsingUSBDevicesinaVirtualMachineonpage 351
UseSmartCardswithVirtualMachinesonpage 358
SupportforGenericSCSIDevicesonpage 361
UseFourWayVirtualSymmetricMultiprocessingonpage 366
Using Parallel Ports
Parallelportsareusedbyavarietyofdevices,includingprinters,scanners,dongles,
anddiskdrives.Althoughthesedevicescanconnecttothehostwithoutproblems,only
printerscanreliablyconnecttovirtualmachinesbyusingparallelports.
Currently,WorkstationprovidesonlypartialemulationofPS/2hardware.Interrupts
thatadeviceconnectedtothephysicalportrequestsarenotpassedtothevirtual
machine.TheguestoperatingsystemcannotuseDMA(directmemoryaccess)tomove
datatoorfromtheport.Forthisreason,notalldevicesthatattachtotheparallelport
areguaranteedtoworkcorrectly.Donotuseparallelportstoragedevicesinavirtual
machine.
Connecting Devices 16
Workstation Users Manual
332 VMware, Inc.
Add a Virtual Parallel Port to a Virtual Machine
Ifthevirtualmachineisconfiguredwithaparallelport,mostguestoperatingsystems
detecttheportatinstallationtimeandinstalltherequireddrivers.Someoperating
systems,includingLinux,WindowsNT,andWindows2000,automaticallydetectthe
portsatboottime.Others,likeWindows95andWindows98,donot.
To add a virtual parallel port to a virtual machine
1 Selectthevirtualmachine.
2 Makesurethevirtualmachineispoweredoff.
3 ChooseVM>Settings.
4 OntheHardwaretab,clickAdd.
5 IntheNewHardwarewizard,selectParallelPortandclickNext.
6 Specifywhichoptiontousefortheparallelport:
IfyouselectUsephysicalparallelport,clickNextandchoosetheportfrom
thedropdownmenu.
IfyouselectOutputfile,clickNextandenterthepathandfilenameorbrowse
tothelocationofthefile.
7 UnderDevicestatus,ifyoudonotwanttheparallelporttoconnectatpoweron,
deselectthecheckbox.
8 ClickFinish.
9 IftheguestoperatingsystemisWindows95orWindows98,runtheguest
operatingsystemsAddNewHardwarewizardtoletWindowsdetectthenew
device.
Todisplaythiswizard,chooseStart>Settings>ControlPanel>AddNew
Hardware.
Troubleshoot ECR Errors for Parallel Ports
Whenyoupoweronthevirtualmachineafteraddingaparallelport,youmightseean
errormessagestatingthattheparallelportonthehostdoesnothaveanExtended
ControlRegister(ECR).If so,itispossiblethehardwaresupportsECRbutithasbeen
disabledintheBIOS.
VMware, Inc. 333
Chapter 16 Connecting Devices
To troubleshoot ECR errors for parallel ports
1 Rebootthehost.
2 Earlyinthebootprocess,pressandholddowntheDeletekeytoenterthehost
computersBIOSconfigurationeditor.
3 FindtheparallelportfieldandenableExtendedCapabilityPort(ECP)modeora
combinationofmodesthatincludesECP.
MostmoderncomputerssupportECPmode.
Configuring a Parallel Port on a Linux Host
Foraparallelporttoworkproperlyinaguest,itmustfirstbeconfiguredproperlyon
thehost.Mostproblemswithparallelportsarecausedbymistakesinthehost
configuration.
Linuxkernelsinthe2.6.xseriesuseaspecialarbitratorforaccesstotheparallelport
hardware.Ifthehostisusingtheparallelport,thevirtualmachinecannotuseit.Ifa
virtualmachineisusingtheparallelport,thehostandanyusersaccessingthehostare
deniedaccesstothedevice.YoumustusetheVM>RemovableDevicesmenuto
disconnecttheparallelportfromthevirtualmachinetoaccessthedevicefromthehost.
Configure Parallel Ports for Linux 2.6.x Kernels
The2.6.xkernelsthatsupportparallelportsusethemodprobe <modulename>and
modprobe parport_pcmodules.WorkstationrequiresthattheparallelportPCstyle
hardwareoption(CONFIG_PARPORT_PC)bebuiltandloadedasakernelmodule.
Thatis,itmustbesettom.
To configure parallel ports for Linux 2.6.x kernels
1 Todeterminewhetherthemodprobe <modulename>and modprobe parport_pc
modulesareinstalledandloadedonyoursystem,runthelsmodcommandasthe
rootuser.
Youcanalsolookatthe/proc/modulesfileforthelist.
With2.6.x,loadingparport_pcdoesnotloadallmodules.
2 Ifnoneofthelistedparallelportmodulesisloaded,usethefollowingcommand:
modprobe parport_pc && modprobe ppdev
Thiscommandinsertsthemodulesneededforaparallelport.
Ifproblemspersist,thelpmodulemightbeloaded.Ifitis,thevirtualmachine
cannotusetheparallelportcorrectly.
Workstation Users Manual
334 VMware, Inc.
3 Ifthelpmoduleisloaded,runthefollowingcommandasroottoremoveit:
rmmod lp
4 Toverifythatthelinereferringtothelpmoduleinthe/etc/modules.confor
/etc/conf.modulesfileisremovedorcommentedout,insertapoundsign(#)at
thebeginningoftheline.
ThenameoftheconfigurationfiledependsontheLinuxdistributionyouare
using.Whenyourebootthehostafterremovingthisline,theconfigurationfileno
longerstartsthelpmodule.
5 Toensurethatthepropermodulesfortheparallelportareloadedatboottime,add
thefollowinglinetothe/etc/modules.confor/etc/conf.modulesfile:
alias parport_lowlevel parport_pc
Configure Device Permissions for Parallel Ports
SomeLinuxdistributionsbydefaultdonotgrantthevirtualmachineaccesstothelp
andparportdevices.YoumustaddtheVMwareusertothegroupthathaspermission
toaccessthesedevices.
To configure device permissions for parallel ports
1 Runthefollowingcommandtodeterminetheownerandgroupforthedevice:
ls la /dev/parport0
Thethirdandfourthcolumnsoftheoutputshowtheownerandgroup,
respectively.Inmostcases,theownerofthedeviceisrootandtheassociated
groupislp.
2 Toaddtheusertothedevicegroup,becometherootuserandopenthe
/etc/groupfilewithatexteditor.
3 Onthelinestartingwithlp,whichdefinesthelpgroup,addtheWorkstation
usersusername.
Thefollowinglineprovidesanexampleforauserwhoseusernameisuserj.
lp::7:daemon,lp,userj
Thenexttimetheuserlogsontothehost,thechangestakeeffect.
VMware, Inc. 335
Chapter 16 Connecting Devices
Using Serial Ports
AWorkstationvirtualmachinecanuseuptofourvirtualserialports.Thevirtualserial
portscanbeconfiguredinseveralways:
Connectavirtualserialporttoaphysicalserialportonthehostcomputer.
Connectavirtualserialporttoafileonthehostcomputer.
Makeadirectconnectionbetweentwovirtualmachinesorbetweenavirtual
machineandanapplicationrunningonthehostcomputer.
Foreachofthesechoices,youcanalsoselectwhethertoconnectthevirtualserialport
whenyoupoweronthevirtualmachine.
Add a Virtual Serial Port to a Virtual Machine
Usevirtualserialportstomakedevicessuchasmodemsandprintersavailableto
virtualmachinesortosenddebuggingdatafromavirtualmachinetothehostorto
anothervirtualmachine.
Youcanusevirtualserialportstosenddatatothefollowing:
PhysicalserialportEnablesyoutouseadevicesuchasanexternalmodemor
handhelddeviceinavirtualmachine.Workstationcreatesavirtualserialport
automaticallywhenyouenablethevirtualprinterfeature.
OutputfileonthehostCapturesthedatathataprogramrunninginthevirtual
machinesendstothevirtualserialport.
AnapplicationonthehostEnablesyoutouseanapplicationonthehostto
capturedebugginginformationsentfromthevirtualmachinesserialport.
AnothervirtualmachineEnablesyoutouseanapplicationinonevirtual
machine(theclient)tocapturedebugginginformationsentfromtheother
(the server)virtualmachinesserialport.
To add a virtual serial port to a virtual machine
1 Selectthevirtualmachine.
2 Makesurethevirtualmachineispoweredoff.
NOTEThevirtualprinterfeatureautomaticallyconfiguresaserialporttomakehost
printersavailabletotheguestwithoutinstallingadditionaldriversinthevirtual
machine.SeeUseHostPrintersinaVirtualMachineonpage 180.
Workstation Users Manual
336 VMware, Inc.
3 ChooseVM>Settings.
4 OntheHardwaretab,clickAdd.
5 IntheAddHardwarewizard,selectSerialPortandclickNext.
6 OntheSerialPortTypepage,dooneofthefollowing:
Forphysicaldevicessuchasmodems,selectUsephysicalserialportonthe
host,clickNext,andchoosetheportonthehostcomputerthatyouwantto
useforthisserialconnection.
Tocapturedatafromanapplicationinanoutputfile,selectOutputfile,click
Next,andenterthepathandfilenameorbrowsetothelocationofthefileon
thehost.
Toconnecttoadebuggingapplicationonthehostorinanothervirtual
machine,selectOutputtoNamedPipeandclickNext.
7 IfyouselectedOutputtoNamedPipe,dooneofthefollowing:
ForaWindowshost,ontheSpecifyNamedPipepage,specifythepipename.
Thepipenamemustfollowtheform\\.\pipe\<namedpipe>.Thatis,itmust
beginwith\\.\pipe\.
ForaLinuxhost,inthePathfield,enter/tmp/<socket>oranotherUNIX
socketname.
8 AlsoifyouselectedOutputtoNamedPipe,dooneofthefollowing:
Tosenddebugginginformationtoanapplicationonthehost:
i Inthefirstdropdownmenu,selectThisendistheserverorThisendis
theclient.
SelectThisendistheservertostartthisendoftheconnectionfirst.
ii Intheseconddropdownmenu,selectTheotherendisanapplication.
Tosenddebugginginformationtoanothervirtualmachine:
i Inthefirstdropdownmenu,selectThisendistheserver.
ii Intheseconddropdownmenu,selectTheotherendisavirtual
machine.
9 MakesuretheConnectatpoweroncheckboxisselectedifdesired.
10 ClickFinish.
VMware, Inc. 337
Chapter 16 Connecting Devices
11 (Optional)OntheHardwaretabofthevirtualmachinesettingseditor,toconfigure
thisserialporttousepolledmode,selectYieldCPUonpoll.
Thisoptionisofinteresttodeveloperswhoareusingdebuggingtoolsthat
communicateoveraserialconnection.Iftheserialportintheguestisbeingused
inpolledmoderatherthaninterruptmode,youmightnoticeperformanceissues.
Thisoptionforcesthevirtualmachinetoyieldprocessortimeiftheonlytaskitis
tryingtodoispollthevirtualserialport.
Ifyouaresettingupaconnectionbetweentwovirtualmachines,younowhavethefirst
virtualmachinesetupastheserver.Repeatthisprocedureforthesecondvirtual
machine,butsetitupastheclientbyselectingThisendistheclientwhenconfiguring
thenamedpipe.
Change the Input Speed of the Serial Connection
Youcanincreasethespeedofaserialconnectionoverapipetoavirtualmachine.
Beforeyoubegin,usetheguestoperatingsystemtoconfiguretheserialportforthe
highestsettingsupportedbytheapplicationyouarerunninginthevirtualmachine.
Inprinciple,theoutputspeed,whichisthespeedatwhichthevirtualmachinesends
datathroughthevirtualserialport,isunlimited.Inpractice,theoutputspeeddepends
onhowfasttheapplicationattheotherendofthepipereadsinbounddata.
To change the input speed of the serial connection
1 PoweroffthevirtualmachineandclosetheWorkstationwindow.
2 Useatexteditortoaddthefollowinglinetoyourvirtualmachinesconfiguration
(.vmx)file:
serial<n>.pipe.charTimePercent = "<x>"
<n>isthenumberoftheserialport,startingfrom0.Thefirstserialportisserial0.
The<x>valueisapositiveintegerthatspecifiesthetimetakentotransmita
character,expressedasapercentageofthedefaultspeedsetfortheserialportin
theguest.Forexample,asettingof200forcestheporttotaketwiceaslongforeach
character,orsenddataathalfthedefaultspeed.Asettingof50forcestheportto
takeonlyhalfaslongforeachcharacter,orsenddataattwicethedefaultspeed.
Assumingthattheserialportspeedissetappropriatelyintheguestoperating
system,experimentwiththissetting.Startwithavalueof100andgradually
decreaseituntilyoufindthehighestspeedatwhichyourconnectionworks
reliably.
Workstation Users Manual
338 VMware, Inc.
Debugging over a Virtual Serial Port
Usingvirtualmachines,youcandebugkernelcodeononesystemwithouttheneedfor
twophysicalcomputers,amodem,oraserialcable.YoucanuseDebuggingToolsfor
Windows(WinDbg)orKernelDebugger(KD)todebugkernelcodeinavirtualmachine
overavirtualserialport.
YoucanDownloadDebuggingToolsforWindowsfromtheWindowsHardware
DeveloperCentral(WHDC)Website.
Debug an Application in a Virtual Machine from a Windows Host
Inthisconfiguration,youhavekernelcodetodebuginavirtualmachine(calledthe
targetvirtualmachine)andarerunningDebuggingToolsforWindows(WinDbg)or
KernelDebugger(KD)onaWindowshost.
Beforeyoubegin,onthehost,makesureyouhavearecentversionofDebuggingTools
forWindows,whichsupportsdebuggingoverapipe.Youneedversion 5.0.18.0or
higher.
To debug an application in a virtual machine from a Windows host
1 PreparethetargetvirtualmachineasdescribedinAddaVirtualSerialPorttoa
VirtualMachineonpage 335.
MakesureyouselectThisendistheserverwhenconfiguringthenamedpipe.
2 Poweronthevirtualmachine.
3 ChooseVM>RemovableDevicesmenutomakesuretheserialportisconnected.
IfSerial<n>isnotreportedas\\.\pipe\<namedpipe>,choosethevirtualserial
portandclickConnect.
4 Onthehost,openacommandpromptwindowandenterthefollowingcommand:
<debugger> -k com:port=\\.\pipe\<namedpipe>,pipe
<debugger> is WinDbg or KD.
5 PressEntertostartdebugging.
Debug an Application in a Virtual Machine from Another Virtual Machine
ThisconfigurationisusefulifyouuseWorkstationonaLinuxhost.Inthissituation,
youhavekernelcodetodebuginthetargetvirtualmachineandarerunning
DebuggingToolsforWindows(WinDbg)orKernelDebugger(KD)inthedebugger
virtualmachineonthesamehost.
VMware, Inc. 339
Chapter 16 Connecting Devices
Beforeyoubegin,downloadandinstallWinDbgorKDintheWindowsguestthatyou
plantouseasthedebuggervirtualmachine.
To debug an application from another virtual machine
1 PreparethevirtualmachinesasdescribedinAddaVirtualSerialPorttoaVirtual
Machineonpage 335.
2 Poweronbothvirtualmachines.
3 UsetheVM>RemovableDevicesmenutomakesuretheserialportisconnected.
Iftheserialportisnotconnected,choosethevirtualserialportandclickConnect.
4 Inthedebuggervirtualmachine,startdebuggingwithWinDbgorKD.
Configuring Keyboard Features
YoucanchangewhichkeycombinationsyouuseforhotkeysequencesinWorkstation
andwhichlanguagetouseforthekeyboardthatvirtualnetworkcomputing(VNC)
clientsuse.Inaddition,youcanconfigureplatformspecifickeyboardfeaturesfor
WindowsandLinuxhosts.
Use the Enhanced Virtual Keyboard for Windows Hosts
Theenhancedvirtualkeyboardfeatureprovidesbetterhandlingofinternational
keyboardsandkeyboardswithextrakeys.Italsoofferssecurityimprovementsbecause
itprocessesrawkeyboardinputassoonaspossible,bypassingWindowskeystroke
processingandanymalwarethatisnotalreadyatalowerlayer.
Ifyouusetheenhancedvirtualkeyboard,whenyoupressCtrl+Alt+Delete,theguest
systemonly,ratherthanbothguestandhost,actsonthecommand.
Beforeyoubegin,ifyoujustinstalledorupgradedtoWorkstation7.0andhavenotyet
restartedyourcomputer,doso.
To use the enhanced virtual keyboard for Windows hosts
1 Selectthevirtualmachine.
2 Makesurethevirtualmachineispoweredoff.
3 ChooseVM>Settings.
4 ClicktheOptionstab,andselectGeneral.
5 Toenableordisablethesetting,selectordeselecttheUseenhancedvirtual
keyboardcheckboxandclickOK.
Workstation Users Manual
340 VMware, Inc.
Hot Keys for Virtual Machines
Hotkeysletyouspecifythekeycombinationthatisusedwithhotkeysequencesfor
virtualmachines.Forexample,youcanrequirethatallhotkeysequencesuse
Ctrl+Shift+Alt.
Configuringhotkeysisusefultopreventcertainkeycombinations(suchas
Ctrl+Alt+Del)frombeinginterceptedbyWorkstationinsteadofbeingsenttotheguest
operatingsystem.Usehotkeysequencesto:
Switchbetweenvirtualmachines
Enterandleavefullscreenmode
Release(ungrab)input
SendCtrl+Alt+Deltothevirtualmachineonly(nottothehostmachine)
Sendcommandstothevirtualmachineonly(nottothehostmachine)
Thedefaultsettingsforhotkeysarelistedinthepreferenceseditor(chooseEdit>
Preferences>HotKeys).Usethepreferenceseditortochangethem.
Use Ctrl+Alt in a Key Combination
BecauseCtrl+AlttellsWorkstationtorelease(ungrab)mouseandkeyboardinput,
combinationsthatincludeCtrl+Altarenotpassedtotheguestoperatingsystem.You
mustusetheSpacekeyifthekeycombinationincludesCtrl+Alt.
To use Ctrl+Alt in a key combination
1 PressCtrl+Alt+spacebar.
2 ReleasethespacebarwithoutreleasingCtrlandAlt.
3 Pressthethirdkeyofthekeycombinationyouwanttosendtotheguest.
VMware, Inc. 341
Chapter 16 Connecting Devices
Specify a Language Keyboard Map for VNC Clients
IfyousetavirtualmachinetoactasaVNCserver,youcanspecifywhichlanguageto
useforthekeyboardthatVNCclientsuse.Bydefault,theUS101keyboardmap(U.S.
English)isused.
Beforeyoubegin,setthevirtualmachinetoactasaVNCserver.SeeConfigurea
VirtualMachineasaVNCServeronpage 228.
Also,determinethelocationofthekeymapfiletouse.Defaultkeymapfilesare
includedintheWorkstationinstallationdirectory:
OnWindowsXPhosts,thisdirectoryisinC:\Documents and Settings\All
Users\Application Data\VMware\vnckeymap.
OnWindowsVistaandWindows7hosts,thisdirectoryisin
C:\ProgramData\VMware\vnckeymap.
OnLinuxhosts,thisdirectoryisin/usr/lib/vmware/vnckeymap.
Ifthekeymapfileyouwanttouseisinanotherlocation,determinethepathtothefile.
Alsodeterminethelanguagecode.Usethefollowinglist:
de:German
de-ch:German(Switzerland)
es:Spanish
fi:Finnish
fr:French
fr-be:French(Belgium)
fr-ch:French(Switzerland)
is:Icelandic
it:Italian
jp:Japanese
nl-be:Dutch(Belgium)
no:Norwegian
pt:Polish
uk:UKEnglish
us:USEnglish
Workstation Users Manual
342 VMware, Inc.
To specify a language keyboard map for VNC clients
1 Useatexteditortoopentheconfigurationfile(.vmxfile)forthevirtualmachine
andaddthefollowinglines,where<port number>istheportnumbertouse:
RemoteDisplay.vnc.enabled = "TRUE"
RemoteDisplay.vnc.port = "<port number>"
2 Addoneofthefollowingpropertiestotheconfigurationfile,where<xx>isthe
codeforthelanguagetouse,suchasjpforJapanese:
TousethedefaultkeymapfileincludedintheWorkstationinstallation
directory,setthefollowingproperty:
RemoteDisplay.vnc.keyMap = "<xx>"
Touseakeyboardmapfileinanotherlocation,setthefollowingpropertyto
anabsolutefilepath:
RemoteDisplay.vnc.keyMapFile
YoucannowstartthevirtualmachineandconnecttoitfromaVNCclient.SeeUsea
VNCClienttoConnecttoaVirtualMachineonpage 229.
Keyboard Mapping on a Linux Host
Severalsituationsmightrequireyoutosetpropertiesinavirtualmachines
configurationfile(.vmxfile)tochangethewayakeyismapped.
Configure Keyboard Mapping for a Remote X Server
SometimesthekeyboardworkscorrectlywithalocalXserverbutnotwhenyourunthe
samevirtualmachinewitharemoteXserver.Youneedtosetadditionalpropertiesin
theconfiguration(.vmx)file.
Beforeyoubegin,verifythattheremoteXserverisanXFree86serverrunningonaPC.
IfthekeyboarddoesnotworkcorrectlyonanXFree86serverrunninglocally,reportthe
problemtoVMwaretechnicalsupport.
ForlocalXservers,WorkstationmapsXkeycodestoPCscancodestocorrectlyidentify
akey.WorkstationusesthiskeycodemaponlyforlocalXserversbecauseitcannottell
whetheraremoteXserverisrunningonaPCoronsomeotherkindofcomputer.In
thiscase,youcansetapropertytotellWorkstationtousekeycodemapping.Fora
descriptionofkeycodemapping,seeXKeyCodesComparedtoKeysymson
page 344.
VMware, Inc. 343
Chapter 16 Connecting Devices
To configure keyboard mapping for a remote X server
1 PoweroffthevirtualmachineandclosetheWorkstationwindow.
2 Onthemachinethathoststhevirtualmachine,addoneofthefollowinglinestothe
virtualmachineconfiguration(.vmx)fileorto~/.vmware/config:
IfyouuseanXFree86basedserverthatWorkstationdoesnotrecognizeasan
XFree86server,usethefollowingproperty:
xkeymap.usekeycodeMap = "TRUE"
ThispropertytellsWorkstationtoalwaysusekeycodemappingregardlessof
servertype.
IfWorkstationdoesrecognizetheremoteserverasanXFree86server,usethe
followingproperty:
xkeymap.usekeycodeMapIfXFree86 = "TRUE"
ThispropertytellsWorkstationtousekeycodemappingifyouareusingan
XFree86server,evenifitisremote.
3 Saveandclosethefile.
Change How a Specific Key Is Mapped
Ifsomekeysonthekeyboarddonotworkcorrectlyinavirtualmachine,youcanseta
propertythatmakesamodificationtothemap.
Beforeyoubegin,performthefollowingtasks:
VerifythattheXserverisanXFree86serverrunningonaPC.IftheXserveris
remote,configureittousekeycodemapping.SeeConfigureKeyboardMapping
foraRemoteXServeronpage 342.Foradescriptionofkeycodemapping,seeX
KeyCodesComparedtoKeysymsonpage 344.
DeterminetheXkeycodeandthecorrespondingvscancodeforthekey.Tofind
theXkeycodeforakey,runxevorxmodmap -pk.Mostvscancodesarelistedin
VScanCodeTableonpage 347.
Workstation Users Manual
344 VMware, Inc.
To change how a specific key is mapped
1 PoweroffthevirtualmachineandclosetheWorkstationwindow.
2 Onthemachinethathoststhevirtualmachine,addthefollowinglinetothevirtual
machineconfiguration(.vmx)fileorto~/.vmware/config:
xkeymap.keycode.<code> = "<v-scan_code>"
The<code>valuemustbeadecimalnumberand<v-scan_code>mustbea
Csyntaxhexadecimalnumber(forexample,0x001).
Forexample,toswapleftCtrlandCapsLock,usethefollowinglines:
xkeymap.keycode.64 = "0x01d # X Caps_Lock -> VM left ctrl"
xkeymap.keycode.37 = "0x03a # X Control_L -> VM caps lock"
3 Saveandclosethefile.
X Key Codes Compared to Keysyms
PressingakeyonthePCkeyboardgeneratesaPCscancodebasedroughlyonthe
positionofthekey.Forexample,theZkeyonaGermankeyboardgeneratesthesame
codeastheYkeyonanEnglishkeyboardbecausetheyareinthesamepositiononthe
keyboard.Mostkeyshaveonebytescancodes,butsomekeyshavetwobytescan
codeswithprefix0xe0.
Internally,WorkstationusesasimplifiedversionofthePCscancodethatisasingle
ninebitnumericvalue,calledavscancode.Avscancodeiswrittenasathreedigit
hexadecimalnumber.Thefirstdigitis0or1.Forexample,theCtrlkeyontheleftside
ofthekeyboardhasaonebytescancode(0x1d).Itsvscancodeis0x01d.TheCtrlkey
scancodeontherightsideofthekeyboardistwobytes(0xe0,0x1d).Itsvscancodeis
0x11d.
AnXFree86serveronaPChasaonetoonemappingfromXkeycodestoPCscan
codes,orvscancodes,whichiswhatWorkstationuses.WhenWorkstationishostedon
anXFree86serverandrunsalocalvirtualmachine,itusesthebuiltinmappingfromX
keycodestovscancodes.Thismappingiskeyboardindependentandshouldbe
correctformostlanguages.Inothercases(notanXFree86serverornotalocalserver),
Workstationmustmapkeysymstovscancodesbyusingasetofkeyboardspecific
tables.
AnXserverusesatwolevelencodingofkeys,whichincludestheXkeycodeandthe
keysym.AnXkeycodeisaonebytevalue.Theassignmentofkeycodestokeys
dependsontheXserverimplementationandthephysicalkeyboard.Asaresult,anX
applicationnormallycannotusekeycodesdirectly.Instead,thekeycodesaremapped
VMware, Inc. 345
Chapter 16 Connecting Devices
intokeysymsthathavenameslikespace,escape,xand2.YoucanuseanXapplication
tocontrolthemappingbyusingthefunctionXChangeKeyboardMapping()orbythe
programxmodmap.Toexplorekeyboardmappings,youcanusethexevcommand,
whichshowsthekeycodesandkeysymsforkeystypedintoitswindow.
Akeycodecorrespondsroughlytoaphysicalkey,whileakeysymcorrespondstothe
symbolonthekeytop.Forexample,withanXFree86serverrunningonaPC,theZkey
ontheGermankeyboardhasthesamekeycodeastheYkeyonanEnglishkeyboard.
TheGermanZkeysym,however,isthesameastheEnglishZkeysym,anddifferent
fromtheEnglishYkeysym.
Configure How Keysyms Are Mapped
Whenkeycodemappingcannotbeusedorisdisabled,Workstationmapskeysymsto
vscancodes.Ifalanguagespecifickeyboarddoesnotappeartobesupportedby
Workstation,youmightneedtosetapropertythattellsWorkstationwhichkeysym
tabletouse.
Beforeyoubegin,performthefollowingtasks:
Tochangethemappingofafewkeys,determinethekeysymnameforeachkey
thatisnotmappedcorrectly.
Theeasiestwaytofindthekeysymnameforakeyistorunthexevorxmodmap
-pkcommands.TheXheaderfile/usr/include/X11/keysymdef.hhasa
completelistofkeysyms.ThenameofakeysymisthesameasitsCconstant
withouttheXK_prefix.
Touseadifferentkeysymtable,determinewhichmappingtabletouse.
ThetablesarelocatedinthexkeymapdirectoryintheWorkstationinstallation
directory(usually/usr/lib/vmware).Thetableyoumustusedependsonthe
keyboardlayout.ThenormaldistributionincludestablesforPCkeyboardsforthe
UnitedStatesandanumberofEuropeancountriesandlanguages.Formostof
these,boththe101key(or102key)andthe104key(or105key)variantsare
available.
Ifnoneofthemappingtablesiscompletelycorrect,findonethatworksbest,copy
ittoanewlocation,andchangetheindividualkeysymmappings.
Workstation Users Manual
346 VMware, Inc.
WorkstationdetermineswhichtabletousebyexaminingthecurrentXkeymap.
However,itsdecisionmakingprocesscansometimesfail.Inaddition,eachmappingis
fixedandmightnotbecompletelycorrectforanygivenkeyboardandXkey
codetokeysymmapping.Forexample,ausermighthaveswappedCtrlandCaps
Lockusingxmodmap.Thismeansthekeysareswappedinthevirtualmachinewhen
usingaremoteserver(keysymmapping)butareunswappedwhenusingalocalserver
(keycodemapping).Tocorrectthissituation,useconfigurationsettings.
To configure how keysyms are mapped
1 PoweroffthevirtualmachineandclosetheWorkstationwindow.
2 Onthemachinethathoststhevirtualmachine,addoneormoreofthefollowing
linestothevirtualmachineconfiguration(.vmx)fileorto~/.vmware/config:
TodisableXkeycodemappingtomapkeysymsratherthankeycodesto
vscancodes,setthefollowingproperty:
xkeymap.nokeycodeMap = "TRUE"
Formoreinformation,seeXKeyCodesComparedtoKeysymsonpage 344.
IfWorkstationhasatableinthexkeymapdirectoryforyourkeyboardbut
cannotdetectit,setthefollowingproperty:
xkeymap.language = "<keyboard_type>"
Thevalue<keyboard_type>mustspecifyoneofthetablesinthexkeymap
directory.However,thefailuretodetectthekeyboardprobablymeansthe
tableisnotcompletelycorrectforyou.Youmightneedtocreateamodified
tableandusethexkeymap.fileNameproperty,describednext.
Touseadifferentkeysymmappingtablethatisnotinthexkeymapdirectory,
setthefollowingproperty,where<file_path>isthepathtothetable:
xkeymap.fileName = "<file_path>"
Thetablemustlistakeysymforeachkeybyusingthefollowingform:
<sym> = "<v-scan_code>"
The <sym>valueisanXkeysymname,and<v-scan_code>isaCsyntax
hexadecimalnumber(forexample,0x001).Useanewlineforeachkeysym.
Compilingacompletekeysymmappingisdifficult.VMwarerecommends
editinganexistingtableandmakingsmallchanges.
VMware, Inc. 347
Chapter 16 Connecting Devices
Tochangethekeysymmappingofafewkeys,setthefollowingpropertyfor
eachkey,onseparatelines:
xkeymap.keysym.<sym> = "<v-scan_code>"
Thevalue<sym>mustbeanXkeysymnameand<v-scan_code>isa
Csyntaxhexadecimalnumber(forexample,0x001).
MostvscancodesarelistedinVScanCodeTableonpage 347.The
xkeymaptablesthemselvesarealsohelpful.
3 Saveandclosethefile.
V-Scan Code Table
Table 161showsthevscancodesforthe104keyU.S.keyboard.
Table 16-1. V-Scan Codes for the 104-Key U.S. Keyboard
Symbol Shifted Symbol Location V-Scan Code
Esc 0x001
1 ! 0x002
2 @ 0x003
3 # 0x004
4 $ 0x005
5 % 0x006
6 ^ 0x007
7 & 0x008
8 * 0x009
9 ( 0x00a
0 ) 0x00b
_ 0x00c
= + 0x00d
Backspace 0x00e
Tab 0x00f
Q 0x010
W 0x011
E 0x012
R 0x013
Workstation Users Manual
348 VMware, Inc.
T 0x014
Y 0x015
U 0x016
I 0x017
O 0x018
P 0x019
[ { 0x01a
] } 0x01b
Enter 0x01c
Ctrl left 0x01d
A 0x01e
S 0x01f
D 0x020
F 0x021
G 0x022
H 0x023
J 0x024
K 0x025
L 0x026
; 0x027
0x028
` 0x029
Shift left 0x02a
\ | 0x02b
Z 0x02c
X 0x02d
C 0x02e
V 0x02f
B 0x030
Table 16-1. V-Scan Codes for the 104-Key U.S. Keyboard (Continued)
Symbol Shifted Symbol Location V-Scan Code
VMware, Inc. 349
Chapter 16 Connecting Devices
N 0x031
M 0x032
, < 0x033
. > 0x034
/ ? 0x035
Shift right 0x036
* numericpad 0x037
Alt left 0x038
Spacebar 0x039
CapsLock 0x03a
F1 0x03b
F2 0x03c
F3 0x03d
F4 0x03e
F5 0x03f
F6 0x040
F7 0x041
F8 0x042
F9 0x043
F10 0x044
NumLock numericpad 0x045
ScrollLock 0x046
Home 7 numericpad 0x047
Uparrow 8 numericpad 0x048
PgUp 9 numericpad 0x049
numericpad 0x04a
Leftarrow 4 numericpad 0x04b
5 numericpad 0x04c
Rightarrow 6 numericpad 0x04d
Table 16-1. V-Scan Codes for the 104-Key U.S. Keyboard (Continued)
Symbol Shifted Symbol Location V-Scan Code
Workstation Users Manual
350 VMware, Inc.
+ numericpad 0x04e
End 1 numericpad 0x04f
Downarrow 2 numericpad 0x050
PgDn 3 numericpad 0x051
Ins 0 numericpad 0x052
Del numericpad 0x053
F11 0x057
F12 0x058
Break Pause 0x100
Enter numericpad 0x11c
Ctrl right 0x11d
/ numericpad 0x135
SysRq PrintScrn 0x137
Alt right 0x138
Home functionpad 0x147
Uparrow functionpad 0x148
PageUp functionpad 0x149
Leftarrow functionpad 0x14b
Rightarrow functionpad 0x14d
End functionpad 0x14f
Downarrow functionpad 0x150
PageDown functionpad 0x151
Insert functionpad 0x152
Delete functionpad 0x153
Windows left 0x15b
Windows right 0x15c
Menu 0x15d
Table 16-1. V-Scan Codes for the 104-Key U.S. Keyboard (Continued)
Symbol Shifted Symbol Location V-Scan Code
VMware, Inc. 351
Chapter 16 Connecting Devices
The84keykeyboardhasaSysReqkeyonthenumericpad.Itsvscancodeis0x054.
KeyboardsoutsidetheU.S.usuallyhaveanextrakey(often<>or<>|)nexttotheleft
Shiftkey.Thevscancodeforthiskeyis0x056.
Using USB Devices in a Virtual Machine
Youcanconnectupto20USBdevicestoonevirtualmachinesimultaneously.
WorkstationprovidestwoUSBcontrollerspervirtualmachine,aUHCIcontrollerfor
USB1.1devicesandanEHCIcontrollerforUSB2.0devices.
ForUSB2.0support,yourhostmustsupportUSB2.0,andyoumustenableUSB2.0
supportinWorkstation.USB2.0supportisavailableonlyforWorkstation6.xand
highervirtualmachines.USB2.0devicesarehighspeeddeviceswhichincludethe
latestmodelsofUSBflashdrives,USBharddrives,iPods,andiPhone.
Onthehost,whenaUSB2.0deviceconnectstoaUSBport,thedeviceisautomatically
connectedtoEHCIcontrollerandoperatesinUSB2.0mode.AUSB1.1deviceis
connectedtoUHCIcontrollerandoperatesinUSB1.1mode.Avirtualmachinewith
USB2.0supportenabled,simulatesthisbehavior.SeeEnabletheUSB2.0Controller
foraVirtualMachineonpage 352.
AlthoughyourhostoperatingsystemmustsupportUSB,youdonotneedtoinstall
devicespecificdriversforUSBdevicesinthehostoperatingsystemtousethose
devicesonlyinthevirtualmachine.WindowsNTandLinuxkernelsearlierthan2.2.17
donotsupportUSB.
VMwarehastestedavarietyofUSBdeviceswithWorkstation7.0.Iftheguestoperating
systemhasappropriatedrivers,youcanuseawidevarietyofUSBdevices,forexample,
PDAs,Smartphones,printers,storage(disk)devices,scanners,MP3players,digital
cameras,memorycardreaders,andisochronoustransferdevices,suchaswebcams,
speakers,andmicrophones.
USBhumaninterfacedevices,suchasthekeyboardandmouse,canbeconnectedtothe
virtualmachinebyenablingtheShowallUSBinputdevicesoption.Ifyoudonotselect
theoptiontoShowallUSBinputdevicesasremovabledevices,thesedevicesdonot
appearasRemovableDevicesavailabletoconnecttothevirtualmachine,eventhough
theyarepluggedintoUSBportsonthehost.Thisoptionisenablesuserstousespecial
USBhumaninterfacedevices(HIDs)insideavirtualmachine.
Workstation Users Manual
352 VMware, Inc.
Enable the USB 2.0 Controller for a Virtual Machine
ThevirtualmachinesUSBcontrollerandhighspeedUSB2.0devicesareenabledby
default.Modemsandcertainstreamingdatadevices,suchasspeakersandwebcams,
donotworkproperlyunlessyouenableUSB2.0support.
IfyourvirtualmachinewascreatedusinganolderversionofWorkstationtheUSB2.0
devicesupportisnotenabled.YoucanenabletheUSBcontrollerinthevirtualmachine
settingseditorofWorkstation7.0.
Beforeyoubegin,performoneofthefollowingtasksthatapplytoyourconfiguration:
VerifythatthevirtualmachineisaWorkstation6.xorhighervirtualmachine.
VerifythattheguestsupportsUSB2.0devices.
OnWindowsXPguests,verifythatthelatestservicepackisinstalledtouse
USB 2.0.
IfyouuseWindowsXPwithnoservicepacks,thedriverfortheEHCIcontroller
cannotbeloaded.
IfyoudonotplantouseUSBdevicesinavirtualmachine,youcanusethevirtual
machinesettingseditortodisableUSB2.0support.
To enable the USB 2.0 Controller for a virtual machine
1 Selectthevirtualmachine.
2 ChooseVM>Settings.
3 OntheHardwaretab,selectUSBController.
4 SelecttheEnablehighspeedsupportforUSB2.0devicescheckboxandclick
OK.
Add a USB Controller to a Virtual Machine
Bydefault,aUSBcontrollerisincludedwhenyoucreateavirtualmachine.Ifyou
removetheUSBcontroller,youcanadditback.
Thiscontrollerisrequiredtouseasmartcardinavirtualmachineregardlessof
whetherthesmartcardreaderisaUSBdevice.
To add a USB controller to a virtual machine
1 Selectthevirtualmachine.
2 Makesurethevirtualmachineispoweredoff.
VMware, Inc. 353
Chapter 16 Connecting Devices
3 ChooseVM>Settings.
4 OntheHardwaretab,clickAddtostarttheAddHardwarewizard.
5 OntheHardwareTypepage,selectUSBControllerandclickNext.
6 OntheUSBpage,clickFinish.
7 Inthevirtualmachinesettingseditor,clickOK.
YoucannowstartthevirtualmachineandautomaticallyormanuallyconnectUSB
devicesandsmartcardreaders.
Connecting USB Devices
Whenavirtualmachineisrunning,itswindowistheactivewindow.IfyouplugaUSB
deviceintothehost,bydefault,thedeviceconnectstothevirtualmachineinsteadof
thehost.
IfyoumanuallyconnectaUSBdevicetoavirtualmachine(chooseVM>Removable
Devices),Workstationretainsthevirtualmachinesconnectiontotheaffectedporton
thehost.Youcansuspendorpoweroffthevirtualmachine,orunplugthedevice.When
youplugthedevicebackinorresumethevirtualmachine,Workstationreconnectsthe
device.Workstationretainstheconnectionbywritinganautoconnectentrytothe
virtualmachinesconfiguration(.vmx)file.
IfWorkstationcannotreconnecttothedevice(forexample,becauseyoudisconnectthe
device),thedeviceisremovedandamessageisdisplayed,indicatingthatWorkstation
cannotconnecttothedevice.Youcanconnectmanuallytothedeviceifitisstill
available.
Enable or Disable Automatic Connection of USB Devices
YoucandisabletheautoconnectfeatureifyoudonotwantUSBdevicesto
automaticallyconnecttothevirtualmachinewhenyoupoweriton.
To enable or disable automatic connection of USB devices
1 Selectthevirtualmachine.
Thevirtualmachinecanbepoweredonoroffunlessyouplantochangethesetting
forconnectingtoUSBmouseandkeyboarddevices.Inthiscase,thevirtual
machinemustbepoweredoff.
2 ChooseVM>Settings.
Workstation Users Manual
354 VMware, Inc.
3 OntheHardwaretab,selectUSBController.
4 SelectordeselecttheAutomaticallyconnectnewUSBdevicescheckboxtoenable
ordisablethesettingandclickOK.
Enable or Disable Show All USB Input Devices
TheShowallUSBinputdevicesoptionisdisabledbydefault.Thisoptionenablesusers
tousespecialUSBHIDsinsideavirtualmachineexclusively.
VMwarerecommendsdisablingautomaticconnectionofUSBdevicewhenusinga
KVMswitchforamouseorkeyboard.
Beforeyoubegin,makesurethatthevirtualmachineispoweredoff.
To enable or disable Show all USB input devices
1 SelectVM>Settings.
2 OntheHardwaretab,selectUSBController.
3 SelecttheShowallUSBinputdevicescheckboxtoenableordisablethesetting
andclickOK.
IftheShowallUSBinputdevicescheckboxisenabled,alltheHIDs,suchasUSB
1.1and2.0mouseandkeyboarddevices,appearasRemovableDeviceswhenthe
virtualmachineispoweredon.
Connect a USB Device Manually
Ifadevicethatisconnectedtothehostdoesnotautomaticallyconnecttoavirtual
machineatpoweron,youcanconnectthedevicemanually.
Beforeyoubegin,forUSBmouse,keyboard,andotherinputdevices,youmustenable
showingthesedevices.SeeEnableorDisableShowAllUSBInputDeviceson
page 354.
Also,whenyouareusingavirtualmachine,ifyouplugadeviceintothehost,the
autoconnectfeatureusuallyconnectsthedevicetothevirtualmachine.Ifthisaction
doesnotoccur,youcanconnectthedevicemanually.
NOTEAnHIDthatisconnectedtotheguestisnotavailabletothehost.
VMware, Inc. 355
Chapter 16 Connecting Devices
To connect a USB device manually
1 Selectthevirtualmachine.
2 Makesurethevirtualmachineispoweredon.
3 ChooseVM>RemovableDevices><device_name>.
Here<device_name>specifiestheUSBdevicethatispluggedintothehost.
A checkmarkappearsnexttothedevicesname,indicatingthatitisconnected.
IfthephysicalUSBdevicesareconnectedtothehostthroughahub,thevirtual
machineseesonlytheUSBdevices,notthehub.
USB Driver Installation on a Windows Host
WhenaparticularUSBdeviceisconnectedtoavirtualmachineforthefirsttime,the
hostdetectsitasanewdevicenamedVMwareUSBDeviceandinstallstheappropriate
VMwaredriver.
OnWindowsXPandWindowsServer2003hosts,theMicrosoftWindowsFoundNew
Hardwarewizardpromptsyoutorunit.Selectthedefaultaction,Installthesoftware
automatically.Afterthesoftwareisinstalled,theguestoperatingsystemdetectsthe
USBdeviceandsearchesforasuitabledriver.
Synchronize a PDA to Install a PDA Driver
WhenyousynchronizeaPDAtoavirtualmachineforthefirsttime,thetotaltime
requiredtoloadtheVMwareUSBdevicedriverinthehostandthePDAdriverinthe
guestmightexceedthedevicesconnectiontimeoutvalue.Thiscausesthedeviceto
disconnectitselffromthecomputerbeforetheguestcansynchronizewithit.
To synchronize a PDA to install a PDA driver
1 ConnecttheUSBdevicetothecomputerthathoststhevirtualmachine.
2 SynchronizethePDAwiththehost.
3 LettheguestfinishinstallingthePDAdriver.
4 Dismissanyconnectionerrorwarnings.
5 SynchronizethePDAagain.
Thissecondattemptusuallysucceeds.
Workstation Users Manual
356 VMware, Inc.
Access and Use a USB Device on a Linux Host
OnLinuxhosts,WorkstationusestheUSBdevicefilesystemtoconnecttoUSBdevices.
IftheUSBdevicefilesystemisnotlocatedin/proc/bus/usb,youmustmounttheUSB
filesystemtothatlocation.
Beforeyoubegin,addaUSBcontrollertothevirtualmachineifthevirtualmachine
doesnothaveone.SeeAddaUSBControllertoaVirtualMachineonpage 352.
DonotattempttoaddaUSBdrivesdevicenodedirectory(forexample,/dev/sda)to
thevirtualmachineasaharddisk.
To access and use a USB device on a Linux host
1 Runthefollowingcommandasroot:
mount -t usbfs none /proc/bus/usb
2 ConnecttheUSBdevicetothehostandbeginusingit.
How Device Control Is Shared Between Host and Guest
OnlythehostortheguestcanhavecontrolofaUSBdeviceatanyonetime.Device
controloperatesdifferently,dependingonwhetherthehostisaLinuxoraWindows
computer.
Device Control on a Windows Host
Whenyouconnectadevicetoavirtualmachine,itisdisconnectedfromthehostor
fromthevirtualmachinethatpreviouslyhadcontrolofthedevice.Whenyou
disconnectadevicefromavirtualmachine,itisreturnedtothehost.
Undersomecircumstances,ifaUSBstoragedeviceisinuseonthehost(forexample,
oneormorefilesstoredonthedeviceareopenonthehost),anerrorappearsinthe
virtualmachinewhenyoutrytoconnecttothedevice.Youmustletthehostcomplete
itsoperationorcloseanyapplicationconnectedtothedeviceonthehost,andconnect
tothedeviceinthevirtualmachineagain.
OnWindowsXPandWindowsServer2003hosts,whenyouconnectaUSBnetworkor
storagedevicetoavirtualmachine,amessagemightappearonthehostthatsaysthe
devicecanberemovedsafely.Thisisnormalbehavior,andyoucandismissthedialog
box.However,donotremovethedevicefromyourphysicalcomputer.
Ifthenetworkorstoragedevicedoesnotdisconnectfromthehost,usetheappropriate
systemtrayicontodisconnectit.OnWindowsXPandWindowsServer2003,itiscalled
SafelyRemoveHardware.
VMware, Inc. 357
Chapter 16 Connecting Devices
Troubleshoot Device Control Issues on a Linux Host
OnLinuxhosts,guestoperatingsystemscanusedevicesthatarenotalreadyinuseby
thehost,thatis,devicesthatarenotclaimedbyahostoperatingsystemdriver.
IfthedeviceisinusebythehostandyoutrytochooseVM>RemovableDevicesto
connectittotheguest,adialogboxappears,askingwhetheryouwanttodisconnectthe
driveronthehost.Occasionally,disconnectingthedevicefails.
Arelatedissuesometimesaffectsdevicesthatrelyonautomaticconnection(asPDAs
oftendo).Occasionally,evenifyousuccessfullyusedautoconnectiontoconnectthe
devicetothevirtualmachine,youmightexperienceproblemswiththeconnectionto
thedevice.
To troubleshoot device control issues on a Linux host
1 Ifyouhaveproblemswithautomaticconnections,chooseVM>Removable
Devicestodisconnectthedeviceandreconnectit.
2 Iftheproblempersists,unplugthedevicephysicallyandplugitinagain.
3 Ifawarningappearsthatthedeviceisinuse,disablethedeviceinthehotplug
configurationfilesinthe/etc/hotplugdirectory.
Fordetailsoneditingtheseconfigurationfiles,seeyourLinuxdistributions
documentation.
4 Ifadisconnectionfails,dooneofthefollowing:
Ifthedriverwasautomaticallyloadedbyhotplug,disableitinthehotplug
configurationfilesinthe/etc/hotplugdirectory.
Fordetailsoneditingtheseconfigurationfiles,seeyourLinuxdistributions
documentation.
Tounloadthedevicedrivermanually,becomeroot(su -)andusethermmod
command.
Disconnecting USB Devices from a Virtual Machine
BeforeyouunplugaUSBdeviceorchooseVM>RemovableDevicestodisconnectit
fromavirtualmachine,besureitisinasafestate.
Followtheproceduresthedevicemanufacturerspecifiesforunpluggingthedevice
fromaphysicalcomputer.Thisistruewhetheryouarephysicallyunpluggingit,
movingitfromhosttovirtualmachine,movingitbetweenvirtualmachines,ormoving
itfromvirtualmachinetohost.
Workstation Users Manual
358 VMware, Inc.
Thisisimportantwithdatastoragedevices(aZipdrive,forexample).Ifyoumovea
datastoragedevicetoosoonaftersavingafileandtheoperatingsystemdidnot
actuallywritethedatatothedisk,youcanlosedata.
Use Smart Cards with Virtual Machines
Asmartcardisaplasticcardaboutthesizeofacreditcardbutembeddedwitha
computerchip.Manygovernmentagenciesandlargeenterprisesusesmartcardsto
sendsecurecommunication,digitallysigndocuments,andauthenticateuserswho
accesstheircomputernetworks.Usersplugasmartcardreaderintotheircomputer
andinserttheirsmartcardinthereader.TheyarethenpromptedfortheirPINtologon.
ThevirtualmachineconsiderssmartcardreaderstobeatypeofUSBdevice.Youcan
chooseVM>RemovableDevicestoaccessthem.Virtualmachinescanconnectto
smartcardreadersthatinterfacetoserialports,parallelports,USBports,PCMCIA
slots,andPCIslots.
Asmartcardcanbesharedbetweenvirtualmachinesorbetweenthehostandoneor
morevirtualmachines.Sharingisenabledbydefault.Todisablesharing,seeDisable
SmartCardSharingonpage 360.
Whenyouplugasmartcardreaderintothecomputerthereaderappearsastwo
separateUSBdevicesintheWorkstationinterface.Thisisbecauseyoucanusesmart
cardsinoneoftwomutuallyexclusivemodes:virtualmodeorUSBpassthroughmode.
Youmustselectoneortheother.
Virtualmode(Recommended)Thesmartcardreaderdeviceisavailableas
Virtual<smart_card_reader_model>underRemovableDevices.Afterthe
virtualreaderisconnectedtothevirtualmachine,itisvisibleasUSBSmartCard
ReaderonWindowsXPguests.OnWindowsVistaandWindows7gueststhe
genericsmartcardreaderdevicenameappearsundertheWindowsDevice
Managerlist.Invirtualmode,thesmartcardreadercanbesharedamong
applicationsonthehostandamongapplicationswithindifferentguestsonthe
host.
USBpassthroughmodeThesmartcardreaderdeviceisavailableas
<smart_card_reader_model>underRemovableDevices.InUSBpassthrough
mode,asinglevirtualmachinedirectlycontrolsthephysicalsmartcardreader.A
USBpassthroughsmartcardreadercannotbeusedbyapplicationsonthehostor
byapplicationswithinothervirtualmachines.YoushoulduseUSBpassthrough
modeonlyifconnectioninvirtualmodedoesnotworkwellforyourscenario.If
youareusingtheUSBpassthroughmodeyoumayneedtoinstallthedriver
providedbythemanufacturer.
VMware, Inc. 359
Chapter 16 Connecting Devices
SmartcardscanbeusedwithmanyLinuxdistributions.VMwareprovidesfullsmart
cardsupportforWindowsguestsrunningonLinuxhosts.However,usingsmartcards
withinLinux,typicallyrequiresthirdpartysoftwaretoeffectivelyauthenticatetoa
domainorenablesecurecommunications.Smartcardsshouldworkwithcommon
Linuxbrowsers,emailapplications,anddirectoryserviceshowever,theseproducts
havenotbeentestedorcertifiedbyVMware.
Touseahostssmartcardreaderinavirtualmachine,makesurethefollowing
prerequisitesaresatisfied:
OnWindowshosts,starttheservicecalledSCardSvr.exeifitisnotalready
running.
OnLinuxhosts,makesurethelibpcsclitelibraryisinstalled.MostrecentLinux
distributionsincludethislibrary.Alsomakesurethepcscddaemonisrunning.
MakesurethevirtualmachinehasaUSBcontroller.
AUSBcontrollerisrequiredregardlessofwhetherthesmartcardreaderitselfisa
USBdevice.Bydefault,USBcontrollersareincludedwhenyoucreateavirtual
machine.IfyouremovedtheUSBcontroller,youmustadditback.SeeAddaUSB
ControllertoaVirtualMachineonpage 352.
To use smart cards with virtual machines
1 Connectthesmartcardreadertothehostmachine.
2 Startthevirtualmachine.
3 Toconnectthesmartcardreadertoavirtualmachine,chooseVM>Removable
Devices>Virtual<smart_card_reader_model>>Connect.
IfthesmartcardreaderisaUSBsmartcardreader,twoitemsappearforitinthe
RemovableDevicesmenu.Bothitemsusethemodelnameofthereader,butone
itemnamebeginswithVirtual.
OnLinuxhosts,ifyouselectthewrongitemandthenwanttoselecttheVirtual
smartcarditem,seeSwitchtoUsingtheVirtualSmartCardReaderonLinux
Hostsonpage 360.
4 Todisconnectthesmartcardreaderfromthevirtualmachine,chooseVM>
RemovableDevices>Virtual<smart_card_reader_model>>Disconnect.
Workstation Users Manual
360 VMware, Inc.
5 Toremovethesmartcardfromthevirtualmachine,chooseVM>Removable
Devices>Virtual<smart_card_reader_model>>RemoveSmartCard.
Thesmartcardisremovedfromthevirtualmachinebutstaysconnectedonthe
host.Ifthesmartcardisphysicallyremovedfromthesmartcardreaderthenthis
optionisdisabled.
6 Toinsertthesmartcardtothevirtualmachine,chooseVM>RemovableDevices
>Virtual<smart_card_reader_model>>InsertSmartCard.
Ifthesmartcardisphysicallyinsertedinthesmartcardreaderthenthesmartcard
isalsoinsertedinthevirtualmachine.
Switch to Using the Virtual Smart Card Reader on Linux Hosts
BecauseofthewaysmartcardreaderfunctionalityisimplementedonLinuxhosts,you
mustexitWorkstationandrestartthepcscddaemononthehostbeforeswitchingfrom
thenonvirtualsmartcardreadertothevirtualsmartcardreader.
To switch to using the virtual smart card reader on Linux hosts
1 Todisconnectfromthenonvirtualsmartcardreader,usetheRemovableDevices
menuandselectDisconnect.
2 PoweroffthevirtualmachineandexitWorkstation.
3 Physicallydisconnectthesmartcardreaderfromthehost.
4 Restartthepcscddaemononthehost.
5 Physicallyconnectthesmartcardreadertothehost.
6 StartWorkstation,poweronthevirtualmachine,andconnecttothevirtualsmart
cardreader.
SeeUseSmartCardswithVirtualMachinesonpage 358.
Disable Smart Card Sharing
Bydefault,youcanshareasmartcardbetweenvirtualmachinesorbetweenthehost
andoneormorevirtualmachines.Youmightwanttodisablesmartcardsharingifyou
areusingaPCMCIAsmartcardreader,deployingvirtualmachinesforenterpriseuse
anddonotwanttosupportdriversforvarioussmartcardreaders,andyourhosthas
driversbutnottheguest.
VMware, Inc. 361
Chapter 16 Connecting Devices
Thesettingthatcontrolssmartcardsharingislocatedintheglobalconfigurationfile.
Theglobalconfigurationfileiscreatedwhenyouchangeanyofthedefaultsettingsin
theWorkstationpreferenceseditor(Edit>Preferences).Thefilelocationdependson
thehostoperatingsystem:
OnmostWindowshosts:
C:\Documents and Settings\All Users\Application Data\VMware\VMware
Workstation\config.ini
OnWindowsVistaandWindows7hosts:
C:\ProgramData\VMware\VMware Workstation\config.ini
OnLinuxhosts:
/etc/vmware/config
To disable smart card sharing
1 Iftheconfig.inifiledoesnotyetexistonyourhostcomputer,chooseEdit>
Preferencesandchangeatleastoneofthesettingsinthepreferenceeditor.
2 Opentheconfig.inifilewithatexteditorandaddthefollowingline:
usb.ccid.useSharedMode = "FALSE"
3 Saveandclosethefile.
4 Setpermissionsonthisfilesothatotheruserscannotchangeit.
Support for Generic SCSI Devices
GenericSCSIgivestheguestoperatingsystemdirectaccesstoSCSIdevicesconnected
tothehost,suchasscanners,tapedrives,andotherdatastoragedevices.UsingtheSCSI
genericdriver,WorkstationallowsavirtualmachinetorunanySCSIdevicethatis
supportedbytheguestoperatingsystem.
Intheory,genericSCSIiscompletelydeviceindependent,butVMwarehasdiscovered
itissensitivetotheguestoperatingsystem,deviceclass,andspecificSCSIhardware.
TryanySCSIhardwareandreportproblemstoVMwaretechnicalsupport.
OnWindowshosts,toaccesshostSCSIdevicesfromwithinavirtualmachine,you
mustrunWorkstationasauserwithadministratoraccess.
OnLinuxhosts,youmusthavereadandwritepermissionsonagivengenericSCSI
devicetousethedevicewithinavirtualmachine,evenifthedeviceisareadonly
devicesuchasaCDROMdrive.Thesedevicestypicallydefaulttorootonly
permissions.Youradministratorcancreateagroupwithaccesstoreadandwriteto
thesedevicesandaddtheappropriateuserstothatgroup.
Workstation Users Manual
362 VMware, Inc.
Installing Required Adapters or Drivers for Some Windows
Guests
OnolderWindowsguestoperatingsystems,youmightneedtoinstallspecialhostbus
adapters.TouseaSCSIdevicewith32bitWindowsXPguests,youmustinstalla
specialdriverthatVMwareprovides.
Installing a SCSI Adapter on Windows 9.x and Me Guests
IfyouusegenericSCSIdevicesinaWindows95,Windows98,orWindowsMeguest
operatingsystemandareexperiencingproblemswiththedevices,downloadthelatest
Mylex(BusLogic)BT/KT958compatiblehostbusadapterfromLSIWebsite.Toinstall
thedriver,followtheinstructionsontheWebsite.
ThisdriveroverrideswhatWindowschoosesasthebestdriver,butitcorrectsknown
problems.
Installing a SCSI Driver for 32-Bit Windows XP Guests
TouseSCSIdevicesina32bitWindowsXPvirtualmachine,youneedaspecialSCSI
driveravailablefromtheDownloadspageoftheVMwareWebsite.
Install the BusLogic Driver in a Windows NT 4.0 Guest
GenericSCSIdevicesusethevirtualMylex(BusLogic)BT/KT958compatiblehostbus
adapterprovidedbythevirtualmachine.OnWindowsNT4.0,youmightneedto
installthedrivermanuallyifitisnotalreadyinstalledforavirtualSCSIdisk.Doso
beforeyouaddagenericSCSIdevice.
Beforeyoubegin,haveyourWindowsNTinstallationCDavailable.
To install the BusLogic driver in a Windows NT 4.0 guest
1 ToopentheSCSIAdapterscontrolpanel,chooseStart>Settings>ControlPanel
>SCSIAdapters.
2 OntheDriverstab,clickAdd.
3 Inthelistofvendorsontheleft,selectBusLogic.
4 Inthelistofdriversontheright,selectBusLogicMultiMasterPCISCSIHost
AdaptersandclickOK.
5 InserttheWindowsNTCDwhenyouarepromptedandclickOK.
6 Rebootwhenyouareprompted.
VMware, Inc. 363
Chapter 16 Connecting Devices
Avoiding Concurrent Access on Linux Hosts
TheSCSIgenericdriversetsupamappingforeachSCSIdevicein/dev.Eachentry
startswithsg(fortheSCSIgenericdriver)followedbyanumber.Forexample,
/dev/sg0isthefirstgenericSCSIdevice.EachentrycorrespondstoaSCSIdevicein
theorderspecifiedin/proc/scsi/scsi,fromthelowestdeviceIDonthelowest
adaptertothehighestdeviceIDonthelowestadapter,andsoontothehighestdevice
IDonthehighestadapter.
SomeLinuxdevicessuchastapedrives,diskdrives,andCDROMdrivesalreadyhave
adesignated/deventry(st,sd,andsr,respectively).WhentheSCSIgenericdriveris
installed,Linuxidentifiesthesedeviceswithcorrespondingsgentriesin/devin
additiontotheirtraditionalentries.Workstationensuresthatmultipleprogramsare
notusingthesame/dev/sgentryatthesametimebutcannotalwaysensurethat
multipleprogramsarenotusingthe/dev/sgentryandthetraditional/deventryat
thesametime.WhenyouspecifywhichSCSIdevicetouseinavirtualmachine,donot
specify/dev/st0or/dev/sr0.
Add a Generic SCSI Device to a Virtual Machine
TomapvirtualSCSIdevicesonavirtualmachinetophysicalgenericSCSIdeviceson
thehost,youmustaddagenericSCSIdevicetothevirtualmachine.
Beforeyoubegin,makesureyouhavethefollowingrequiredpermissions:
OnWindowshosts,toaccesshostSCSIdevicesasgenericSCSIdevices,youmust
runWorkstationasauserwithadministratoraccess.
OnLinuxhosts,genericSCSIrequiresversion2.1.36orhigheroftheSCSIGeneric
(sg.o)driver,whichcomeswithkernel2.2.14andhigher.Also,youmustbe
loggedonasauserwhohaspermissionstousethedevice(thatis,readandwrite
permissions).
To add a generic SCSI device to a virtual machine
1 Selectthevirtualmachine.
2 ChooseVM>Settings.
3 OntheHardwaretab,clickAddtostarttheAddHardwarewizard.
4 OntheHardwareTypepage,selectGenericSCSIDeviceandclickNext.
CAUTIONDonotattempttousethesamegenericSCSIdeviceinbothhostandguest.
Thiscancauseunexpectedbehaviorandmightcauselossorcorruptionofdata.
Workstation Users Manual
364 VMware, Inc.
5 OntheChooseSCSIDevicepage,fromthedropdownmenuofSCSIdevices,
selectthephysicaldevicetomap.
Ifyoudonotseethedeviceyouwantinthelist,seeTroubleshootProblems
DetectingGenericSCSIDevicesonpage 364.
OnLinuxhosts,ifyoutypeinthepathtotheSCSIdevice,donotenter/dev/st0
or/dev/sr0.
6 SelecttheConnectatpoweroncheckboxtoconfigureautomaticconnection
behaviorandclickFinish.
7 OntheHardwaretab,intheVirtualdevicenodesection,selecttheSCSIdevice
identifiertouseforthedriveandclickOK.
Forexample,ifyouselectSCSI0:2,theguestoperatingsystemseesthedriveas
ID 2oncontroller0.
Troubleshoot Problems Detecting Generic SCSI Devices
WhenyouusethevirtualmachinesettingseditortoaddagenericSCSIdevicetoa
virtualmachine,occasionallythedevicedoesnotappearinthelistofavailableSCSI
devices.
Beforeyoubegintroubleshootingthisproblem,youmightneedtoknowthefollowing:
TheSCSIbusnumberthatthedeviceusesonthehostsystem.TheSCSIbusis
assignedanumberbythehostoperatingsystemafterallIDEbusesareassigned
numbers.Forexample,ifyouhavetwoIDEbuses,theyarenumbered0and1.The
firstSCSIbusisassignedbusnumber2.
IfyoucannotdeterminetheSCSIbusnumber,tryusingathirdpartytoolsuchas
winobjtodeterminethisinformation.Youcandownloadwinobjforfreefromthe
WindowsSysinternalsWebsite.
ThetargetIDthedeviceusesinthevirtualmachineandonthehost.ThisIDis
usuallysetbysomejumpersorswitchesonthedevice.TodeterminethetargetID,
seetheownersmanualforthedevice.
VMware, Inc. 365
Chapter 16 Connecting Devices
ThemainreasonsWorkstationcannotdetectadeviceincludethefollowing:
Adriverforthatdeviceisnotinstalledonthehost.
Adriveronthehostpreventsthedevicefrombeingdetected.
Thevirtualmachineusesadeviceforwhichtherearenodriversavailabletothe
hostoperatingsystem.Inthiscase,addthedevicemanuallytothevirtual
machinesconfiguration(.vmx)file.Addingadeviceinthismanneris
recommendedforadvancedusersonly.
To troubleshoot problems detecting generic SCSI devices
1 Findoutwhetherthedevicedriverforthisdeviceisinstalledonthehost.
2 Ifthedevicedriverisnotinstalledandyouwanttoinstallit,dosoandseeifthe
deviceappearscorrectlyinthevirtualmachinesettingseditor.
Youmightnotwanttoinstallthedriveronthehostifyouwanttoavoida
deviceinuseconflictbetweenthehostandguest.
Ifadriverisinstalledbutdoesnotappearcorrectly,ifyoucannotinstallthedriver
onthehost,orifyoudonotwanttoinstallthedriveronthehost,continuewiththe
restofthisprocedure.
3 IfanoriginalSCSIdevicedriverisalreadyinstalledonthehost,disableit.
SomeWindowsoperatingsystemsdonotprocessthesendcommandfromthe
adapterifthedevicedriverownsthedevice.
4 Poweroffthevirtualmachineandopenthevirtualmachinesconfiguration(.vmx)
fileinatexteditor.
5 Addorchangethefollowinglineinthe.vmxfile,whereX istheSCSIbusnumber
thedeviceusesonthehostsystem,andYisthetargetIDthedeviceusesbothin
thevirtualmachineandonthehost:
scsiZ:Y.fileName = "<deviceName>"
For"<deviceName>"use:
"scsiX:Y"
Thefollowingisanexampleofhowtosettheoption.Theproblematicdeviceisa
CDROMdrive,andtheexistingentryintheconfigurationfileis:
scsi0:4.fileName = "CdRom0"
Workstation Users Manual
366 VMware, Inc.
Ifthedeviceonthehostislocatedonbus2withtargetID4,changethislineto:
scsi0:4.fileName = "scsi2:4"
IfyourproblemwasthatthevirtualmachinehasaSCSIadapterandgenericSCSI
device,butWorkstationdidnotrecognizethedevicewhenthevirtualmachine
waspoweredon,youcanstopatthispoint.
6 IfthevirtualmachinedoesnotcontainanySCSIdevices,toaddagenericSCSI
devicetoanewvirtualSCSIadapter,ortouseanexistingSCSIdeviceasageneric
SCSIdevice,addthefollowinglineinthe.vmxfile:
scsiZ:Y.deviceType = "scsi-passthru"
IfyouwantedtouseanexistingSCSIdeviceasagenericSCSIdevice,youcanstop
atthispoint.
7 IfthevirtualmachinedoesnotcontainanySCSIdevices,ortoaddagenericSCSI
devicetoanewvirtualSCSIadapter,addthefollowinglinesinthe.vmxfile,where
ZistheSCSIbusnumberthedeviceusesinthevirtualmachine:
scsiZ:Y.present = "true"
scsiZ.present = "true"
Ifthevirtualmachinesettingseditorstilldoesnotincludethisdeviceinthelistof
availableSCSIdevicesforthisvirtualmachine,contactVMwaretechnicalsupport.
Use Four-Way Virtual Symmetric Multiprocessing
WithVirtualSMP,youcanassignprocessorsandcoresperprocessortoavirtual
machineonanyhostmachinethathasatleasttwologicalprocessors.
Thefollowingareallconsideredtohavetwoormorelogicalprocessors:
AmultiprocessorhostwithtwoormorephysicalCPUs
AsingleprocessorhostwithamulticoreCPU
Asingleprocessorhostwithhyperthreadingenabled
Youcanpoweronandrunmultipledualprocessorvirtualmachinesconcurrently.
Thenumberofprocessorsforagivenvirtualmachineappearsinthesummaryviewof
thevirtualmachine.
NOTEOnhyperthreadeduniprocessorhosts,performanceofvirtualmachineswith
VirtualSMPmightbebelownormal.Evenonmultiprocessorhosts,performanceis
affectedifyouovercommitbyrunningmultipleworkloadsthatrequiremoretotalCPU
resourcesthanarephysicallyavailable.
VMware, Inc. 367
Chapter 16 Connecting Devices
To use four-way virtual symmetric multiprocessing
Dooneofthefollowing:
Foranewvirtualmachine,choosethecustomconfigurationintheNewVirtual
Machinewizard.OntheProcessorConfigurationpage,specifythenumber.
Foranexistingvirtualmachine,chooseVM>SettingsandontheHardwaretab,
selectProcessorsandspecifythenumber.
Use a Virtual Machine That Originally Had More Than Four
Virtual Processors
YoucanuseWorkstation7.0,runningonamultiprocessorhostmachine,toopena
virtualmachinecreatedinESXServerthathasoneormorevirtualprocessors.You
cannotuseWorkstation,however,topoweronavirtualmachinethathasmorethan
fourvirtualprocessorsassigned,evenifmoreprocessorswereassignedwhenthe
virtualmachinewascreatedinESXServer.
Youcanseethenumberofprocessorsinthevirtualmachinessummaryvieworby
usingthevirtualmachinesettingseditor.Touseavirtualmachinethathasmorethan
fourvirtualprocessorsassigned,youmustchangethenumberofprocessorsbefore
poweringiton.
To use a virtual machine that originally had more than four virtual processors
1 Selectthevirtualmachine.
2 Makesurethevirtualmachineispoweredoff.
3 ChooseVM>Settings.
4 OntheHardwaretab,selectProcessors,andnotethatNumberofProcessorsisset
toOther(x),wherexisthenumberofprocessorsoriginallyassignedinESXServer.
Workstationpreservesthisoriginalconfigurationsettingforthenumberof
processors,eventhoughtwoisthemaximumnumberofprocessorssupported.
Afteryoucommitachangetothissetting,theoriginalsettingforthenumberof
processorsisdiscardedandnolongerappearsasanoptioninthevirtualmachine
settingseditor.
5 ChangetheNumberofprocessorssettingtoOne,Two,orFourandclickOK.
Workstation Users Manual
368 VMware, Inc.
VMware, Inc. 369
17
Youcanuseconfigurationoptionsfortasks,suchasrestrictingtheoperationsausercan
performwithavirtualmachineorsimplifyingtheuserinterfaceforinexperienced
users.Inaclassroom,forexample,youcanensurethatvirtualmachineconfigurations
remainconsistentfromoneclasssessiontothenext.
Thischapterincludesthefollowingtopics:
RestrictingtheUserInterfaceonpage 369
MakingaVirtualMachineAlwaysUseFullScreenSwitchModeonpage 372
GuestACPIS1Sleeponpage 380
Restricting the User Interface
Toenabletherestricteduserinterface,ausermusthavesufficientprivilegestoeditthe
virtualmachinesconfigurationfileandtosetfilepermissions.Therestricteduser
interfaceaffectsonlythespecificvirtualmachinesforwhichthesettingiscreated.
Thefollowingchangesoccurwhenyouenabletherestricteduserinterface:
Thetoolbarisalwayshidden.
AllfunctionsontheVM>Powermenu,Snapshotmenu,Replaymenu,and
RemovableDevicesmenuaredisabled.
Noaccessisprovidedtothevirtualmachinesettingseditor(VM>Settings).
Special-Purpose
Configuration Options for
Windows Hosts 17
Workstation Users Manual
370 VMware, Inc.
Theusercannotchangevirtualnetworkingsettings(Edit>VirtualNetwork
Editor).
Theuserstartsthevirtualmachinebydoubleclickingtheconfiguration(.vmx)file
oradesktopshortcut.Theusershutsdownbyclosingthevirtualmachine(File>
Exit).ItisalsopossibletolaunchWorkstationandopenarestrictedinterface
virtualmachinefromtheFavoriteslistorFilemenu.
Enable the Restricted User Interface
Althoughtherestricteduserinterfaceprovidesnoaccesstomenuandtoolbarcontrols
forasnapshot,youcangiveuserslimitedsnapshotcontrol.Ifyousetupasnapshotfor
therestrictedvirtualmachineandsetthepoweroffoptiontoAskMe,thestandard
dialogboxappearswhenavirtualmachineshutsdownandtheusercanchoose
Just PowerOff,TakeSnapshot,orReverttoSnapshot.
To enable the restricted user interface
1 PoweroffthevirtualmachineandclosetheVMwareWorkstationwindow.
2 Openthevirtualmachinesconfigurationfile(.vmxfile)inatexteditor.
3 Addthefollowinglineanywhereinthefile:
gui.restricted = "TRUE"
4 (Optional)Setfilepermissionsontheconfigurationfiletogivenormalusersofthe
systemonlyreadaccesstothefile.
5 Createashortcuttotheconfigurationfileonthedesktopandgiveitanappropriate
name.
Restrict the User Interface and Return to a Snapshot
Youcancombinearestricteduserinterfacewithasnapshottoensurethatusersvirtual
machinesalwaysstartinthesamestate.Typically,usersrunningavirtualmachinewith
arestricteduserinterfacecanonlypoweritonandoff,andthevirtualmachineboots
whenpoweredon.Whenthevirtualmachinehasasnapshotsetandisconfiguredto
returntothatsnapshotwhenpoweredoff,theusercanonlystartandpoweroffthe
virtualmachine.Thevirtualmachinealwaysstartsfromthesnapshot.
To restrict the user interface and return to a snapshot
1 Poweronthevirtualmachineandbesureitisintheappropriatestate.
2 Createasnapshot.
SeeTakeaSnapshotonpage 209.
VMware, Inc. 371
Chapter 17 Special-Purpose Configuration Options for Windows Hosts
3 Configurethevirtualmachinetoreturntothesnapshotanytimeitispoweredoff:
ChooseVM>Settings>Options>Snapshot/ReplayandselectAfterPowering
OffandReverttoSnapshot.
4 Withthevirtualmachinepoweredoff,restricttheuserinterface,asfollows:
a ClosetheVMwareWorkstationwindow.
b Openthevirtualmachinesconfigurationfile(.vmxfile)inatexteditor.
c Addthefollowinglineanywhereinthefile.
gui.restricted = "TRUE"
5 (Optional)Setfilepermissionsontheconfigurationfiletogivenormalusersofthe
systemreadonlyaccesstothefile.
6 Createashortcuttotheconfigurationfileonthedesktopandnameit.
7 Runthisvirtualmachinebydoubleclickingtheshortcuttotheconfigurationfile.
Thevirtualmachinestartsatthesnapshot,withtheuserinterfacerestricted.Users
donothaveatoolbaroraccesstotheVM>Powermenuorthevirtualmachine
settingseditor.
8 ChooseFile>Close.
Thevirtualmachinepowersoff,andthenexttimeauserpowersiton,itreturnsto
thesnapshot.
Disable the Restricted User Interface
DisabletherestricteduserinterfacetomakeitemsintheVMmenuavailabletousers
again.
To disable the restricted user interface
1 PoweroffthevirtualmachineandclosetheVMwareWorkstationwindow.
2 Opentheconfigurationfile(.vmx)fileanddooneofthefollowing:
Setgui.restricted = "FALSE".
Removeorcommentoutthegui.restricted = "TRUE"line.
3 Savethechangestotheconfigurationfileandcloseit.
4 Startthevirtualmachinebydoubleclickingtheshortcut.
Thevirtualmachinestartsatthesnapshot,andtheinterfaceisnotrestricted.
Workstation Users Manual
372 VMware, Inc.
Making a Virtual Machine Always Use Full Screen Switch
Mode
FullscreenswitchmodeisaruntimeoptionforWorkstationonWindowshosts.When
Workstationisrunninginfullscreenswitchmode,theuserhasnoaccesstothe
Workstationuserinterface.Theusercannotcreate,reconfigure,orlaunchvirtual
machines.Asystemadministratorperformsthesefunctions.
WhenWorkstationisrunninginfullscreenswitchmode,oneormorevirtualmachines
canberunning,andyoucanusehotkeystoswitchfromonetoanother.Youcanalso
providehotkeyaccesstothehostoperatingsystem.
Specify Global Configuration Settings for Full Screen Switch
Mode
TorunWorkstationinfullscreenswitchmode,youmust,setoneormorepropertiesin
theWorkstationglobalconfigurationfile.
Theglobalconfigurationfileiscreatedwhenyouchangeanyofthedefaultsettingsin
theWorkstationpreferenceseditor(Edit>Preferences).Thefilelocationdependson
thehostoperatingsystem:
OnmostWindowshosts:
C:\Documents and Settings\All Users\Application Data\VMware\VMware
Workstation\config.ini
OnmostWindowsVistaandWindows7hosts:
c:\ProgramData\VMware\VMware Workstation\config.ini
To specify global configuration settings for full screen switch mode
1 Iftheconfig.inifiledoesnotyetexistonyourhostcomputer,chooseEdit>
Preferencesandchangeatleastoneofthesettingsinthepreferenceeditor.
2 Opentheconfig.inifilewithatexteditorandaddatleastoneofthefollowing
lines:
fullScreenSwitch.cycleHost = "TRUE"
Thissettingcausesthehostoperatingsystemtobeincludedwhenyouusea
hotkeyforcyclingthroughpoweredonvirtualmachines.SeeHotKeyfor
CyclingThroughVirtualMachinesandtheHostComputeronpage 375.
VMware, Inc. 373
Chapter 17 Special-Purpose Configuration Options for Windows Hosts
FullScreenSwitch.hostDirectKey = "<value>"
Usethissettingtodefineahotkeyforswitchingdirectlytothehostoperating
system.SeeHostOperatingSystemHotKeyonpage 376.
3 (Optional)Specifyotherfullscreenswitchmodesettingsyouwanttouse.
Tospecifyhotkeysforswitchingtoothervirtualmachinesorthehostcomputer,
first,seethefollowingsections,intheorderlisted:
VirtualKeyCodesonpage 373
OtherEntriesintheGlobalConfigurationFileonpage 376
4 Saveandclosethefile.
5 Setpermissionsonthisfilesothatotheruserscannotchangeit.
6 Openthepreferences.inifilewithatexteditorandaddthefollowinglines:
pref.fullScreen.v5 = "TRUE"
pref.autoFitFullScreen = "fitGuestToHost"
OnmostWindowshosts,thisfileislocatedin:
%USERPROFILE%\Application Data\VMware\preferences.ini
OnWindowsVistaandWindows7hosts,thisfileislocatedin:
%USERPROFILE%\AppData\Roaming\VMware\preferences.ini
Tospecifyahotkeyforswitchingtoaspecificvirtualmachine,seeVirtualMachine
HotKeyonpage 376.
Virtual Key Codes
ToconfigurehotkeysforusewhenrunningWorkstationinfullscreenswitchmode,
youmustspecifythevirtualkeycodeforeachhotkey.Virtualkeycodesuse
hexadecimalformat,whichisahexadecimalnumberprecededby0x.Forexample,to
usethevirtualkeycodeof5Aasavalue,type0x5A.
Microsoftprovidesareferencelistofvirtualkeycodes.Toaccessthisreferencelist,
enterthekeywordvirtualkeycodesontheMSDNWebsite.
Thehotkeyentriesalsoincludemodifierkeys.ThemodifierkeysareCtrl,Alt,Shift,
andWindowskeys.TheWindowskeyisthekeybetweentheCtrlandAltkeys.Youcan
alsouseacombinationofthosekeys.Table 171liststhekeycodesformodifierkeys.
Workstation Users Manual
374 VMware, Inc.
Keepthefollowinglimitationsinmindwhendefiningcyclekeysandswitchkeys:
DonotusethePausekeywiththeCtrlkey.YoucanusethePausekeywithother
modifierkeys.
IfyouusetheF12key,youmustuseoneormoremodifierkeys.Youcannotusethe
F12keyalone.
YoucannotusecombinationsthatincludeonlytheShift,Ctrl,andAltkeys.These
keyscanbeusedonlyasmodifiersincombinationwithsomeotherkey.
Whenlistingakeyplusamodifier,typethevirtualkeycodeforthekeyfollowedbya
commaandtypethevalueforthemodifierkeyorkeys.Forexample,thevalueentry
forCtrl+Shift+F1is0x70,0x6.
Table 17-1. Modifier Keys for Hot-Key Entries
Modifier Key Hexadecimal Value
Nomodifier 0x0
Alt 0x1
Ctrl 0x2
Shift 0x4
Win(Windows) 0x8
Ctrl+Alt 0x3
Alt+Shift 0x5
Ctrl+Shift 0x6
Ctrl+Alt+Shift 0x7
Win+Alt 0x9
Win+Ctrl 0xa
Win+Ctrl+Alt 0xb
Win+Shift 0xc
Win+Shift+Alt 0xd
Win+Shift+Ctrl 0xe
Win+Shift+Ctrl+Alt 0xf
VMware, Inc. 375
Chapter 17 Special-Purpose Configuration Options for Windows Hosts
Hot Key for Cycling Through Virtual Machines and the Host
Computer
Youcanspecifyahotkeyorhotkeycombinationforcyclingthroughtheavailable
virtualmachinesonahostcomputerwhenrunningWorkstationinfullscreenswitch
mode.Hotkeysbehaveinthefollowingmanner:
Eachtimeyoupressthespecifiedhotkey,thenextvirtualmachineappearsin
order.Youcanalsoincludethehostoperatingsysteminthecycle.
Ifanyparticularvirtualmachineisnotrunning,itisskipped.
Ifonlyonevirtualmachineisrunningandthehostoperatingsystemisnot
includedinthecycle,pressingthehotkeyhasnoeffect.
Thehotkeyforcyclingthroughvirtualmachinesisdefinedintheglobalconfiguration
file(config.ini).Twooptionscontrolcycling:
FullScreenSwitch.cycleKey
Thevalueofthisoptiondefinesthehotkey.Itisspecifiedas<key>,<modifier>.
Ithasnodefault.Forexample,tousethePausekeywithnomodifiertocycle
throughvirtualmachines,addthefollowinglinetotheconfig.inifile,ormodify
itsvalueiftheoptionisalreadylisted:
FullScreenSwitch.cycleKey = "0x13,0x0"
FullScreenSwitch.cycleHost
SetthisoptiontoTRUEtoincludethehostoperatingsysteminthecycle.The
defaultisFALSE.Forexample,toincludethehostoperatingsysteminthecycle,
addthefollowinglinetotheconfig.inifile,ormodifyitsvalueiftheoptionis
alreadylisted:
FullScreenSwitch.cycleHost = "TRUE"
Hot Keys for Switching Directly to Virtual Machines and the Host
Computer
Youcanspecifyahotkeyorcombinationofhotkeysforswitchingdirectlytoany
availablevirtualmachineonahostcomputerwhenrunningWorkstationinfullscreen
switchmode.Eachtimeyoupressthespecifiedhotkey,thescreendisplayswitchesto
thatofthespecifiedvirtualmachine.Youcanalsospecifyahotkeyforswitching
directlytothehostoperatingsystem.
Workstation Users Manual
376 VMware, Inc.
Virtual Machine Hot Key
Youdefinethehotkeyusedtoswitchtoavirtualmachinebyaddingalocal
configurationsettinginthevirtualmachines.vmxfile.
Usethefollowingformat:
<option> = "<value>"
Entriesintheconfigurationfilescanappearinanyorder.Thevalueofthisoption
definesthehotkey.Itisspecifiedas<key>,<modifier>.Ithasnodefault.
Forexample,touseCtrl+Shift+F1toswitchtoaparticularvirtualmachine,addthe
followinglinetothatvirtualmachines.vmxfileormodifyitsvalueiftheoptionis
alreadylisted:
FullScreenSwitch.directKey = "0x70,0x6"
Ifanyparticularvirtualmachineisnotrunning,pressingthehotkeyforthatvirtual
machinehasnoeffect.
Host Operating System Hot Key
Youdefinethehotkeyusedtoswitchtothehostoperatingsystembyaddingalineto
theglobalconfigurationfile(config.ini).Thevalueofthisoptiondefinesthehotkey.
Itisspecifiedas<key>,<modifier>.Ithasnodefault.
Forexample,touseCtrl+Shift+F9toswitchtothehostoperatingsystem,addthe
followinglinetotheconfig.inifile,ormodifyitsvalueiftheoptionisalreadylisted:
FullScreenSwitch.hostDirectKey = "0x78,0x6"
Other Entries in the Global Configuration File
Theglobalconfigurationfile(config.ini)entriesinTable 172areoptional.They
enableyoutocontrolcertainfunctionsofthevirtualmachinethatareimportantin
workenvironmentswherevirtualmachinesneedtobeisolatedfromeachotherand
fromthehostcomputer.
VMware, Inc. 377
Chapter 17 Special-Purpose Configuration Options for Windows Hosts
Using vmware-fullscreen to Run a Virtual Machine
Usethevmware-fullscreencommandtorunWorkstationinfullscreenswitchmode
andtostartandstopvirtualmachinesonauserscomputer.Thecommandcanpass
certaininformationtothevirtualmachinewhenitstarts.
Asadministrator,youmustdecidehowtoissuethecommand.Forexample,youcan
useacustomapplicationorscriptrunningonthehostoperatingsystemtoissueoneor
morevmware-fullscreencommands.Oryoucanincludethecommandtostarta
virtualmachineinashortcutinthehostoperatingsystemsstartupgroup,sothevirtual
machinestartswhentheuserlogsintothehostcomputer.
Table 17-2. Optional Global Configuration File Entries
Option Description
Default
Setting
Isolation.tools.copy.disable Thisoptiondetermineswhetherdatain
onevirtualmachineorthehostoperating
systemcanbecopiedtoanothervirtual
machineortothehostoperatingsystem.
TRUE
Isolation.tools.paste.disable Thisoptiondetermineswhetherdata
copiedinonevirtualmachineorthehost
operatingsystemcanbepastedinto
anothervirtualmachineorthehost
operatingsystem.
TRUE
Isolation.tools.HGFS.disable WhensettoTRUE,thisoptionspecifiesthat
foldersharingisdisabledbydefault.
Foldersharingisonemethodofsharing
filesamongvirtualmachinesandwiththe
hostcomputer.
TRUE
mks.CtlAltDel.ignore SetthispropertytoTRUEsothatdialog
boxesusuallygeneratedbyMicrosoft
WindowsSecureAttentionSequence(SAS)
arenotdisplayedbutarepassedontothe
guestiftheguesthaskeyboardfocus.
mks.fullscreen.allScreenSaver SetthispropertytoTRUEtoallowthehost
operatingsystemtorunitsscreensaver
whenitdeterminesthatthemachineis
idle.
msg.autoAnswer SetthispropertytoTRUEtosuppressany
Workstationdialogboxesthatotherwise
appear.Thedefaultanswerisselectedin
thesedialogboxes.
Workstation Users Manual
378 VMware, Inc.
Issuethevmware-fullscreencommandonceforeachvirtualmachineyouwantto
startorstop.Thesyntaxforthiscommandis:
C:\Program Files\VMware\VMware Workstation\vmware-fullscreen.exe [-poweron
<parameters> | -poweroff <parameters> | -exit | -switchto
<paramters> | -query | -listvms]
YoucantypethesecommandsattheWindowscommandpromptorcreatescriptsto
runmultiplecommands.
Table 173describestheavailableoptionsandparameters.
Table 17-3. Command-Line Options for the vmware-fullscreen Program
Option Parameters Description
-poweron
or
-fullscreen
"<config-file>" Powersonthevirtualmachine,where"<config-file>"
isrequiredandspecifiesthefullpathtothevirtual
machinesconfiguration(.vmx)file.
With-poweron,theuserseesnoimmediateindication
whenthevirtualmachinestarts,buttheusercanswitchto
thevirtualmachinewithitsdirectswitchkeyorwiththe
cyclekey.
With-fullscreen,thevirtualmachinegoestofullscreen
modeimmediatelyinsteadofrunninginvisiblyuntilthe
userswitchestoitlater.
-s <variable>=<value> (Optional)Setsthespecifiedvariabletothespecified
value.Anyvariablenamesandvaluesthatarevalidinthe
configurationfilecanbespecifiedonthecommandline
withthe-sswitch.
-name=<alias> (Optional)Givesanaliastothevirtualmachine.Youcan
theusethataliasin-switchtoand-poweroff
commands.
-directkey=<keyspec> (Optional)Specifiesthevirtualmachinesdirectswitch
key.Ifadirectswitchkeyisspecifiedinthevirtual
machinesconfigurationfile,thecommandlineoverrides
theconfigurationfile.Thefollowingisanexampleofthis
switch:
directkey=0x70,0x6
-poweroff "<config-file>"
or
<alias>
Powersoffthespecifiedvirtualmachine.Tospecifythe
virtualmachine,useeitherthefullpathtothevirtual
machinesconfiguration(.vmx)fileorthealiasifyou
definedonebyusingthe-nameswitch.
-exit PowersoffallvirtualmachinesandexitsWorkstation.
VMware, Inc. 379
Chapter 17 Special-Purpose Configuration Options for Windows Hosts
vmware-fullscreen Log File
Thevmware-fullscreenprogramwritestoalogfile.Thislogfilerecordserrors
reportedbyvmware-fullscreenasitstarts,stops,andpassesothercommandsto
Workstation.Itisseparatefromthevmware.logfile,whichstoresinformationonthe
runningvirtualmachines.
Thenameofthevmware-fullscreenlogfileisvmware-<username>-<pid>.log.By
default,thevmware-fullscreenlogfileisinthetempdirectoryfortheuserloggedin
tothehostcomputer.ThislocationmightbespecifiedintheTEMPenvironment
variable.Thedefaultlocationis:
OnWindowsXPhosts:
C:\Documents and Settings\<username>\Local Settings\Temp
OnWindowsVistaandWindows7hosts:
C:\Users\<username>\AppData\Local\Temp\
Theadministratorcanspecifyadifferentlocationforthislogfilebyaddingthe
followinglinetotheWorkstationglobalconfigurationfile(config.ini):
fullScreenSwitch.log.filename="<path>"
-switchto Dependingontheparameteryouuse,switchestothe
specifiedvirtualmachine,hostoperatingsystem,ornext
machine(virtualmachineorhost)inthecyclingorder.A
virtualmachinemustbepoweredonbeforeyoucan
switchtoit.
"<config-file>" Switchestothevirtualmachine,where
"<config-file>"specifiesthefullpathtothevirtual
machinesconfiguration(.vmx)file.
<alias> Switchestothevirtualmachine,where<alias>specifies
thealiasyoudefinedbyusingthe-nameswitch.
host Switchestothehostoperatingsystem.
next -qu Switchestothenextmachineinthecyclingorder.
-query DetermineswhetherWorkstationisrunninginfullscreen
switchmode.Ifso,alsodisplaystheprocessIDand
windowhandle.
-listvms Listsallvirtualmachinesthatarecurrentlypoweredon.
Thelistisaddedtothevmware-fullscreenlogfile.
Table 17-3. Command-Line Options for the vmware-fullscreen Program (Continued)
Option Parameters Description
Workstation Users Manual
380 VMware, Inc.
VMwarerecommendsusingafullpath.Ifyouusearelativepath,thelocationisrelative
tothedirectorythatisactivewhenthevmware-fullscreencommandisissuedforthe
firsttimeafterthehostcomputerreboots.
Guest ACPI S1 Sleep
WorkstationprovidesexperimentalsupportforguestoperatingsystemACPIS1sleep.
Notallguestoperatingsystemssupportthisfeature.Commonguestoperatingsystem
interfacesforenteringstandbyaresupported.
Bydefault,ACPIS1sleepisimplementedinWorkstationassuspend.Youcanusethe
WorkstationResumebuttontowaketheguest.
Withthefollowingentryintheconfiguration(.vmx)fileforavirtualmachine,ACPIS1
sleepisinsteadimplementedaspoweronsuspend:
chipset.onlineStandby = TRUE
Theguestoperatingsystemisnotfullypowereddown.Youcanawakenthevirtual
machineinthefollowingways:
Keyboardinput
Mouseinput
ProgrammingtheCMOSexternaltimer
Thisfeaturecanbeusefulfortestanddevelopmentscenarios.
VMware, Inc. 381
18
ThischapterprovidesanoverviewofhowtouseWorkstationtocreateanddeploy
virtualmachinesforendusers.ACE(AssuredComputingEnvironment)featuresare
availableonlyintheversionofWorkstationthatrunsonWindowshosts.Thischapter
includesthefollowingtopics:
BenefitsofUsingVMwareACEonpage 381
NetworkandDiskSpaceRequirementsfortheAdministrativeWorkstationon
page 384
OverviewofCreatingandDeployingACEPackagesonpage 385
OverviewoftheACEUserInterfaceonpage 386
TroubleshootingUsersProblemsonpage 387
Benefits of Using VMware ACE
VMwareACEisasoftwaresolutionthatenablesorganizationstodeployandmanage
secure,platformindependentvirtualmachinesthatenduserscanuseontheirwork
PC,personalcomputer,orevenaportableUSBmediadevice.Enduserscanbeeither
connectedtoordisconnectedfromtheenterprisenetwork.
VMwareACEenablessafeaccesstoenterpriseresourcesfromassuredcomputing
environments.TheseisolatedPCenvironmentsrunontopofexistingPCs.Theassured
computingenvironment(ACE)containsanoperatingsystem,enterpriseapplications,
andpreconfiguredsecuritysettings.
Learning the Basics of
VMware ACE 18
Workstation Users Manual
382 VMware, Inc.
Withvirtualrightsmanagement,builtincopyprotectioncontrols,andautomatic
encryption,VMwareACEhelpspreventtheft,tampering,andunauthorizedcopyingof
applications,data,systemsettings,andfiles.Administratorscanprotectdataand
ensurecompliancewithITpolicies,includingsoftwarelifecyclemanagementand
accesstodataandapplications.
Key Features of VMware ACE
ThekeyfeaturesofVMwareACEincludemanageability,security,andusability.
Manageability
CreatestandardizedhardwareindependentPCenvironmentsanddeploythemto
anyPCthroughouttheextendedenterprise.
Controlthevirtualmachineslifecycle,securitysettings,networksettings,system
configuration,anduserinterfacecapabilities.
Trackinstancesthroughtheuserinterface.Viewandmanagetheactivation,
expiration,andotherpoliciesofinstancesmanagedwithACEManagement
Server.
Security
Rulesbasednetworkaccessletsyouidentifyandquarantineunauthorizedor
outofdateACEinstances.EnableaccesstothenetworkoncetheACEinstance
complieswithITpolicies.
TamperresistantcomputingenvironmentprotectstheentireACEinstanceand
package,includingdataandsystemconfiguration,withseamlessencryption.
Copyprotectedcomputingenvironmentpreventsusersfromcopyingenterprise
information.
RolesbasedSSLcommunicationprovidesasecureprotocolbetweentheACE
ManagementServerandclient.
ResourcesigningletsyouspecifythatACEResourcefilesbeprotectedfromall
tampering.
VMware, Inc. 383
Chapter 18 Learning the Basics of VMware ACE
Usability
Thecustomizableinterfaceletsyoucustomizethebehaviorandlookandfeelfor
users.
PocketACEletsyoustoreacomputingenvironmentonportabledevicessuchas
USBkeys(flashmemorydrives),AppleiPodmobiledigitaldevices,andportable
harddrives.Youcanplugtheportabledeviceintoanyx86PC.
Theflexiblecomputingenvironmentletsusersreverttoapreviousstatewithin
secondsandcanworkwhenconnectedordisconnectedfromtheenterprise
network.
VMware ACE Terminology
ThefollowingtermsareusedfrequentlyinthechaptersdescribingVMwareACE
features:
ACEenabledvirtualmachineAvirtualmachinetemplatethattheACE
administratorcreates.TheACEenabledvirtualmachinecanbeconfiguredwith
variouspolicies,devices,anddeploymentsettingsandthenusedasthebasisfor
creatinganynumberofpackagestobesenttoACEusers.
ACEinstanceThevirtualmachinethatACEadministratorscreate,associatewith
policies,andactivateonenduserscomputers.AnACEinstancethatismanaged
byACEManagementServerisamanagedACEinstance.AnACEinstancethatis
notmanagedbyACEManagementServerisastandaloneACEinstance.
(Optional)ACEManagementServerTheACEManagementServerenablesyou
tomanageACEinstances,topublishpolicychangestodynamicallyupdatethose
instances,andtotestanddeploypackagesmoreeasily.ACEManagementServer
addsnewintegrationwithActiveDirectorysetupsandprovidessecureActive
DirectoryandLDAPintegration,withrolebasedsecureSSLcommunication.
Formoreinformation,seetheVMwareACEManagementServerAdministrators
Guide.
PocketACEEnablesanadministratortobundleanddeployanACEinstance
ontoaUSBportablemediadevice,includingUSBflashdrives,AppleiPodmobile
digitaldevices,andportableharddrives.
Workstation Users Manual
384 VMware, Inc.
Network and Disk Space Requirements for the
Administrative Workstation
Asanadministrator,youuseWorkstationtocreateandmanagethevirtualmachines
youdistributetoendusers.Followingisalistofprerequisitesforthemachinethathosts
Workstation:
Ifyourcompanyalreadyhasalibraryofstandardvirtualmachines,youneed
networkaccesstothatlibraryfromyourhostcomputer.
Ifyouarecreatingvirtualmachines,youneedaccesstoinstallersfortheguest
operatingsystemsandapplicationsoftwarethatyouplantoinstallinthevirtual
machines.
YoucaninstalloperatingsystemsfromCDs,DVDs,ISOimagefilesonalocaldrive
oronthenetwork,oraPXEserver.YoucaninstallapplicationsoftwarefromCDs,
DVDs,orinstallersonalocaldriveoronthenetwork.
Youneedtoprovideadequatediskspaceforvirtualmachinefilesandpackage
files.Thefilesforeachvirtualmachinecanbeaslargeasseveralgigabytes.The
packagefilescanalsobelarge.Thedefaultlocationforthepackagefilesisthe
Packages folderinsidethevirtualmachinesfolder.
Workstationneedsasubstantialamountoftemporaryworkingspacewhenit
createsapackage.Thetotaldiskspacerequiredisabouttwicethecombinedsizes
ofallthecomponentsofthepackage.TheNewPackagewizarddisplays
informationabouttheamountofspaceneededandthelocationswherethespace
isneeded.
WorkstationmustbeinstalledonaWindowshost.
VMware, Inc. 385
Chapter 18 Learning the Basics of VMware ACE
Overview of Creating and Deploying ACE Packages
Thefollowingisanoverviewofthetasksyoumustperformtocreate,deploy,and
manageACEinstances.
1 WithWorkstationonaWindowshost,createorcloneavirtualmachinethatmeets
therequirementsofyourendusers.
Theproceduresarethesameasforanyvirtualmachine.Forthenetworktype,
VMwarerecommendsusingNetworkAddressTranslation(NAT)orbridged
networkingwithanIPaddressaDHCPserverprovides.
2 Makesurethevirtualmachineispoweredoff,displaythesummaryviewforthe
virtualmachine,andclickEnableACEFeaturesintheCommandslist.
ACEspecificcommandsareaddedtotheCommandslistinthesummaryview,
andtheVM>ACEmenuisenabled.
3 UsetheVM>Settingsmenutoconfigurethevirtualmachine.
(Optional)UsetheACEOptionssettingspaneltoassociatethevirtualmachine
withanACEManagementServer.Youcanthenusetheservertoactivateandtrack
instancesandmakechangestopolicies,instancecustomizationdata,andother
dataforeachACEinstance.
BecausemanagedACEinstancescheckperiodicallyforupdates,theupdatesare
dynamic.Youdonotneedtocreateanddeploynewupdatepackages.Seethe
VMwareACEManagementServerAdministratorsGuide.
4 Installaguestoperatingsystem,VMwareTools,andothersoftwareinthevirtual
machine.
Theproceduresarethesameasforanyvirtualmachine.Forguestoperating
systemsupport,knownissues,andinstallationinstructions,seetheonlineVMware
CompatibilityGuide.GototheVMwareWebsiteandselectResources>
CompatibilityGuides,andclicktheViewtheGuest/HostOStabontheVMware
CompatibilityGuideWebsitelink
5 SetpoliciesfortheACEinstance.
PoliciescontrolsuchthingsaswhatnetworkaccessendusershavefromACE
instancesandwhatdevicesontheirhostcomputerstheymayuseintheinstances.
SeeChapter 19,SettingandUsingPoliciesandCustomizingVMwarePlayer,on
page 389.
Workstation Users Manual
386 VMware, Inc.
6 SpecifydeploymentsettingsfortheACEinstance.
Deploymentsettingscontrolsuchthingsasencryption,packagelifetime,and
securityIDs.SeeChapter 20,DeployingACEPackages,onpage 435.
7 Createpackagestodeploytoendusers.
Workstationguidesyouthroughtheprocess.SeeCreatingaPackageon
page 449orChapter 21,PocketACE,onpage 457.
8 Distributepackagestoendusers.
DistributethepackagesonCD,DVD,orportablemedia,ormakethemavailable
onanetwork.SeeDeployPackagesonpage 456orDeployingtheACEPackage
onaPortableDeviceonpage 461.
9 InstallACEinstancesonendusersmachines.
SeeInstallingACEPackagesonpage 465orRunthePocketACEInstanceon
page 463.
YoucaninstallmultipleACEinstancesonthesamemachine.Theycanbefrom
differentvendorsandbegovernedbydifferentpolicies.Youcanalsouninstall
individualACEinstancesorWorkstationwhileleavingotherACEinstances
installed.
10 Keepusersuptodate.
Ifyouneedtoupdatetheguestoperatingsystem,updateaprogramrunning
insidetheACEinstance,orchangepoliciessetfortheACEpackage,youcancreate
anddistributeanewpackage.
Packageupdatesdonotupgradethevirtualmachineversion.Youcanuseapackage
updatetoprovideenduserswithVMwareACE2.6policies,buttheupdatepackage
doesnotupdateACEPlayerorthevirtualmachinetoversion2.6.
Overview of the ACE User Interface
Useanyofthefollowingmethodstoaccessthepolicyeditor,deploymentsettings
editor,andpackagingwizards:
SelecttheACEenabledvirtualmachineandchooseacommandfromthe
VM > ACEmenu.
InthesummaryviewfortheACEenabledvirtualmachine,clickanACErelated
commandintheCommandslist.
TheACEtabinthesummaryviewliststhecurrentsettingsforpoliciesand
deployment.
VMware, Inc. 387
Chapter 18 Learning the Basics of VMware ACE
ClickabuttonintheACEtoolbar.
RightclicktheACEenabledvirtualmachineinthesidebarandchoosean
ACErelatedcommand.
ACEManagementServerhastwointerfaces:
InWorkstation,selectanACEManagementServerinthesidebartodisplaythe
instanceview.
UsetheVMwareHelpDeskapplication.Becausethisinterfaceisbrowserbased,
youcanuseitfrommachinesthatdonothaveWorkstationinstalled.
Bothinterfacesofferthesamebasicfunctionality.Administratorscanviewandcontrol
allmanagedACEinstances.Anadvancedsearchfunctionallowsyoutolocate
instancesinthedatabasequickly.Youcancustomizetheinterfacebyaddingsearchable
customfields.SeetheVMwareACEManagementServerAdministratorsGuide.
Troubleshooting Users Problems
Endusersmightneedhelpwithlostpasswords,expiredACEinstances,or
copyprotectedACEinstancesthattheyhavemovedtoadifferentlocation.
Useoneofthefollowingmethodstofixthoseproblems:
ManagedACEinstancesUseACEManagementServer.SeetheVMwareACE
ManagementServerAdministratorsGuide.
StandaloneACEinstancesUsethevmware-acetoolcommandlineprogramto
fixthoseproblemsdirectlyontheusersmachines.SeeUsingthevmwareacetool
CommandLineToolonpage 479.
Youcanalsousethehotfixfeaturetorespondtotheseproblems.SeeSetting
HotFixPoliciesforStandaloneACEInstancesonpage 421andRespondtoHot
FixRequestsonpage 481.
YoumightfinditusefultomodifytheconfigurationofanACEinstanceonan
enduserscomputer.Administratormodeenablesyoutoaccessandusethevirtual
machinesettingseditorwhenrunningtheACEinstancewithVMwarePlayeronthe
userscomputer.SeeSettingAdministratorModePoliciesonpage 419.
Workstation Users Manual
388 VMware, Inc.
VMware, Inc. 389
19
ThischapterdescribeshowtosetpoliciesforanACEenabledvirtualmachineand
customizetheVMwarePlayerinterfaceforendusers.Thischapterincludesthe
followingtopics:
BenefitsofUsingPoliciesonpage 390
SetPoliciesforACEInstancesonpage 390
SettingAccessControlPoliciesonpage 391
SettingHosttoGuestDataScriptPoliciesonpage 397
SettingExpirationPoliciesonpage 399
SettingCopyProtectionPoliciesonpage 400
SettingResourceSigningPoliciesonpage 401
SettingNetworkAccessPoliciesonpage 402
SettingRemovableDevicesPoliciesonpage 411
SettingUSBDevicePoliciesonpage 412
SettingVirtualPrinterPoliciesonpage 414
SettingRuntimePreferencesPoliciesonpage 415
SettingSnapshotPoliciesonpage 418
SettingAdministratorModePoliciesonpage 419
SettingKioskModePoliciesonpage 420
SettingHotFixPoliciesforStandaloneACEInstancesonpage 421
SettingthePolicyUpdateFrequencyforManagedACEInstancesonpage 421
ControlWhichACEInstancesRunonaHostonpage 422
WritingPlugInPolicyScriptsonpage 424
CustomizingtheVMwarePlayerInterfaceonWindowsHostsOnlyonpage 428
Setting and Using Policies
and Customizing VMware
Player 19
Workstation Users Manual
390 VMware, Inc.
Benefits of Using Policies
PoliciesgiveyoucontrolovermanyaspectsoftheACEinstancesyoudistributetoend
users.Forexample,youcansetpoliciesforthefollowingsecuritypurposes:
PermittheACEinstancetobeusedonlybycertainusersandgroupsdefinedinan
ActiveDirectorydomain.
Specifywhichnetworkresourcesendusersmayaccessfromthevirtualmachine.
Permituserstoconnectanddisconnectcertainremovabledevicesconfiguredfor
thevirtualmachine.
SetanexpirationdateforanACEinstance.
Yousetpolicieswiththepolicyeditor.Youcanchangesomeorallofthepoliciesforan
ACEinstanceatanytimebyeditingthepoliciesandcreatinganddistributinganew
packagethatcontainsonlythepolicies.
ForACEenabledvirtualmachinesthatACEManagementServermanages,youcan
dynamicallychangesomepoliciesanddeploythosechangestotheACEinstanceson
usersmachines.
Set Policies for ACE Instances
PolicysettingsofferseverallevelsofsecurityfordailyuseofACEinstances.For
informationabouttheencryptionaspectofsecurity,seeEditDeploymentSettingson
page 435.
Beforeyoucanusethepolicyeditoronavirtualmachine,youmustenableACE
featuresforthatvirtualmachine.SeeOverviewofCreatingandDeployingACE
Packagesonpage 385.
To set policies for ACE instances
1 SelecttheACEenabledvirtualmachineandchooseVM>ACE>Policies.
2 Inthepolicyeditor,selectaniteminthePolicylist.
3 CompletethesettingspanelforthatpolicyandeitherclickOKorselectanother
policytoedit.
Forassistancewiththefieldsonasettingspanel,clickHelp.
VMware, Inc. 391
Chapter 19 Setting and Using Policies and Customizing VMware Player
Setting Access Control Policies
ActivationandauthenticationpoliciescontrolaccesstoinstalledACEpackagesandthe
instancescreatedfromthosepackages.Theactivationpolicyspecifieswhocanaccess
aninstalledACEpackageandturnitintoanACEinstance.Theauthenticationpolicy
specifieswhocanrunanACEinstance.
Thesettingsyouchooseforthesepoliciesdeterminethedefaultsettingsforpackage
andencryptionpolicies,whichprotecttheACEpackagesandfilesintransit.See
EncryptionSettingsonpage 436.
Thesettingsforthesepoliciesandhowtheyareimplementedvarydependingonhow
yourACEinstancesaremanagedand(optionally)tracked.Thepossiblemanagement
setupsare:
Server,withActiveDirectoryACEinstancesaremanagedbyanACE
ManagementServer,andtheserverisintegratedwithActiveDirectory.
AnendusermustenterActiveDirectoryusercredentialseachtimetheACE
instanceisrun.Onlytheuserwhoactivatestheinstancecanauthenticate(run)the
instance.TheactivationstepisperformedwheneveranACEpackageisinstalled.
Server,noActiveDirectoryACEinstancesaremanagedbyanACE
ManagementServer,andtheserverisnotintegratedwithActiveDirectory.
Theadministratorchooseswhethertheendusermustenterapasswordtoactivate
theACEinstanceandrunit.
StandaloneACEinstancesarestandalone,whichmeanstheyarenotmanaged
byaserver.
Theadministratorchooseswhethertheendusermustenterapasswordtoactivate
theACEinstanceandrunit.
IfyouuseACEManagementServer,theserveralsoverifiesthefollowingitemsbefore
theinstanceisallowedtorun:
Therevocationflagisnotsetandtheinstanceisnotblockedfromrunningbecause
ofanypolicyerrors.
Theexpirationdatesetfortheinstance,ifany,hasnotbeenreached.SeeSetting
ExpirationPoliciesonpage 399.
Workstation Users Manual
392 VMware, Inc.
Create or Edit an Access Control Policy
AfteryouenableACEfeaturesforavirtualmachine,youcancreateapolicytocontrol
whichenduserscanaccessaninstalledACEpackageandturnitintoanACEinstance.
ThispolicyalsocontrolswhichuserscanpoweronanACEinstance.
To create or edit an access control policy
1 SelecttheACEenabledvirtualmachineandchooseVM>ACE>Policies.
2 Inthepolicyeditor,selectAccessControlandcompletethefieldsinthesettings
panel.
3 ClickOK.
4 VerifythatthenewsettingsappearcorrectlyontheACEtabinthevirtual
machinessummaryview.
Ifyouchangeanactivationsetting,thepolicytakeseffectwhenanewinstance
fromthispackageisinstalledandactivated.Youcanalsoeditanimported
keywordlist.
5 (Optional)Tochangetheauthenticationsettingfromonetypetoanother,createa
policyupdatepackageanddistributeittotheuser.
Activation Settings
UseactivationsettingstocontrolwhichuserscanactivateanACEinstanceafteritis
installed.Theactivationdateisusedfortheexpirationpolicy.
IfyouuseanACEManagementServerwithActiveDirectory,thecontrolsinthe
ActivationsectionenableyoutoopentheActiveDirectoryUsersandGroupsdialog
box.ThemachineonwhichWorkstationrunsmustbeinthesamedomainforwhich
theACEManagementServerisconfigured.Userlistchangesareeffectiveatthenext
startupoftheinstance.
IfyoudonotuseActiveDirectoryorifyouarecreatingstandaloneACEinstances,the
settingspanelincludesthefollowingoptionsforactivationpasswordsorkeys:
NoneNopasswordorkeyisrequired.Anyusercanactivatethisinstance.
PasswordTheusermustenterthepasswordthattheadministratorusesto
activatethisACEinstance.Youmustprovidetheuserwiththepasswordthrough
emailorothermeans.
ForstandaloneACEenabledvirtualmachines,yousetthepasswordduringthe
packagingprocess.
VMware, Inc. 393
Chapter 19 Setting and Using Policies and Customizing VMware Player
ActivationkeyThisoptionisavailableifyouuseACEManagementServer
withoutActiveDirectoryintegration.Youspecifyoneormorekeysandtheend
usermustenterakeythatisinthatlist.
Activationkeysareserialnumbers(freeformstrings)thatcanbetrackedasused
orunusedbytheserver.Youcanenterthekeysorimportthemfromatextfile.
Toimportkeys,youneedatextfilethatcontainsthelistofactivationtokens.Each
tokenisonelineinthefile.Blanklinesareignored.
ForanACEenabledvirtualmachine,Allowmultipleactivationsperkeyis
selectedbydefault.TorestrictallowingmultipleactivationofanACEenabled
virtualmachineperkey,deselectthisoption.
Authentication Settings
Theauthenticationstepisperformedwhenevertheuserrunstheinstance,unless
AuthenticationissettoNone.
IfyouuseACEManagementServerwithActiveDirectory,thecontrolsinthe
AuthenticationsectionenableyoutoopentheActiveDirectoryUsersandGroups
dialogbox.ThemachineonwhichWorkstationrunsmustbeinthesamedomainthat
whichACEManagementServerisconfiguredfor.
IfyoudonotuseActiveDirectoryorifyouarecreatingstandaloneACEinstances,the
settingspanelincludesthefollowingoptionsforauthenticationcontrol:
NoneNopasswordisrequired.Anyusercanrunthisinstanceafteritis
activated.
UserspecifiedpasswordTheinstancedoesnotrununtiltheuserentersthe
correctpassword.Eachusermustsetapasswordduringactivation,thefirsttime
theinstanceispoweredon.
Youcancreatepasswordpoliciestocontrolsuchthingsastheminimumnumber
ofcharacters,typesofcharacters,andnumberofpasswordattemptsbeforethe
userislockedoutforaspecifiedamountoftime.
ScriptAcustomauthenticationscriptisruntodeterminewhocanusethe
instance.SeeUsinganAuthenticationScriptonpage 394.
AuthenticateagainwhenhostresumesfromsuspendstateEnablesordisables
authenticationforACEinstancesifthehostisresumedfromasuspendedstate.
ThisoptionisavailableforstandaloneACEinstance,managedACEinstance
withoutActivedirectory,andmanagedACEinstancewithActivedirectory.
Workstation Users Manual
394 VMware, Inc.
Using an Authentication Script
Youcancreateacustomauthenticationscriptthatrunsontheenduserscomputerto
determinewhocanusetheinstance.
Torequirethattheusersignsthescriptbeforedeploymenttopreventtampering,seta
resourcesigningpolicy.SeeSettingResourceSigningPoliciesonpage 401.
Forinstructionsoncreatinganddeployingthescript,seeSpecifyaScriptanda
CommandtoRunItonpage 398.
Include a Power-On and Power-Off Script in the Package
YoucanprovideascriptthatrunswhenanACEinstancepowersonthatdetermines
whethertheACEinstancecanberun.YoucanprovideascriptthatrunswhenanACE
instancepowersofftoresetanychangesmadetothehostfromapoweronscript,reset
authenticationsettings,orperformotherproceduresastheinstancepowersoff.
Torequirethattheusersignsthescriptbeforedeploymenttopreventtampering,seta
resourcesigningpolicy.SeeSettingResourceSigningPoliciesonpage 401.
Thepoweronorpoweroffscriptprovidesacustomizablewayofcontrollingaccessto
anACEinstanceinadditiontotheauthenticationpolicy.
To include a power-on and power-off script in the package
1 CreatethescriptandsaveitintheACE Resourcesfolder.
2 Ontheaccesscontrolpolicypage,selectScriptandclickPoweron/offscripts.
3 Selectoneorbothcheckboxesforthescriptsyouwanttorun.
4 ClickSettospecifythepathtothescriptandenterthecommandtorunthescript.
5 Ifyouareenablingapoweronorpoweroffscriptafteryoudeployedpackages,
provideanupdatepackageoracustompackagefortheACE Resourcesdirectory.
Whenthescriptrunsontheuserssystem,thescriptprintsTRUEforpoweronor
FALSEforpoweroff.Itmustalsoconformtostandardscriptexitcoderules.The
followingisanexampleofapoweronscript:
# VMware Sample Script
#
# Sample script for ACE power-on hook
#
# Description:
# This sample script implements a power-on hook for ACE. This can be used
# in addition to authentication to control the circumstances under which an
# ACE is allowed to run.
VMware, Inc. 395
Chapter 19 Setting and Using Policies and Customizing VMware Player
#
# This script assumes that the username is defined in the environment
# variable TEST_USERNAME (a ficticious environment variable used for this
# sample) and returns TRUE if the user is allowed to run, and FALSE
# otherwise.
#
# Input to script:
# None.
#
# Returns:
# TRUE if username is on white list.
# FALSE if username is not on white list or is undefined.
#
# Expected output:
# One of the strings "TRUE" or "FALSE"
#
my @white_list = ("alan", "bob", "mary", "sonia", "chris");
my $username = $ENV{TEST_USERNAME};
if (! defined $username) {
print "FALSE";
exit(0);
}
my @grepNames = grep(/$username/, @white_list);
if (@grepNames == 1) {
print "TRUE";
exit(0);
}
print "FALSE";
exit(0);
Scriptscanbeinanylanguage.Forexample,youcanusea.batfileonWindows
operatingsystemsorperlorshonLinuxoperatingsystems.Ascriptprovides
WorkstationwithacommandlineexecutablefileorascriptfileintheACE Resources
directory.Theguidelinesascriptmustfollowdependonwhichpolicythescriptis
implementing.
Thescriptmustexitwitha0(zero)valuetobeconsideredasuccess.Anyotheroutput
resultsinfailure.Uponsuccess,thestdoutoutputofthescriptisexamined.Foragiven
policy,thisshouldbeaspecificvaluesuchasTRUEorFALSE.Forapoweronscript,
outputshouldbeTRUEorFALSE.Theauthenticationscriptoutputisusedasa
password.Thehosttoguestdatascriptisastringinaparticularformatsuchas
guestinfo.var1="value1"\nguestinof.var2="value2".
Workstation Users Manual
396 VMware, Inc.
Set a Recovery Key for Encrypted ACE Instances
YoucanspecifythekeytobeusedforaccesstoencryptedACEinstances.Thiskey
enablesyoutoresetthepasswordforadeployedACEinstance,activateanexpired
instance,andrunacopyprotectedinstance.
To set a recovery key for encrypted ACE instances
1 Ontheaccesscontrolpolicypage,clickRecoverykey.
2 IntheRecoveryKeydialogbox,selectUserecoverykey.
3 Dooneofthefollowing:
TouseanexistingPEMformatkeypair,clickBrowseforExistingKeyand
navigatetothepublickeyofthepairtouse.
TocreateaPEMformatkeypair,clickCreateNewRecoveryKeyand
completethedialogboxthatappears.
4 ClickOKtogeneratethekeys.
Afterseveralseconds,thenewlygeneratedpublickeyislistedinthefieldonthe
RecoveryKeytab.Thetwopartsofthekeyarestoredinthelocationyouindicated,
withthenamesyouspecifiedfollowedbytheextensions.pubforthepublickey
and.privfortheprivatekey.
5 Recordtheprivatekeypasswordandlocationoftheprivatekeyfilesothatyoucan
supplyitifyouneedtoresetapassword.
Set Activation Limit
TheactivationlimitisthemaximumnumberofACEinstancesthatcanbeactivated
fromthespecifiedACEenabledvirtualmachine.Thisoptionisavailableifyouuse
ACEManagementServer.
To set an activation limit
1 Ontheaccesscontrolpolicypage,underActivationlimit,inTotalnumberof
activations,choosehowmanyinstancescanbeactivatedfromthisACEenabled
virtualmachine.
Youcanusethedropdownmenuortypeinanumber.
2 SelectAllowmultipleactivationperusertoallowusersmultipleactivationofthe
ACEenabledvirtualmachine.
ThisoptionisavailableforanACEinstancemanagedbyACEManagementServer
withActiveDirectory.
VMware, Inc. 397
Chapter 19 Setting and Using Policies and Customizing VMware Player
Active Directory Password Change Proxying
YoucanprovideadditionalsecurityforyourACEinstancesbyintegratingwithActive
Directory.
Youcanspecifypasswordexpirationandchangerequirements,setupthedomainto
expirepasswords,andrequirepasswordchangesperiodically.Thesesettingsarein
additiontoACEaccesscontrolpolicysettings.
IncasesinwhichActiveDirectoryusersneedtochangetheirpasswords,youcan
configureACEManagementServerasanActiveDirectorypasswordchangeproxy.In
thismode,ACEManagementServermakesthepasswordchangerequesttotheActive
Directorydomaincontrollerontheusersbehalf.
Setting Host to Guest Data Script Policies
YoucanprovideahosttoguestdatascriptthatrunswhentheACEinstanceispowered
on.Itpassesvaluestotheguest.Usethispolicysettingtosharespecifichost
informationwiththeguestoperatingsystemwhentheACEinstanceispoweredon.
Thescript,whichrunsonthehost,shouldoutputasetofkeyvaluepairs,which
becomeavailabletotheapplicationsthatarerunninginsidetheguest.TheVMware
Toolsserviceprovidesthisability.Thesetofacceptablekeysconsistsofmachine.id
andkeysprefixedwithguestinfo,suchasguestinfo.ipAddress.
Keyscancontainalphanumericcharactersandsymbols,includingtheperiod(.),
underscore(_),backslash(\)andpipe(|)characters.Thenewline,#,space,and
forwardslash(/)charactersareinvalidforthekey.Valuescancontainalphanumeric
characters.The#,space,andpipe(|)charactersareinvalidforthekey.Anykeyvalue
pairthatcontainsinvalidcharactersisignoredsilently.
Sincespacesareinvalid,usingaphraselikeMy Documentsaspartofafolderpathvalue
doesnotwork.Instead,enclosethephraseinquotationmarks:MyDocuments
Alternatively,youcanusetheshort8.3DOSname(inthiscase,mydoc~1),whichdoes
notcontainaspace.Toobtaintheshort8.3DOSnamesforthesubdirectoriesina
directory,enterdir /x atthecommandprompt.
Workstation Users Manual
398 VMware, Inc.
To query key values that have already been set
Dooneofthefollowing:
FromaWindowsguest,enterthefollowingatacommandprompt:
cd "C:\Program Files\VMware\VMware Tools"
vmtoolsd.exe --cmd "machine.id.get"
vmtoolsd.exe --cmd "info-get guestinfo.<key_to_query>"
vmtoolsd.exe --cmd "info-get guestinfo.script_status"
FromaLinuxguest,enterthefollowingatacommandprompt:
vmtoolsd --cmd "machine.id.get"
vmtoolsd --cmd "info-get guestinfo.<key_to_query>"
vmtoolsd --cmd "info-get guestinfo.script_status"
IftheACEenabledvirtualmachineforaninstanceisconfiguredforbothWindowsand
Linuxplatforms,youcanprovidescriptsforbothWindowsandLinuxsystems.
Changestoascriptrequirethatyoudeployanupdatepackagethatincludesthenew
script.
Forinstructionsoncreatinganddeployingthescript,seeSpecifyaScriptanda
CommandtoRunItonpage 398.
Specify a Script and a Command to Run It
Theprocedureforusingauthenticationscriptsandhostguestdatascriptsisidentical.
Usethisprocedureforthefollowingscripts:
AccesscontrolauthenticationscriptCustomauthenticationscriptthatrunson
theenduserscomputertodeterminewhocanusetheACEinstance.
IfyouplantousethescriptwithaPocketACEthatwillrunonbothWindowsand
Linuxhosts,makesurethatthescriptoutputsonbothplatformsareexactlythe
same,includingcharactersforlineendingsornewlines.
HostguestdatascriptScriptforsharinghostinformationsuchasthehost
machineIDandIPaddresswithapplicationsthatrunontheguest.
To specify a script and a command to run it
1 CreatethescriptandsaveitintheACE Resourcesdirectoryinsidethevirtual
machinesdirectory.
2 InWorkstation,selecttheACEenabledvirtualmachineandchooseVM>ACE>
Policies.
VMware, Inc. 399
Chapter 19 Setting and Using Policies and Customizing VMware Player
3 Inthepolicyeditor,dooneofthefollowing:
Ifthescriptisacustomauthenticationscript,selectAccessControlandinthe
Authenticationsection,selectScriptandclickSetScript.
Ifthescriptisforpassinghostinformationtotheguest,selectHostGuest
DataScript,selectRunahostguestscriptatpoweron,andclickSet.
4 Inthedialogboxthatappears,browsetothescriptfileandclickOpen.
IfthedeploymentplatformsettinginthedeploymentsettingseditorissettoBoth
WindowsandLinux,thisdialogboxcontainstextfieldsforbothWindowsand
Linux.
5 Typethecommandforrunningthescript.
Includethescriptfileinthecommandline,aswellasanyneededexecutablefile
forrunningthescriptandanyargumentstothescript.
6 (Optional)SelectTimeoutandtypeatimeoutintervalinseconds,incasethescript
doesnotruntocompletion.
Theuserisdeniedaccessifthetimeoutintervalelapsesbeforethescriptrunsto
completion.
7 ClickOK.
8 IfyouareenablingthisscriptforanACEenabledvirtualmachinethatyoualready
deployed,dooneofthefollowing:
Forstandaloneinstances,includethescriptintheupdatepackageyou
distributetoendusers.
Formanagedinstances,useapolicyandserverupdatepackageoracustom
packagethatincludestheACE Resourcesdirectorytoprovideenduserswith
thescript.
Setting Expiration Policies
Expirationpoliciesareuseful,forinstance,ifyouwanttopreventacontractemployee
fromusingavirtualmachinepastacertaindateorformorethanacertainnumberof
days.
Whenaninstanceexpires,thefilesremainontheuserscomputer,buttheinstance
cannotbeused.Thisway,theusercanrequestanextensiontotheexpirationdate.
Ifyouspecifyadaterange,theinstancecanbepoweredonandrunnoearlierorlater
thanthestartandenddates.YoucandeployACEinstanceswithexpireddateranges.
Workstation Users Manual
400 VMware, Inc.
Youcanalsosetandcustomizeawarningmessagethatappearseachtimeaninstance
powersonastheexpirationdateapproaches.Anexpirationmessageappearswhenthe
instanceexpiresandtheinstancecannolongerbepoweredon.
AstandaloneACEinstancehasthesameexpirationpolicyasallinstancescreatedfrom
thecorrespondingACEpackage.Thefixedexpirationdateorthefixeddaterangeis
establishedatactivationtime.Eachtimetheuserpowersontheinstance,thedateor
daterangeischecked.Expirationchecksarealsoperformedwhiletheinstanceis
running.Iftheexpirationisreached,anexpirationmessageappearsandtheinstanceis
suspended.
WithamanagedACEinstance,theexpirationpolicyworkssimilarlyasforstandalone
instances,buttheexpirationpolicyvaluecanbespecifiedforindividualinstances.A
validdaterangeforanACEenabledvirtualmachineappliestoeachofitsassociated
ACEinstancesuntilaninstanceisindividuallyconfiguredwithitsowndaterange.
Afterthatconfiguration,anychangestotheACEenabledvirtualmachinesexpiration
policydonotaffecttheinstance.Allexpirationvalues,bothforACEenabledvirtual
machinesandforallACEinstances,aredynamic.Thismeansthatafteryouchangethe
valueandpublishthepolicyupdatetoACEManagementServer,ACEinstancesgetthe
newvaluethenexttimetheycheckforpolicyupdates.
Setting Copy Protection Policies
CopyprotectionpoliciesensurethatanACEinstancerunsonlyfromthelocation
whereitwasoriginallyinstalled.IfyoucopyprotectanACEinstance,itsfilescanbe
movedorcopied,buttheinstancecannotrunfromthenewlocation.
ForstandaloneACEinstances,youcanspecifywhethercopyingandmovingare
allowed.FormanagedACEinstances,youcanspecifywhetherbothcopyingand
movingareallowedorwhetheronlymovingisallowed.Inthiscase,onlyonecopyof
theACEinstanceisallowedtorunatatime.
IftheusermovesorcopiesacopyprotectedACEinstanceandtriestorunit,anerror
messageappears.Itlistsanalphanumericstringthattheusercansendtothesystem
administratororhelpdeskassistanttogetthecopyprotectionchanged.
Formanagedinstances,youcanalsodynamicallychangethecopyprotectionsettings,
switchingthesettingssothatmovedorcopiedinstanceswillrunornotrun.Thismeans
thatafteryouchangethevalueandpublishthepolicyupdatetoACEManagement
Server,ACEinstancesgetthenewvaluethenexttimetheycheckforpolicyupdates.
VMware, Inc. 401
Chapter 19 Setting and Using Policies and Customizing VMware Player
EveryACEinstancehasacopyprotectionidentifier(CPID)thatcontainsthepathtothe
ACEinstanceonthehostfilesystem.ForstandardACEinstances,theCPIDalso
containsthesystemsBIOSID.ForPocketACEinstances,theCPIDcontainsthefile
systemID.Ifcopyprotectionison,WorkstationcomparesthecurrentCPIDwiththe
storedCPID.Iftheydonotmatch,theinstancewasmovedorcopied.
ForstandaloneACEinstances,youcansettheCPIDbyusingvmware-acetoolorby
sendinghotfixes(onWindowssystems,ifhotfixesareenabled).SeeUsingthe
vmwareacetoolCommandLineToolonpage 479andRespondtoHotFixRequests
onpage 481.
FormanagedACEinstances,theCPIDisstoredontheserverandtheadministratorcan
updateit.SeetheACEManagementServerAdministratorsGuide.
Setting Resource Signing Policies
YoucansettheresourcesigningpolicysothatanACEinstancecannotberunif
resourcefiles,suchaspolicyscriptsorcustomEULAtextfiles,aretamperedwith.
AresourceisconsideredanyfileintheACE Resourcessubdirectoryinthevirtual
machinedirectoryontheWorkstationhost.Filesthatareputinthisdirectoryonthe
endusersmachinearenotresourcesinthissenseandarenotsignaturechecked.
Signaturecheckingisperformedontheendusersmachineatpoweronandthenevery
timeascriptisrun.YoucanspecifywhethertoverifyallfilesintheACE Resources
directoryorjustthepolicyscriptsinthatdirectory.
Ifyouarecreatingapackagethathassubstantialresources,suchaslargefilesorlarge
numbersoffiles,signaturecheckingmighttakealongtime.Inthiscase,consider
verifyingscriptsonlyornotusingresourcesigning.
NOTEIfyousettheencryptionpackagesettingoptionstoNone,anyverification
specifiedintheresourcesigningpolicyisnotperformed.Theencryptionpackage
settingoverridestheresourcesigningpolicy.SeeEncryptionSettingsonpage 436.
Workstation Users Manual
402 VMware, Inc.
Setting Network Access Policies
Thenetworkaccessfeatureusesapacketfilteringfirewalltoenableyoutospecify
whichmachinesorsubnetsanACEinstanceoritshostsystemmayaccess.Thismeans
thatyoucan,forexample,configuretheinstancesothatitisallowedtoconnectonlyto
yourVPNserver,whichthencontrolsaccesstootherresources.
Youcanalsocustomizethenetworkaccesssettingstofilteronthebasisofnetwork
addresses,trafficdirection,protocol,andports.Youcansetthefollowingtypesof
networkaccessrestrictiondefinitions:
Networkzones
NetworkaccessforanACEinstanceshostmachine(alsoknownashostnetwork
access)
NetworkaccessforanACEinstancesguestoperatingsystem(alsoknownas
guestnetworkaccess)
NetworkaccesspoliciescanbedynamiciftheACEinstanceisassociatedwithanACE
ManagementServer.ThismeansthatafteryoupublishapolicyupdatetoACE
ManagementServer,ACEinstancesgetthenewpolicythenexttimetheycheckfor
policyupdates.YoucanquicklylockACEinstancesoutofallorpartofyournetwork
tohelpcombatthespreadofawormorviruswithoutdeployingupdatepackages.See
theVMwareACEManagementServerAdministratorsGuide.
Before You Begin Setting Host Policies
Usethefollowingguidelinesasyouplannetworkaccesspolicies:
AhostmachineforACEinstancescanhaveonlyonehostpolicyfile.Ifyoutryto
installanACEpackagewithahostpolicyfileonamachinethatalreadyhasa
differenthostpolicyfile,installationofthenewpackagefails.
AhostpolicyisineffectevenwhennoACEinstancesarerunning.Thepolicystarts
immediatelyafterinstallationandstartsworkingeverytimethehostsystemboots.
Anyrestrictionsonthehostsnetworkaccessalsorestrictnetworkaccessforan
ACEinstancethatusesNATnetworking,becausetheNATconnectionisaffected
byallthepoliciesyouapplytothehost.Ifyousetuprestrictedhostaccessbyusing
theACEruleseteditorandruleseditorratherthantheNetworkAccesswizard,
configuretheACEenabledvirtualmachinesvirtualNICstousebridged
networking.
IfyouaresettingupamanagedACEenabledvirtualmachine,youmustallowthe
hosttoaccessACEManagementServer,communicatingthroughTCPoverthe
appropriateportthatyouconfigure.
VMware, Inc. 403
Chapter 19 Setting and Using Policies and Customizing VMware Player
HostpoliciesdonotapplytoPocketACEinstances.Ifyouspecifyarestrictedhost
policyforanACEenabledvirtualmachineandthencreateaPocketACEpackage
withthatACEenabledvirtualmachine,thepackageiscreatedbutthehostpolicy
isnotincludedinthepackage.
Youcannotviewchangestohostpoliciesinthepreviewmode.Ifyouwanttotest
theeffectsofsuchchanges,youmustperformatestdeployment.SeeChapter 20,
DeployingACEPackages,onpage 435.
Use the Network Access Wizard to Configure Network Access
VMwarerecommendsthatyouusetheNetworkAccesswizardtoconfigurebasic
settingsandthenusethezoneeditorandruleseteditortofinetunethesettingsif
necessary.TheNetworkAccesswizardisinitiatedwhenyouclickQuickSetup.
TheNetworkAccesswizardcreatesorchangesrulesforthefollowingzones:
IfyouchoosetheDesktopConfigurationoption,thewizardcreatesanewguest
accessrulesetfortheEverywherezone.ThisrulesetrestrictsACEinstanceaccess
toyourVPNorotherspecifiednetworkhosts.
IfyouchoosetheLaptopConfigurationoption,thewizardcreatesanewinternal
zonethatrestrictsthenetworkaddressand,optionally,thedomainonwhichthe
ACEinstancecanrun.Itcanalsocreateanewhostaccessrulesetforthiszoneto
restrictaccesstotheinternalnetwork.Forexample,youcanspecifyaproxyserver.
Finally,youcanconfigurethesameremoteaccessfortheDesktopConfiguration
option.
Ifyouusethisoptionandyoudonotmodifyanyofthedefaultsettingsthatthe
wizardprovides,thehostisstillallowedtocommunicatewithDNSandDHCP
serverssothatthezonedetectionmechanismcanfunctionproperly.
To use the Network Access wizard to configure network access
1 Inthepolicyeditor,selectNetworkAccess.
2 SelectRestrictnetworkaccessoftheACEinstanceand/oritshostandclick
Quick Setup.
Workstation Users Manual
404 VMware, Inc.
3 Completethewizard.
Dependingonwhichconfigurationtypeyouchoose,anewzonemightbeadded
totheNetworkAccesssettingspanel,andnewrulesetsmightappearinthe
Host NetworkAccessandGuestNetworkAccesscolumnsinthetable.
4 (Optional)Tovieworeditthezonesorrulesetsyoucreatedwiththewizard,click
thezoneorrulesetnameinthetableontheNetworkAccesssettingspanel.
WhenyouusetheNetworkAccesswizardtocreateaninternalzone,choosingthe
LaptopConfigurationoptionenablesyoutospecifythenetworkaddress,domain,and
subdomains.IfyouwanttoalsoconfigureDNS,DHCP,WINS,orgatewayservers,use
thezoneeditor.SeeGuidelinesforSpecifyingZoneConditionsonpage 404.
Guidelines for Specifying Zone Conditions
Zoneconditionsdescribethecharacteristicsofanetworkzone.Workstationexamines
thenetworksthataredirectlyconnectedtonetworkadaptersonthehostcomputerto
seeifamatchexistsforallthecriteriaforanyadapterinanyofthezonedefinitions.
ThezoneeditorappearswhenyouclickanameintheZonescolumnoftheNetwork
Accesspolicypage.Itshowsthefollowingdetailsaboutthezone:
Youcanspecifyazonebyusinguptosixconditions:
Domain
Subnet
DNSservers
DHCPservers
Gatewayservers
WINSservers
Foramatchtooccur,allspecifiedconditionsmustbemet.
Allzoneconditionsexceptthedomainconditionallowuserstospecifyalistof
addresses.Thematchismadeifthehostsaddressmatchesanyoftheaddresslist
entriesinaspecifiedcondition.
Whenthehostconnectstoanetwork,acheckisperformedtodeterminewhetherthe
networkmatchestheconditionsforazone.Thecheckingstartswiththetopmostzone
inthetableandcontinuesdownthetableuntilamatchismadeortheEverywhereElse
zoneisreached.Whenamatchismade,thezonecheckingstopsandfilterrulesforthat
zoneareapplied.
VMware, Inc. 405
Chapter 19 Setting and Using Policies and Customizing VMware Player
Therearetradeoffsbetweenusingshorterandlongerlistsofconditions.Ifyouusea
longerlist,youminimizethechancesofafalsepositiveresultoramisidentification.
Minimizingthechanceofafalsepositiveresultoramisidentificationcanbeimportant
ifyouareprovidinganACEpackagetosomeonewhoconnectsahostcomputerto
multiplenetworksatdifferenttimes.Ifoneoftheothernetworksmatchesthe
characteristicsyoudefineinthezonedefinition,thehostandinstanceaccesspolicies
areapplied,evenifthehostisnotconnectedtoyournetwork.
Insomecases,however,usingalongerlistmightalsoincreasethelikelihoodthatauser
couldcircumventthedetectionmechanism.Forexample,suchanerrormightbemade
ifyouswitchthehosttouseastaticIPaddressinsteadofDHCPandconfigurethehost
withonlyasubsetofthecharacteristicsdefinedforyourzone,suchasonlynetwork
address,ornetworkaddressandDNSserverinformation.
Alsoconsiderthattheaddressesornamesofcertainserverscanchangeovertime.
Such changescanalsointroducedetectionissues.
Usingasmallersetofinformationinazonedescription,suchasonlythenetwork
addressandthesubnetmask,issafer.Thedisadvantageisthatitincreasesthechance
thatafalsepositiveormisidentificationcanoccur.Suchfalsepositivesareespecially
likelyifyournetworkisusingacommonnetblock,suchas10/8,172.16/12,or
192.168/16,thatisalsousedbyothernetworks.
Descriptions of the Zone Condition Settings
Eachzonedescriptionmustcontainoneormoreofthefollowingsettingoptions
describingtheconditionsofthezone:
DomainSpecifiesthedomainnameofthenetwork,suchasmycompany.com.
Enteronlyonedomainname.ThevalueofAllowsubdomainsofthisdomain
governstheinterpretationofthisoption.
AllowsubdomainsofthisdomainModifiestheDomainoption.Itspecifies
whether,fortheDomainzoneconditiontobemet,adomainnamemustexactly
matchthedomainnamespecifiedintheDomainboxorwhetheramatchofthe
domainnameismadeanytimethestringcontains<domain_name>.Forexample,
ifthisoptionisselected,corp.mycompany.comisconsideredamatchfor
mycompany.com.Ifthisoptionisnotselected,corp.mycompany.comisnot
consideredamatchformycompany.com.
NetworkaddressSpecifiesanIPaddressorsubnetrangethatthenetworkuses.
Thevalueof<subnet>,ifyouincludeasubnetrange,mustbethenumberofbits
inthenetmask.Anetworkadaptermatchesthisconditionifitisusingan
IP addressthatlieswithinanyofthespecifiedranges.
Workstation Users Manual
406 VMware, Inc.
DNSserversSpecifiesoneormoreIPaddressesorhostnamesforDNSservers
onthenetwork.Anetworkadaptermatchesthisconditionifitisusingatleastone
oftheseservers.
IfthevalueoftheMatchatleastoptionisgreaterthan1,thehostmustbeusing
thespecifiednumberofDNSserversonthelistbeforeanetworkadapteris
consideredtobeonthedefinednetwork.
BecausemultiplemethodsexistforassigningDNSdomainnamestoaLinuxhost,
usingjusttheDNSdomainnametodefineazonecanbeerrorprone.Todefinea
zoneforaLinuxhost,usecriteriainadditiontotheDNSdomainnames.
ForWebsites,aDNSdomainnamemightresolvetomorethanoneaddress.To
ensurethatthezoneisdefinedexactlyasyouintend,entereachIPaddress,rather
thanjusttheDNSdomainname.
DHCPserversSpecifiesoneormoreIPaddressesorhostnamesforDHCP
serversonthenetwork.Anetworkadaptermatchesthisconditionifitisusingat
leastoneoftheseservers.
GatewayserversSpecifiesoneormoreIPaddressesorhostnamesfordefault
gatewaysonthenetwork.Anetworkadaptermatchesthisconditionifitisusing
atleastoneofthesegateways.
WINSserversSpecifiesoneormoreIPaddressesorhostnamesforWINSservers
onthenetwork.Anetworkadaptermatchesthisconditionifitisusingatleastone
oftheseservers.LinuxhostsignoreWINSserversettingsduringzonedetection.
IfthevalueoftheMatchatleastoptionisgreaterthan1,thehostmustbeusing
thespecifiednumberofWINSserversonthelistbeforeanetworkadapteris
consideredtobeonthedefinednetwork.
Add or Edit a Network Zone
Usethezoneeditortoconfigurethenetworkaddress,domain,DNS,DHCP,WINS,or
gatewayserversthatanACEinstancecanusefornetworkconnections.
Beforeyouopenthezoneeditor,determinewhatcriteriatouseforconnectingto
internalandexternalnetworks.SeeGuidelinesforSpecifyingZoneConditionson
page 404andDescriptionsoftheZoneConditionSettingsonpage 405.
VMware, Inc. 407
Chapter 19 Setting and Using Policies and Customizing VMware Player
To add or edit a network zone
1 Inthepolicyeditor,selectNetworkAccessanddooneofthefollowing:
Toaddazone,clickAddZoneandclicktheNewZoneentrythatappearsin
thetable.
Toeditazone,clickthenameofthezoneintheZonescolumnofthetable.
2 CompletethefieldsinthezoneeditorthatappearsandclickOK.
Using the Ruleset Editor to Configure Host and Guest Access
EachaccesssettingforanACEinstanceshostmachineandfortheACEinstancesguest
systemisbasedonasetofaccessrules.WheneveryouusetheNetworkAccesswizard,
adefaultrulesetisusedforhostandguestnetworkaccess.Youcanusetheruleset
editortochangetheparametersofthoserules.
NetworkaccesspoliciesareappliedbyfilteringontheIPaddress,theprotocolnumber
fromtheIPheader,thedirectionoftraffic,andTCPandUDPportvalues.Thefiltering
doesnotinvolvedeeppacketinspection.ForDNSandDHCPaccess,theTCPandUDP
portsonwhichthoseservicestraditionallyresideareopened.
Considerthefollowingaspectsofthefilteringactions:
Ifyoumoveyourservicestodifferentports,thenetworkaccessrulesforthose
servicesnolongerwork.
Thehostorinstanceisopentoalltrafficontheseprotocolsandports.
TounderstandtheparticularsofhowtrafficisbeingblockedorallowedforDNS,
DHCP,andICMPprotocolsandports,seetherulesdisplayedintheruleseteditor.
Add or Edit Rulesets and Rules for Network Access
Therulesintheruleseteditorarelistedintheorderinwhichtheyaretobeevaluated.
Whenanetworktrafficpacketarrivesoristobesentfromthehostorguest,itis
comparedwitheachruleintheruleset,inorderfromthetopdown.Ifthefollowing
packetsettingsmatchtheruleconditions,thepacketisallowedorblockedaccordingto
therulesaction:
Sourceaddressforincomingpackets
Destinationaddressforoutgoingpackets,protocol,andports
Workstation Users Manual
408 VMware, Inc.
Thepacketiscomparedtoeachruleinorderuntilitmatchesaruleoritwascompared
withalloftherules.Whenamatchismade,thepackettorulecomparisonends.
The packetisnotcomparedtosubsequentrulesintheorderedlist.Ifitwascompared
toallruleswithoutamatch,thedefaultruleactionisapplied.
To add and edit rulesets and rules for network access
1 Inthepolicyeditor,selectNetworkAccess,andclickthelinkinthetablecolumn
thatappliestotheaccesssettingtoedit.
TheZoneandAccessTypeinformationjustbelowtheRulesetNametextbox
showsthenameofthezoneandwhethertheaccesssettingappliestohostnetwork
accessortothenetworkaccessforACEinstances(guestaccess).
2 Usetheruleseteditortochangetheorderofrulesintheset,editrules,andspecify
whetherthehostorguestisallowedtouseDNS,DHCP,orICMP.
Bydefault,DNS,DHCP,andICMPareincludedinthenetworkaccesssetupfor
bothhostandinstanceaccess.VMwarerecommendsthatyoukeepDHCPand
DNSselectedbecausetheyareimportantforzonedetection.
WhetherthefollowingsettingsapplytothehostortotheACEinstance(guest
access)dependsonwhetheryouareeditingahostnetworkaccessrulesetora
guestnetworkaccessruleset:
DNSAllowstheguestorhosttouseaDNSservertoresolveIPaddresses.
SelectthisoptioniftheDNSserverisnotincludedinanyothernetworkaccess
settingforthishostorACEinstance.
DHCPAllowsthehostorguesttoobtainitsIPaddressfromaDHCPserver.
SelectthisoptioniftheDHCPserverisnotincludedinanyothernetwork
accesssettingforthehostorACEinstance.
ICMPEnablesyoutousethepingcommand.Forguests,pingenablesyou
tochecknetworkconnectivitytoandfromtheACEinstance.Forhosts,it
enablesyoutochecknetworkconnectivitywithotherhostsinthenetwork
andwiththeACEinstance.
3 (Optional)Toaddoreditarule,dooneofthefollowing:
Tochangeaspecificrulessettings,clicktherowforthatruleinthetableinthe
ruleseteditorandclickEdit.
Toaddarule,clickAdd.
VMware, Inc. 409
Chapter 19 Setting and Using Policies and Customizing VMware Player
4 (Optional)UsetheRuleEditordialogboxtospecifythetypeoftraffic,whetherto
blockorallowtrafficfromspecifiednetworklocations,theprotocol,andportsor
portranges.
AddressesToeditanexistinghostnameoraddress,doubleclickthatitem
andeditit.ThewildcardsettingforallIPaddressesis0.0.0.0/0.
ProtocolToalloworblockcommunicationforaspecificprotocol,select
CustomfromtheProtocollist.Theprotocolnumberisinthepacket.Ifthat
numbermatchesthenumbersuppliedintheCustomfield,thepacketis
allowedorblockedastherulespecifies.Theprotocolnumberisusedinthe
protocolfieldofIPv4packets.
Foralistofprotocolnumbers,seetheInternetAssignedNumbers
Authority (IANA)organizationsWebsite.Mostprotocolnumbersare
permanentlyassigned.
RemotePortsandLocalPortsIfyouareusingeitherTCPorUDPandwant
toqualifytherulewithspecificportnumbersforthistypeoftraffic,typethe
portnumbersorportnumberranges.
Thewildcardportsettingis(doublequotationmarks).
Usuallyyouspecifyfilteringoneitherlocalorremoteports,notboth,because
bothspecificationshavetomatchfortheruletobeapplied.(DHCPrepresents
anexceptiontothisgeneralrule.)
Thelocalportisthesourceportforoutgoingpacketsandthedestinationport
forincomingpackets.Typicallyyouspecifyalocalportwhenthehostorguest
isbeingusedasaserverobtainingremoteconnectionsonsomeport.
Theremoteportisthesourceportforincomingpacketsandthedestination
portforoutgoingpackets.Typicallyyouspecifyaremoteportwhenthehost
orguestisaclientandiscontactingaremoteserveronsomeport.
Change NAT Settings
YoucanusetheNATfeatureofthenetworkaccesspolicytospecifytheIPaddress
rangeforthevirtualnetworkVMnet8ontheACEinstanceshostsystem.Youdeploy
thisnetworkpropertiessettingwiththeACEpackage.
CAUTIONIfyousetthisproperty,thesettingaffectsalloftheACEinstancesandvirtual
machinesonthisinstanceshostsystem.
Workstation Users Manual
410 VMware, Inc.
To change NAT settings
1 Inthepolicyeditor,selectNetworkAccess.
2 ClickHostVirtualNetworkonthepolicypage.
3 IntheNATsectionofthedialogbox,selectAssignIPaddressesfromthissubnet.
4 TypethesubnetIPaddresstouse,enterzero(0)asthelastbyteintheaddress,and
clickOK.
5 CreateanACEpackageanddeploythepackage.
TheNATsettingisnotadynamicpolicysetting.Thismeansthatsimply
publishingapolicyupdatetoACEManagementServerdoesnotcauseACE
instancestochangeNATsettings.YoucanchangethesettingforadeployedACE
instanceonlybychangingitinthepolicyandthencreatinganddeployinganew
ACEpackage.
Configure Which Physical Network Adapter to Use
Ifthehostislikelytohavemultiplenetworkadapters,youcanspecifywhichonetouse
forabridgednetworkconnection.Forexample,youcanspecifythatonlythewireless
adapteroronlyaVPNistobeused.
To configure which physical network adapter to use
1 Inthepolicyeditor,selectNetworkAccess.
2 ClickHostVirtualNetworkonthepolicypage.
3 SelectoneoftheradiobuttonsintheAutomaticBridgingsection.
4 IfyouselectDevicename,alsoenterpartorallofthedevicename.
Forexample,ifdevicenameofthelocalareaconnectionisBroadcomNetXtreme
57xxGigabitController#2,youmightenterBroadcomorbroadcom netxtreme.
OnWindowshosts,todeterminethedevicename,gototheNetworkConnections
itemintheControlPanel.
CAUTIONIfyousetthisproperty,thesettingaffectsalloftheACEinstancesandvirtual
machinesonthisinstanceshostsystem.
VMware, Inc. 411
Chapter 19 Setting and Using Policies and Customizing VMware Player
5 ClickOK.
6 CreateanACEpackageanddeploythepackage.
Thisautomaticbridgingsettingisahostpolicy,whichmeansthatyoucanchange
thesettingforadeployedACEinstanceonlybychangingitinthepolicyandthen
creatinganddeployinganewACEpackage
Understanding the Interaction of Host and Guest Access Filters
with Tunneling Protocols
Hostandguestaccessfilterscandifferintheirinteractionswithtunnelingprotocols.
Ahostnetworkaccessfilterseestrafficbeforepacketsareencapsulatedinthetunneling
protocol(forexample,VPN).Aguestnetworkaccessfilterseestrafficafterthepackets
areencapsulatedinthetunnelingprotocol.
Becauseofthisguestaccessfilterbehavior,ausermightbeabletocircumventguest
accessrestrictionsbyusingtunnelingprotocolsorproxies.
Updating a Network Access Policy
Youmustcreateanddeployanewpackageforthehostpolicytotakeeffect.
IfyouuseamanagedACEenabledvirtualmachinetocreatepackagesthatdonot
containahostpolicyandlateredittheACEenabledvirtualmachinesnetworkaccess
policytoincludeahostpolicyandpublishthechange,instancescreatedfrompackages
ofthatACEenabledvirtualmachinedonothaveahostpolicyapplied.Awarning
appearsonthenetworkaccesspolicypageifyouattempttoapplyahostpolicyinthis
way.
Youcanpackagejustthehostpolicyinacustompackage,keepingthepackagesize
small.
Setting Removable Devices Policies
Removabledevicespoliciesallowyoutocontrolwhetheruserscanconnectand
disconnectremovabledevicesfromtheirACEinstances.
AremovabledevicespolicyisappliedtoanACEenabledvirtualmachineandaffects
allusersofallinstancescreatedfromthatACEenabledvirtualmachine.
WhenyouselectRemovableDevicesinthepolicyeditor,allremovabledevicetypes
forthisACEenabledvirtualmachinearedisplayedinalist.Youcanspecifywhich
devicestoallowenduserstoaccess.
Workstation Users Manual
412 VMware, Inc.
Setting USB Device Policies
YoucansetUSBdevicepoliciestorestricttheACEusersaccesstoUSBdevices.The
policiesaredynamic.ThismeansthatyoucanchangethesettingsondeployedACE
instancesbypublishingapolicyupdatetoACEManagementServer.
Access Levels for USB Devices
Youcansetrestrictionsatvariouslevelsofspecificity,andyoucanmixlevelsof
restrictioninapolicysetting.Thelevelsofrestrictionare:
SpecificUSBdeviceForexample,allowuseofaspecifictypeofdigitalcamera
butdisallowuseofiPodmobiledigitaldevices.
Ifaruleexistsforaspecificdevice,thatruleoverridesanyrulessetfordevice
classesinwhichthedevicebelongs.
AllentriesinthelistofspecificUSBdevicesaremaintainedinadevicedatabase
thatisincludedwiththefilesforthisACEenabledvirtualmachine.Youcancopy
andsharethedatabase.Itisnotwriteprotected.Thedefaultlocationforthefileis:
OnWindowsXP: C:\Documents and Settings\All Users\Application
Data\VMware\VMware Workstation\usbhistory.ini
OnWindowsVistaandWindows7:C:\ProgramData\VMware\VMware
Workstation\usbhistory.ini
DeviceclassForexample,allowuseofhumaninputdevices(HIDs),suchasmice
andkeyboards,butdisallowuseofcommunicationsdevices,suchasmodemsand
cellphones.
Ifnospecificdeviceruleexistsforadeviceandmorethanonedeviceclassrule
appliestothatdevice,themostrestrictiveruleisapplied.Forexample,adevice
mightincludebothafaxfunctionandaprintfunctionandthereforecanbelongto
morethanoneclass.Ifoneruleblocksafaxdevicebutanotherruleallowsaprint
device,thecombinationfaxandprintdeviceisblocked.
AllUSBdevicesAllowordenyaccesstoallconnectedUSBdevices.Deviceclass
rulesandspecificdevicerulesoverridegeneralaccessrules.
Set an Access Policy for USB Devices
YoumightwanttosetapolicythatpreventsendusersfromconnectingsuchUSB
devicesasmassstoragedevices,printers,ormodemstotheACEinstance.
VMware, Inc. 413
Chapter 19 Setting and Using Policies and Customizing VMware Player
Beforeyouusethepolicyeditor,determineastrategyforsettingthepolicy.Ifyouwant
arestrictedenvironment,youcanplantogenerallyblockaccesstoallUSBdevicesand
thenspecifyexactlywhichclassesorspecificdevicestoallow.SeeAccessLevelsfor
USBDevicesonpage 412.
To set an access policy for USB devices
1 Inthepolicyeditor,selectUSBDevices.
2 UsetheGeneralaccesstoallUSBdevicesradiobuttonstospecifywhetherto
alloworblockgeneralaccesstoUSBdevices.
3 TospecifyaUSBpolicybydeviceclass:
a IfthedevicedoesnotappearintheAccesstospecifictypesofUSBdevices
list,clickAdd,selectthedeviceintheUSBDeviceClassesdialogbox,andclick
OK.
YoucanCtrlclickandShiftclickitemstoselectmorethanoneclass.
b SelecttheAllowandBlockcheckboxesintheAccesstospecifictypesofUSB
deviceslisttospecifytheruleforeachdeviceinthelist.
4 TospecifyaUSBpolicybyspecificdevice:
a IfthedevicedoesnotappearintheAccesstoindividualUSBdevicemodels
list,clickAdd,selectthedeviceintheUSBDeviceListdialogbox,andclick
OK.
IfthedevicedoesnotappearintheUSBDeviceListdialogbox,dooneofthe
following:
ConnectthedevicetothehostandclickRefresh.
DeterminethedevicesvendorID(VID)andproductID(PID)andclick
ManualAddtoentertheinformation.Thisinformationisavailablefrom
theWindowsDeviceManagerwhenyouconnecttheUSBdevicetoa
Windowscomputer.
b SelecttheAllowandBlockcheckboxesintheAccesstoindividualUSB
devicemodelslisttospecifytheruleforeachdeviceinthelist.
c (Optional)Tochangetheinformationforadevice,clickRemoveandaddthe
deviceagainwiththenewinformation.
5 ClickOKinthepolicyeditor.
Workstation Users Manual
414 VMware, Inc.
Setting Virtual Printer Policies
VMwareACEincludesavirtualprinterthatallowsuserstoprinttoanyprinter
availabletothehostcomputerwithoutinstallingadditionaldriversinthevirtual
machine.
ThevirtualprinterfeatureisavailableforACEinstancesrunningwiththeseWindows
hostandguestoperatingsystems:
HostWindowsXP,2003,orVista,732bitonly
GuestWindows2000,XP,2003,Vista,7(32and64bit),RedHatEnterpriseLinux
4(32bitonly),Ubuntu,andSUSE
Afteryouenablethevirtualprinterpolicy,aserialportisaddedtothevirtualmachine.
ThisserialportappearsontheHardwaretabofthevirtualmachinesettingseditor,with
thesummaryUsedbyVirtualPrinter.Youcannotaddorremovethisserialportby
usingthevirtualmachinesettingseditor.Toaddorremoveit,youmustenableor
disabletheoptioninthevirtualprinterpolicy.
AfterendusersinstalltheACEinstance,theycanusetheVM>VirtualPrintersmenu
commandtospecifywhichprintersfromthehostareavailabletotheguest.Ifendusers
onWindowshostshaveproblems,makesuretheTPAutoConnectServiceWindows
serviceisstarted.
NOTEIftheACEenabledvirtualmachinealreadyhasfourserialports,youcannot
addanotherserialportforthevirtualprinter.Toenablethevirtualprinter,deletean
existingserialport.
NOTEWhentheACEVirtualPrinterpolicyisenabled,VirtualPrinterisavailablein
VM>Settings>Hardware,andcannotbedeselecteduntiltheACEVirtualPrinter
policyisdisabled.
VMware, Inc. 415
Chapter 19 Setting and Using Policies and Customizing VMware Player
Setting Runtime Preferences Policies
YoucansetoptionsontheRuntimePreferencespolicypagetospecifywhich
Workstationruntimeattributestheusercanchoose.
Runtime Preferences Settings
Usethefollowinginformationtodecidewhichfeaturestoenable:
AlwaysruninfullscreenVMwarePlayerfillsthefullscreenwhenitstarts,
hidingthehostoperatingsystem.Youmightfindthisuseful,forexample,toavoid
confusionaboutthedifferencesbetweenthehostsystemenvironmentandthatof
theACEinstance.
Userscanreturntothehostoperatingsystembyclickingtheminimizebuttonon
thetoolbar.Ifthemousepointerisnotavailable,pressingCtrl+Altminimizesthe
display.
AlwayshidethefullscreentoolbarEnduserscannotdisplaythetoolbarthat
usuallyappearsatthetopofthescreenwheninfullscreenmode.
AlwaysruninapplianceviewTheACEinstanceopensinapplianceviewand
theusercannotchangetoconsoleview.
Tousethissetting,youmustalsoenableapplianceviewforthevirtualmachine.
SeeConfiguretheApplianceViewforaVirtualMachineonpage 182.Ifyou
attempttousethispolicywithoutenablingapplianceview,anerrormessage
appearswhentheuserattemptstostarttheACEinstance.
AllowuserstomodifythememoryallocationTheChangeMemoryAllocation
commandappearsintheVMmenuofVMwarePlayer.
ReducevirtualmachinememorysizeifneededwhenpoweringonThevirtual
machinepowersoneveniftheamountofavailablememoryislessthantheamount
configuredforthevirtualmachine.Ifyoudonotusethisfeatureandtherequired
amountofmemoryisnotavailable,usersneedtomodifythememoryallocationto
poweronthevirtualmachine.
Workstation Users Manual
416 VMware, Inc.
Enhanced Virtual Keyboard Settings
Usethefollowinginformationtodecidewhichfeaturestoenable:
RequireenhancedvirtualkeyboardforsecureinputThissettingappliesonlyto
WindowshostsrunningWindowsguests.Thisfeatureprovidesbetterhandlingof
internationalkeyboardsandkeyboardswithextrakeys.Italsoprovidessecurity
improvementsbecauseitprocessesrawkeyboardinputassoonaspossible,
bypassingWindowskeystrokeprocessingandanymalwarethatisnotalreadyat
alowerlayer.
IfanACEinstanceusesthisfeature,whenenduserspressCtrl+Alt+Delete,the
guestsystemonly,ratherthanbothguestandhost,respondstothecommand.
Beforeyoucreatearuntimepolicyforthisfeature,turnontheenhancedkeyboard
filterwiththevirtualmachinesettingseditor.SeeUsetheEnhancedVirtual
KeyboardforWindowsHostsonpage 339.
WhentheACEinstanceisinstalledandtheguestoperatingsystemstartsforthe
firsttime,aspecialkeyboardfilterdriverisinstalledonthehost.Afterinstallation,
theendusermustrestartthehostcomputer.Keyboardfilteringisthenenabled.
WhenasuspectedkeyloggerisdetectedKeystrokeloggingisamethodof
recordinguserkeystrokes,includingdetermininguserpasswords.VMwareACE
nowincludesafeaturethatcandetect(butnotdisable)keyloggers.
IfyouselectAskuser,enduserscanexitorcontinueusingthevirtualmachineand
onlylogthatthekeyloggerwasdetected.Ifyouallowenduserstocontinueusing
thevirtualmachinewhenakeyloggerisdetected,thekeyloggerstillrecordsthe
userskeystrokes.Toavoidthispossibility,selectExit.
Exit Behavior Settings
Usethefollowinginformationtodecidewhichfeaturestoenable:
WhenclosinganonPocketACEinstanceIfyouselectUserPreference,theuser
hasaccesstoSuspendandPoweroffinthePreferencesdialogboxinVMware
Player(File>Preferences).Ifyouselectoneoftheotherchoices,theendusers
virtualmachineissuspendedorpoweredoffwhentheuserchoosesFile>Exitor
clicksthecloseboxinVMwarePlayer.
VMware, Inc. 417
Chapter 19 Setting and Using Policies and Customizing VMware Player
WhenclosingaPocketACEinstanceIfyouselectUserPreference,theuserhas
accesstoGomobileandAsktogomobileorstayconnectedtothecomputerin
thePreferencesdialogboxinVMwarePlayer(File>Preferences).
AlwaysGoThevirtualmachineispoweredoffandsynchronizedtothe
host.Aftersynchronization,theusercanunplugtheUSBdeviceanduseitin
anothermachine.
AlwaysStayTheuserwantstoexitVMwarePlayerbutdoesnotwantto
unplugthedevice.Thevirtualmachineissuspendedandnosynchronization
occurs.
AlwaysDiscardTheuserwantstoexitVMwarePlayerbutdoesnotwantto
synchronize.Allchangesarelost.
AllowuserstomanuallypowerofforresetthevirtualmachineTheResetand
PoweroffandExitcommandswillappearintheVM>Powermenu.Ifyoudonot
selectthisoption,theusermustexitVMwarePlayertopowerofforsuspendthe
ACEinstance.
Pocket ACE Cache Settings
Forperformancereasons,whenyouusePocketACE,filesfromtheUSBdeviceare
cachedasneededonthehost.WhenyouarefinishedusingthePocketACE,you
synchronizechangessothattheupdatedfilesarewrittentotheUSBdevice.
Youcandisablethiscachingifyoudonothaveenoughdiskspaceonthehost.For
example,ifthevirtualdiskonthePocketACEhas8GB,youmightpotentiallyneed8
GBofdiskspaceonthehostforcaching.Youcanalsodisablecachingforsecurity
reasonsifyoudonotwanttocreateacacheonthehost.
Ifyoudisablecaching,theexitbehaviorintheWhenclosingaPocketACEinstancelist
changestoAlwaysGobutsynchronizationdoesnotoccurbecauseitisnotnecessary.
Workstation Users Manual
418 VMware, Inc.
Setting Snapshot Policies
Youcansetpolicyoptionsfortwotypesofsnapshots:
ReimagesnapshotsAtinstallationtime,asnapshotistakenafterallofthe
requiredinstancesetupstepsarecomplete,including,ifapplicable,encryption,
instancecustomization,anddomainjoin.Thesnapshotistakenbeforethevirtual
machinerunsforthefirsttime.
ReimagesnapshotsallowtheACEadministrator,ortheuseriftheadministrator
enablesreimagesnapshotoptionsfortheuser,toreverttheACEinstancetoits
knowngoodstartingstateortotheknowngoodupdatedreimagestate.
Ifyouenablereimagesnapshotoptions,commandsfortheoptionsappearinthe
VM>Snapshotmenu.
Ifyouchoosenottoenablethereimagesnapshotoptionsfortheuser,youcan
replacethereimagesnapshotorreverttoitontheusersmachinebyproviding
administratormodeaccessthroughtheAdministratorModepolicy.SeeSetting
AdministratorModePoliciesonpage 419.
UsersnapshotsYoucanenableuserstotakeasnapshotoftheACEinstance
eitherwhentheinstanceisrunningorimmediatelyafterpoweringitoff.Youcan
alsoenablethemtodeletethatusersnapshot.
Usersnapshotsenabletheusertoreturnthevirtualmachinetoaknownstable
state.Usersnapshotscanbetaken,revertedto,anddeletedwithoutaffectingthe
reimagesnapshot.Onlyoneusersnapshotcanbesavedatatime.
Ifyouenableusersnapshotoptions,commandsfortheoptionsappearintheVM
>Snapshotmenu.
NOTEManuallydisabletheautomaticreimagesnapshotbyeditingthe
ACEenabledvirtualmachinesaceMaster.datfile.Editthe
packaging.takeReimageSnapshot option.
NOTEYoucannottakesnapshotsofaPocketACEinstance.FormoreaboutPocket
ACEs,seeChapter 21,PocketACE,onpage 457.
VMware, Inc. 419
Chapter 19 Setting and Using Policies and Customizing VMware Player
Setting Administrator Mode Policies
Youcanusetheadministratormodepolicytosetanadministrativepasswordsothat
youcandoanyofthefollowing:
RuntheACEinstanceontheusersmachineandenteradministratormodeto
accessthevirtualmachinesettingsandmakechangestotheinstances
configuration.Youcanonlyeditthesettings.Youcannotaddorremovevirtual
hardwaredevices.
RuntheACEinstanceontheusersmachineandenteradministrativemodeto
accessallthesnapshotcommands.SeeSettingSnapshotPoliciesonpage 418.
Usethevmware-acetoolcommandlineprogramonanACEuserssystemtofix
alimitedsetofproblemsforstandaloneACEinstances.
Use Administrator Mode on an ACE Instance
Usingadministratormodeonanendusersvirtualmachineenablesyouto
troubleshootandaccessfeaturesandcommandsthatmightnotbeavailabletotheend
user.
To use administrator mode on an ACE instance
1 StartVMwarePlayerontheendusersmachineandchooseVM>ACE>Enter
AdministratorMode.
2 Enterthepasswordforadministratoraccess.
3 Choosetheappropriatecommandsasfollows:
Toeditvirtualmachinesettingsfromtheusersmachine,chooseVM>
Settings.ThiscommandisavailableonlyonWindowshosts.
Tousetheusersnapshotcommands,chooseVM>Snapshot.
Tousethereimagesnapshotcommands,chooseVM>Snapshot>Revertto
ReimageSnapshot.
TousetheACETools,seeUsingthevmwareacetoolCommandLineTool
onpage 479.
4 Whenyoufinishchangingthevirtualmachinesettingsorusingthesnapshot
commands,chooseVM>ACE>ExitAdministratorMode.
Workstation Users Manual
420 VMware, Inc.
Setting Kiosk Mode Policies
WhenanACEinstancerunsinkioskmode,theusercannotaccessthehostsystemat
all.Forexample,theusercannotshutdownthehostmachine.Thevirtualmachineruns
infullscreenmodeanddoesnotdisplaytheACEmenubarorACEPlayeronlinehelp.
IfanACEinstancehasthekioskmodepolicyturnedon,bydefault,amessageappears
atstartuptoprovidethefollowinginformation:
Warnstheuserthatthevirtualmachineisabouttogointokioskmode.
Tellstheuserwhichkeycombinationtousetoexitkioskmode.Thedefaultisthe
hotkeycombinationforungrabbinginputfromavirtualmachine(oftenCtrl+Alt).
SeeChangetheKeyCombinationforExitingKioskModeonpage 420.
Ifthepolicyincludesanadministratorpassword,tellstheuserthathostaccessis
availableonlyiftheuserentersthepasswordafterpressingthekeycombination
toexitkioskmode.
Whenauserexitskioskmode,thevirtualmachineispoweredofforsuspended,
accordingtotheruntimepreferencepolicyforexitbehavior.PocketACEinstancesare
poweredoffandsynchronized.Whenthevirtualmachineispoweredoff,theACE
Playerpromptstheusertoexitkioskmode.
OnLinuxhosts,youmustsetsomeadditionalpropertiesafterinstallingtheACE
instance.SeePrepareaLinuxHostforRunninginKioskModeonpage 472.
Forinformationaboutstartupoptionsforkioskmode,seeChangeDefaultKiosk
ModeStartupBehavioronpage 475andUseMultipleVirtualMachinesinKiosk
Modeonpage 476.
Change the Key Combination for Exiting Kiosk Mode
YoucanuseCtrl,Alt,Shift,theWindowskey,oracombinationofthesekeyswitha
regularkey.
To change the key combination for exiting kiosk mode
1 Inthepolicyeditor,selectKioskMode.
2 SelectAlwaysruninkioskmodeandselectCustomhotkeytoexitkioskmode.
3 ClickintheTypehotkeyherefieldandpressakeycombination.
Forexample,pressAlt+XratherthantypingthecharactersAlt+X.
VMware, Inc. 421
Chapter 19 Setting and Using Policies and Customizing VMware Player
Setting Hot-Fix Policies for Standalone ACE Instances
ThispolicyenablesusersofstandaloneACEinstancestorequesthotfixesiftheylose
orforgettheACEpassword,trytorunanexpiredACEinstance,ormovea
copyprotectedACEinstancetoanewlocation.
ToaddressthesetypesofproblemsformanagedratherthanstandaloneACEinstances,
usetheVMwareHelpDeskWebapplicationortheinstanceviewinWorkstation.For
moreinformation,seetheACEManagementServerAdministratorsGuide.
Thehotfixrequestisafilethattheusermustsubmittoanadministratorforaction.You
configurewhethertheusersubmitsthefiletoanadministratormanuallyorthrough
emailgeneratedbytheHotFixRequestwizard.
Forautomaticallygeneratedemail,theHotFixRequestwizardontheuserscomputer
attemptstouseaMAPIemailclientonthehostoperatingsystem.Thehotfixrequest
fileisincludedasanattachmenttotheemailmessage.Themessageusestheemail
addressandsubjectlinethatyouspecify.
Ifyouchooseemailandtheautomaticsubmissionfails,theHotFixRequestwizard
allowstheusertosavethehotfixrequestasafile.Theusermustthensendthefileto
anadministratormanually.
TheadministratorusesWorkstationtorespondtohotfixrequests.SeeRespondto
HotFixRequestsonpage 481.
Setting the Policy Update Frequency for Managed ACE
Instances
ThispolicycontrolshowoftenanACEinstanceconnectstoACEManagementServer
todownloadpolicyupdateswhileitisrunning.Italsocontrolshowlongamanaged
ACEinstancecanbeusedifitcannotconnecttoACEManagementServer.
ThispolicyappliesonlytomanagedACEinstances.Todeploypolicyupdatesfor
standaloneACEinstances,youmustcreatepolicyupdatepackages.Policychangesare
appliedwhentheinstanceisstartedaftertheupdatepackageisinstalled.
Thesettingsforofflineusageincludetextforwarningandtimeoutmessages.Youcan
customizemessagesbyaddingtexttothem.Youcannotedittheexistingstandardtext
exceptbyusingthecontrolsonthepaneltochangethenumberofminutes,hours,or
daysshown.
Workstation Users Manual
422 VMware, Inc.
Policyupdatestakeeffectwhiletheinstanceisrunning,withthefollowingexceptions:
Updatestoaccesscontrolpolicies,whichincludeuserandgrouplists,passwords,
andscripts,takeeffectthenexttimetheinstanceispoweredon.
Updatestopolicyupdatefrequencypolicies,ifsettoOnlywhentheACEinstance
powerson,takeeffectthenexttimetheinstanceispoweredon.
Control Which ACE Instances Run on a Host
Youcansetrestrictionssuchasthefollowing:
SpecifywhethervirtualmachinesthatarenotACEinstancescanrunonthe
machine.Thisisahostwidepolicy,whichrequiresanadministratortoinstallthe
package.
SpecifythatonlyACEinstanceswithaspecificcreatorIDcanrunonthemachine.
YoucancontrolwhichvirtualmachinesandACEinstancescanberunonahostby
editingtheaceMaster.datfileinthevirtualmachinedirectory.
Beforeyoubegin,ifyouplantorunmultipleACEinstancesontheendusersmachine,
determinewhichACEenabledvirtualmachineyouwanttouseforsettinghostwide
policies.
To control which ACE instances run on a host
1 OntheadministratormachinewhereWorkstationisinstalled,poweroffandclose
theACEenabledvirtualmachine.
2 UseatexteditortoopentheaceMaster.datfilefortheACEenabledvirtual
machine.
Thisfileislocatedinthesamedirectoryastheconfigurationfile(.vmxfile)forthe
ACEenabledvirtualmachine.
3 (Optional)TospecifythatnonACEvirtualmachinescannotrunonthehost,find
theallowVMspropertyandchangeitfrom1to0.
4 FindtherequiredCreatorIDpropertyandsetittoanidentifier.
Forexample,tosettherequiredcreatorIDtocreator1,editthelineasfollows:
requiredCreatorID = "creator1"
YousetrequiredCreatorIDonceforeachhost.Youdonotneedtosetthis
propertyonotherACEinstancesthatrunonthesamehost.
Thisisahostwidepolicy,whichrequiresanadministratortoinstallthepackage.
VMware, Inc. 423
Chapter 19 Setting and Using Policies and Customizing VMware Player
5 FindthecreatorIDpropertyandsetittothesameidentifier.
Forexample,tosetthecreatorIDtocreator1,editthelineasfollows:
creatorID = "creator1"
OnlyACEinstanceswiththiscreatorIDcanrunonthesamehost.
TheIDstringisinplaintextintheaceMaster.datfileontheadministrators
machine,butitishiddeninthepolicyfile.
IfyoupublishthepolicysetofanACEinstanceto
requiredCreator=yourPolicySettingandinstallitonahost,onlyyou(or
otherswithaccesstotheadministratorfiles)knowwhatthecreatorIDis.Without
knowingtherequiredCreatorpolicysetting,youcannotcreateyourownACE
instancethatcanrunonthehost.
6 Dooneofthefollowing:
IfyouarecreatinganewACEinstance,createapackageforthisACEenabled
virtualmachineandinstallitontheendusershost.
IfyouarecreatinganupdateforastandaloneACEinstance,createanupdate
package.
IfyouarecreatinganupdateforamanagedACEinstance,openthevirtual
machineandpublishthechangestoACEManagementServer.
ChangestotheallowVMspropertyortherequiredCreatorIDpropertyrepresent
changestohostwidepolicies.Packagesthatincludethesehostpoliciesrequire
administratorprivilegestoinstall.
7 (Optional)IfyouplantorunmultipleACEinstancesontheendusersmachine,do
thefollowing:
a EdittheaceMaster.datfilefortheotherACEenabledvirtualmachinesand
setthecreatorIDpropertytothesamevaluethatyouusedinStep 5.
SetonlythecreatorIDpropertyandnottherequiredCreatorIDproperty
fortheseothervirtualmachines.
b RepeatStep 6.
Workstation Users Manual
424 VMware, Inc.
Writing Plug-In Policy Scripts
YoucanwritescriptstocontrolcertainpoliciesinVMwarePlayer.Youmayuseany
languagethatissupportedontheuserscomputer.
Forsecurityreasons,scriptsmustbedeployedaspartofapackageandinstalledbythe
packageinstaller.Userscannotmodifythesescripts.
Whenscriptsrun,theymustwritetheappropriatevaluestotheStdOut file.Outputto
theStdOutfilemightbeupto4096byteslong.
PlaceanyscriptsyouwanttouseforapackageintheACE Resourcesdirectoryinthe
virtualmachinedirectory.DonotplacetheminasubdirectoryoftheACE Resources
directory.Ifthescriptsneedanyadditionalresourcefiles,placethosefilesinthemain
ACE Resourcesdirectory.Makesurethescriptusesrelativepathstoreferencethose
resources.
ScriptscanalsowritemessagestotheStdErrfile.OutputtotheStdErrfilemaybeup
to4096byteslong.AnymessagesgeneratedontheStdErrfilearecapturedinthelog
fileontheendusersmachineatthefollowinglocation:
<UserAppData>\VMware\VMware ACE\<package_name>\Virtual
Machines\<VM_name>\vmware.log
Theexitcodeofascriptindicateswhetherthescriptsucceededorfailed.
Table 191describestheenvironmentvariablessetinthescriptexecutionenvironment.
AllscriptsruneachtimetheenduserstartsVMwarePlayerorresetsthevirtual
machine.Somemightrunmoreoften.Forexample,anexpirationscriptisrunevery24
hours.
ThesamplescriptspresentedinExamplesofPolicyScriptsonpage 425areinstalled
withVMwarePlayerinthefollowinglocation:
C:\Program Files\VMware\VMware Player\Samples
Thetopicsthatfollowshowtheformatfortheoutputthatyourscriptsmustwritetothe
StdOutfiletocontrolvariouspolicies.
Table 19-1. Environment Variables
Variable Description
VMWARE_MASTER_ID TheIDoftheACEenabledvirtualmachine(ACEmaster).
VMWARE_PACKAGE_ID TheIDofthepackagethevirtualmachinewasinstantiated
from.
VMWARE_INSTANCE_ID ABooleanvaluethatissettoTRUEthefirsttimethevirtual
machineispoweredon.Otherwise,itissettoFALSE.
VMware, Inc. 425
Chapter 19 Setting and Using Policies and Customizing VMware Player
Examples of Policy Scripts
Examplesincludeanauthenticationscript,ahosttoguestdatascript,andapoweron
hookscript.
SamplescriptsareinstalledwithVMwarePlayerinthefollowinglocation:
C:\Program Files\VMware\VMware Player\Samples
Example of an Authentication Script
Thisscriptexampleincludesthebasicelementsrequiredforanyauthenticationscript.
Thepurposeofanauthenticationscriptistodooneofthefollowing:
Iftheuseristobegrantedaccesstothevirtualmachine,generatethedatausedto
createthekeyforthisuserandsenditasoutput.Thedatamustbeuniqueforeach
user.Ifaccessisgranted,theexitcodeis0.
Iftheuseristobedeniedaccesstothevirtualmachine,thescriptexitswitha
nonzeroexitcode.Thisisareferencetotheexitcode,nottheoutputvalue.
Theoutputofthescriptishashedtocreateakeytoencryptanddecryptvirtualmachine
files.Thefirsttimethisscriptisrun,theoutputishashedtoencryptthevirtualmachine.
Whenavirtualmachineisdecrypted,thescriptmustreturnthesamevalue.Ifthescript
returnsadifferentvalue,thevirtualmachineisnotdecryptedandtheuserseesanerror
message.
Thescriptmayreturnanyvalue.Toensurebestsecurity,avaluethatincludesonly
printablecharactersshouldbeatleast32byteslong.Forbinarydata,thevalueshould
beatleast16byteslongtoensureproperentropy.TheoutputissenttotheStdOutfile.
ThefollowingexampleiswritteninPerl.ItisinstalledbyWorkstationas
sample_auth.pl.CompileitwithaPerlinterpretertorunit.
#
# VMware Sample Script
#
# Sample script for ACE script authentication
#
# Description:
# This sample script looks up the user as defined in the environment
# variable TEST_USERNAME and returns seed data that is used to make a key
# for authenticationpurposes.
#
# It assumes that the username is defined in the environment variable
# TEST_USERNAME (a ficticious environment variable used for this sample)
# and returns the seed data from a harcoded map of username to seed data.
#
# Input to script:
Workstation Users Manual
426 VMware, Inc.
# None.
#
# Returns:
# 0 if successful (user is correctly authenticated).
# -1 if TEST_USERNAME is not set, or the user is unrecognized.
#
# Expected output:
# Seed data for creating script authentication key on stdout.
#
# Notes:
# If the script returns success, its output will be used to create a key.
# Therefore, it is important that the output of this script be unique for
# each user, and that there is enough data to make a meaningful key (at
# least 16 bytes).
#
#
my %user_map= ( 'charlie' => 'E1C4F612135B4D98A33B2C9BD595025D',
'kathy' => 'C79AFFEF773D61225751C2566858DB08',
'beth' => '05B169B439B26AAB2EA4F755B7E3800C',
'ernie' => '8CE63D4AA2068BD8AFF2D1B05F3495A5',
'bert' => '"172B1619B2EFBE0E4F381AA1C428F049'
);
my $username = $ENV{TEST_USERNAME};
if (! defined $username) {
print "You should set the TEST_USERNAME environment variable.\n";
exit(-1);
}
my $key_seed = $user_map{$username};
if (! defined $key_seed) {
print "Unrecognized username.\n";
exit(-1);
}
print $key_seed;
exit(0);
Example of a Host to Guest Data Script
ThefollowingexampleiswritteninPerl.ItisinstalledbyWorkstationas
sample_hostdata.pl.YouneedaPerlinterpretertorunthisscript.
#
# VMware Sample Script
#
# Sample script for ACE Host-Guest Data script
#
VMware, Inc. 427
Chapter 19 Setting and Using Policies and Customizing VMware Player
# Description:
# This sample script passes information defined on the host to the guest.
# It assumes that the machine name is defined in the environment variable
# TEST_MACHINENAME and that the asset tag is defined in the environment
# variable TEST_ASSETTAG. (These are fictitious variables used for this # #
sample).
#
# Input to script:
# None.
#
# Returns:
# 0 if successful.
#
# Expected output:
# Set of acceptable key/value pairs where the values are fetched from the
# environment variables. These values can be retrieved from within the
# Guest operating system using the VMware Tools.
my $machine_name = $ENV{TEST_MACHINENAME};
my $asset_tag = $ENV{TEST_ASSETTAG};
my $host_mac = $ENV{TEST_MACHINEMAC};
if (defined $machine_name) {
print "machine.id = " . $machine_name . "\n";
}
if (defined $asset_tag) {
print "guestinfo.assetTag = " . $asset_tag . "\n";
}
if (defined $host_mac) {
printf "guestinfo.mac = " . $host_mac . "\n";
}
exit(0);
Example of a Power-On Hook Script
ThefollowingexampleiswritteninPerl.ItisinstalledbyWorkstationas
sample_poweron.pl.YouneedaPerlinterpretertorunthisscript.
#
# VMware Sample Script
#
# Sample script for ACE power-on hook
#
# Description:
# This sample script implements a power-on hook for ACE. This can be used
# in addition to authentication to control the circumstances under which an
# ACE is allowed to run.
Workstation Users Manual
428 VMware, Inc.
# This script assumes that the username is defined in the environment
# variable TEST_USERNAME (a ficticious environment variable used for this
# sample) and returns TRUE if the user is allowed to run, and FALSE
# otherwise.
# Input to script:
# None.
#
# Returns:
# TRUE if username is on white list.
# FALSE if username is not on white list or is undefined.
#
# Expected output:
# One of the strings "TRUE" or "FALSE"
#
#
my @white_list = ("alan", "bob", "mary", "sonia", "chris");
my $username = $ENV{TEST_USERNAME};
if (! defined $username) {
print "FALSE";
exit(0);
}
my @grepNames = grep(/$username/, @white_list);
if (@grepNames == 1) {
print "TRUE";
exit(0);
}
print "FALSE";
exit(0);
Customizing the VMware Player Interface on Windows
Hosts Only
YoucancustomizeseveralaspectsoftheVMwarePlayeruserinterfaceforACE
instancesthatrunonWindowshosts.Yousavethesecustomizationsinatextfileand
identifythattextfile,calledtheskinfile.
Create and Specify a Skin File
AskinfilecontainsparametersettingsforcustomizingtheVMwarePlayeruser
interface.Usethisfiletochangeapplicationicons,thetextthatappearsinthetitlebar,
andtochangethewayremovabledevicesarepresented.
ThisfeatureisavailableonlyforVMwarePlayerrunningonWindowshosts.
VMware, Inc. 429
Chapter 19 Setting and Using Policies and Customizing VMware Player
To create and specify a skin file
1 Useatexteditortocreateaskinfilethatincludestheparameterstocustomize.
Useonelineforeachparameterandusethefollowingform:
<parameter> = "<value>"
Foralistofvaluestouseinparameters,seeTable 192,Table 193,andTable 194.
Tocommentoutalineintheskinfile,beginthelinewiththepound(#)sign.
2 Savetheskinfilewiththefilenameskin.txtintheACE Resourcesdirectoryin
thevirtualmachinedirectoryfortheACEenabledvirtualmachine.
Thefilenamemustbeskin.txt.
3 (Optional)TodisplayapplicationiconsotherthantheVMwarePlayericon,place
thenew.icoiconfilesintheACE Resourcesdirectory.
Foriconssizesandskinfileparameters,seeCustomizingtheVMwarePlayer
Iconsonpage 429.
4 InWorkstation,closetheACEenabledvirtualmachine.
5 UseatexteditortoopentheaceMaster.datfileinthevirtualmachinedirectory
andaddthefollowingline:
vmplayer.skin = "skin.txt"
BecausetheskinfileisintheACE Resourcesdirectory,youdonotneedtospecify
thedirectorypathtothefile.
6 SaveandclosetheaceMaster.datfile.
7 (Optional)Todeterminewhethertheparametersaresetcorrectly,previewthe
virtualmachineinVMwarePlayer.
SeeUsePreviewModetoTestPolicyandDeploymentSettingsonpage 448.
Customizing the VMware Player Icons
VMwarePlayerhasseparatelargeandsmallapplicationicons.Thelargeiconisused
intheapplicationswitchinginterface(visiblewhenyoupressAlt+Tab).Thesizeofthe
largeiconisusually32x32pixels,butVMwarePlayeruseswhateversizeisspecifiedfor
iconsizeinthesystempreference.Thesmall(16x16pixels)iconisusedintheVMware
PlayertitlebarandontheWindowstaskbarbuttonforVMwarePlayer.
Workstation Users Manual
430 VMware, Inc.
Theiconsusedforthesepurposesmustbein.ico fileformatandlocatedintheACE
Resourcessubdirectoryinthevirtualmachinedirectory.Theapplicableparametersin
theskinfileincludethefollowing:
player.iconSmall = "<filename>"
player.iconLarge = "<filename>"
One.icofilecancontainmultipleiconsofdifferentsizes.Youcanspecifythesame
.icofileforplayer.iconSmallandplayer.iconLarge.VMwarePlayerextractsthe
iconoftheappropriatesizeforeachuse.
Customizing the Title Bar Text
YoucanspecifywhattextappearsintheVMwarePlayertitlebar.Youcanalsospecify
thefontandfontsizeusedtodisplaythetext.
Thetextdisplayedinthetitlebarconsistsofthreesections:aprefix,thevirtualmachine
name,andasuffix.TheparameterslistedinTable 192allowyoutosetanyprefixand
suffix,ortoomittheprefix,thesuffix,orboth.Theyalsoallowyoutoincludeoromit
thevirtualmachinename.
Ifyouleavethedefaultsforallvalues,thetitlebardisplaysonlythevirtualmachine
nameat32pointsintheMSShellDlgfont.
Table 192describestheVMwarePlayertitletextparameters.
Customizing the Removable Device Display
RemovabledevicesarerepresentedintheVMwarePlayerinterfaceeitherbybuttons
onatoolbarorbymenuitemsonaDevicesmenu.Youcanspecifythetypeofdisplay.
Youcanalsospecifytext,icon,oracombinationofthetwoandspecifycustomicons.
Ifyouusecustomicons,copytheiconfilestotheACE Resourcesdirectoryinthe
virtualmachinedirectoryfortheACEenabledvirtualmachine.
Table 19-2. VMware Player Title Text Parameters
Parameter Type Default Controls
player.title.prefix string Titlebarprefix
player.title.useVMName Boolean TRUE Whetherthevirtual
machinenameisdisplayed
player.title.suffix string Titlebarsuffix
player.title.font.face string MSShellDlg Fontname(thefontmustbe
ontheuserscomputer)
player.title.font.size integer 32 Pointsizeforthetext
VMware, Inc. 431
Chapter 19 Setting and Using Policies and Customizing VMware Player
SettingsyoumakeintheskinfileoverrideanysettingstheusermakesintheVMware
Playerpreferencesdialogbox.
Usethefollowingparametertocontrolwhetherdevicesareshownastoolbaritems:
player.deviceBar.toplevel = [TRUE | FALSE]
SettheparametertoTRUEforatoolbarorFALSEforamenu.
UsetheparametersshowninTable 193tocustomizethedisplayforeachremovable
deviceconfiguredinthevirtualmachine.
Table 19-3. Removable Devices Parameters
Parameter Type Default Controls
player.deviceBar.
<deviceName>.buttonStyle
string(text,icon,
texticon)
text Appearanceoftoolbar
buttonormenuitem
player.deviceBar.
<deviceName>.buttonText
string Userfriendly
devicename
Textthatappearsonthe
toolbarbuttonormenu
itemwhendeviceis
connected
player.deviceBar.
<deviceName>.buttonTextD
isconnected
string(optional) Normalbuttontext Textthatappearsonthe
toolbarbuttonormenu
itemwhendeviceis
disconnected
player.deviceBar.
<deviceName>.tooltip
string Textthatappearsinthe
tooltipwhendeviceis
connected
player.deviceBar.
<deviceName>.tooltipDisc
onnected
string(optional) Normaltooltip Textthatappearsinthe
tooltipwhendeviceis
disconnected
player.deviceBar.
<deviceName>.icon
filename Iconrepresenting
thistypeofdevice
Customiconfilewhen
deviceisconnected
player.deviceBar.
<deviceName>iconDisconne
cted
filename(optional) Normalicon Customiconfilewhen
deviceisdisconnected
player.deviceBar.
<deviceName>.shortcutKey
keySpec Shortcutkeycombination
toswitchthedevice
betweenconnectedand
disconnected(see
ShortcutKeyValueson
page 432)
Workstation Users Manual
432 VMware, Inc.
Followingarethedevicenamesyoucanusefor<deviceName>intheparametername:
floppy0,floppy1
serial0,serial1,serial2,serial3
parallel0,parallel1,parallel2
ide0:0,ide0:1,ide1:0,ide1:1(IDECDROMorharddrives)
scsi0:0scsi0:7(SCSICDROMorharddrives)
Shortcut Key Values
Usevirtualkeycodestospecifykeyboardshortcuts.Virtualkeycodesusehexadecimal
format,whichisahexadecimalnumberprecededby0x.Forexample,tousethevirtual
keycodeof5Aasavalue,type0x5A.
MicrosoftprovidesareferencelistofvirtualkeycodesonitsMSDNWebsite.
YoucanalsousetheCtrl,Alt,andShiftmodifierkeys,oracombinationofthosekeys.
Table 194providestheshortcutkeyvalues.
.
Whenyoulistakeyplusamodifier,typethevirtualkeycodeforthekeyfollowedby
acomma,followedbythevalueforthemodifierkeyorkeys.Forexample,thevalue
entryforCtrl+Shift+F1is0x70,0x6.
Table 19-4. Shortcut Key Values
Modifier key Value
Nomodifier 0x0
Alt 0x1
Ctrl 0x2
Shift 0x4
Ctrl+Alt 0x3
Alt+Shift 0x5
Ctrl+Shift 0x6
Ctrl+Alt+Shift 0x7
VMware, Inc. 433
Chapter 19 Setting and Using Policies and Customizing VMware Player
Keepthefollowinglimitationsinmindwhendefiningshortcutkeys:
DonotusethePausekeywiththeCtrlkey.
IfyouuseF12,youmustuseoneormoremodifierkeys.YoucannotuseF12alone.
YoucannotusecombinationsthatincludeonlytheShift,Ctrl,andAltkeys.You
canusethesekeysonlyasmodifiersincombinationwithsomeotherkey.
Sample Skin File
player.title.prefix = "Our Company <<"
player.title.suffix = ">> Environment"
# player.title.useVMName = "FALSE
# player.deviceBar.toplevel = TRUE
player.deviceBar.floppy0.buttonStyle = "icon"
player.deviceBar.floppy0.buttonText = "First Floppy Drive"
player.deviceBar.floppy0.shortcutKey = "0x30,0x7"
player.deviceBar.floppy0.icon = "custom-floppy.ico"
player.deviceBar.floppy0.tooltip = "Click to disconnect"
player.deviceBar.floppy0.tooltipDisconnected = "Click to connect"
# player.deviceBar.ethernet0.buttonStyle = "icon"
# player.deviceBar.ide1:0.buttonStyle = "icon"
# player.deviceBar.audio.buttonStyle = "icon"
Workstation Users Manual
434 VMware, Inc.
VMware, Inc. 435
20
ThischapterprovidesinstructionsforspecifyingdeploymentsettingsforACE
packages,creatingACEpackages,anddeployingpackagestoendusers.Thischapter
includesthefollowingtopics:
EditDeploymentSettingsonpage 435
ACEResourcesDirectoryonpage 446
ReviewtheConfigurationofanACEEnabledVirtualMachineonpage 447
UsePreviewModetoTestPolicyandDeploymentSettingsonpage 448
CreatingaPackageonpage 449
PerformanEndtoEndDeploymentTestonpage 455
DeployPackagesonpage 456
Edit Deployment Settings
Deploymentsettingsenableyoutoconfigurepackagecharacteristics,suchasinstance
customizationandencryption,andthenapplythosesettingstoasmanypackagesas
youchoose.Changestodeploymentsettingsaffectonlypackagescreatedafterthe
changesaremade.Theydonotapplytoexistingpackages.
Beforeyoucanusethedeploymentsettingseditoronavirtualmachine,youmust
enableACEfeaturesforthatvirtualmachine.SeeOverviewofCreatingand
DeployingACEPackagesonpage 385.
Deploying ACE Packages 20
Workstation Users Manual
436 VMware, Inc.
To edit deployment settings
1 SelecttheACEenabledvirtualmachineandchooseVM>ACE>Deployment
Settings.
2 Inthedeploymentsettingseditor,selectanitemintheSettinglist.
3 CompletethesettingspanelforthatdeploymentsettingandclickOKorselect
anothersettingtoedit.
Forassistancewiththefieldsonasettingspanel,clickHelp.
Encryption Settings
Encryptionsettingsareoftwotypes:
PackageprotectionProtectspackagefilesfrombeingcopiedoralteredwhilein
transit.IfyousetpackageprotectiontoEncrypted,theNewPackagewizard
encryptsthevirtualmachinewhenapackageiscreated.
InstanceprotectionProtectsACEinstancefilesfrombeingcopiedoralteredafter
installationandactivation.Youmustspecifyanauthenticationmethodifyouwant
theinstallertoencrypttheACEinstance.
Theactivationandauthenticationpoliciesyouchoosedeterminewhichdefault
encryptionsettingsareappliedtothepackageandfiles.SeeSettingAccessControl
Policiesonpage 391.VMwarerecommendsthesedefaultsettingsforproduction
environments.Thefilesdonotneedtobeencryptedwhenyoudeployapackageina
testenvironment.
Package Lifetime Settings
YoucanspecifyatimeperiodduringwhichanACEpackageisinstallable.Ifauser
attemptstoinstallapackageoutsideofthistimeperiod,anerrormessageappearsand
thepackageisnotinstalled.
Theadministratorcanchangethepackagelifetimesettingsonmanagedpackageseven
afterpackagecreation.
NOTEIfyousettheencryptionsettingstoNone,anyverificationspecifiedinthe
resourcesigningpolicyisnotperformed.Theencryptionpackagesettingoverridesthe
resourcesigningpolicysetting.SeeSettingResourceSigningPoliciesonpage 401.
VMware, Inc. 437
Chapter 20 Deploying ACE Packages
Change Package Lifetime Settings for a Managed Package
IfyouusetheACEManagementServer,youcanchangethepackagelifetimesettings
ordeactivateapackageimmediately.
Beforeyoubegin,makesureWorkstationisconnectedtotheACEManagementServer.
Forinformationaboutinstallingandsettinguptheserver,seetheACEManagement
ServerAdministratorsGuide.
To change package lifetime settings for a managed package
1 SelecttheACEenabledvirtualmachineandchooseView>CurrentView>
Summary.
2 ClickthePackagessectiontab.
3 Rightclickthepackageanddooneofthefollowing:
TochangethepackagelifetimesettingschooseProperties>Settings.
TodeactivatethepackageimmediatelychooseDeactivate.
Instance Customization on Windows Guests Only
InstancecustomizationappliesonlytoACEinstancesthathaveaWindowsguest
operatingsysteminstalled.Theinstancecustomizationprocessisbuiltaroundthe
standardMicrosoftSysprepdeploymenttools.Itprovidesthefollowingbenefits:
AutomatestheSysprepprocess(theuseoftheMicrosoftSysprepdeployment
tools).ItgivesyoubettercontrolofsomeSysprepparameters,suchascomputer
name.
AutomatesjoiningACEinstancestoadomainfromaremotesite.SeeSetUpa
RemoteDomainJoinonpage 443.
FormanagedACEinstances,theinstancecustomizationprocessontheusers
machinereportsthesuccessorfailureoftheprocesstotheserver.Theinformation
isavailableintheinstanceviewofWorkstation.Besidesstatus,theprocessalso
reportstheMACaddressandthenewcomputername.
Workstation Users Manual
438 VMware, Inc.
Instance Customization Process During Packaging
Ifyouspecifyinstancecustomizationdeploymentsettings,thefollowingeventsoccur
whenyoucompletetheNewPackagewizard:
1 AsnapshotoftheACEenabledvirtualmachineistakenandsaved.
2 TheACEenabledvirtualmachineispoweredon,andalltherequireddeployment
toolsandfiles,includingtheappropriateMicrosoftSyspreptools,arecopiedinto
theguest.
Thereisnovisibleindicationshowingthecopyingprocess.SeeDownloadthe
MicrosoftSysprepDeploymentToolsonpage 440.
3 TheMicrosoftdeploymenttoolsruninsidetheguestoperatingsystemtosealthe
guestandpreparefordeployment.
4 Theguestoperatingsystemshutsdown.
5 TheACEenabledvirtualmachineisclonedintothepackagedirectory.
Thevirtualmachinefilesarecopiedintothedirectory,encryptedifsettodoso,and
dividedtobeputonmediaifsettodoso.
6 TheACEenabledvirtualmachinerevertstothesnapshot.
7 Thesnapshotisdeleted.
8 Theinstallerfilesarecopiedintothepackagedirectory.
Instance Customization on the End Users Machine
OntheACEusersmachine,aftertheinstallationandinstanceactivation,thefollowing
eventsoccur:
1 Allinformationrequiredforresolvingplaceholdervariablesisobtained.
2 PlaceholdervariablesareresolvedandreplacedwiththeactualvaluesfortheACE
instance.
SeePlaceholderValuestoUseinInstanceCustomizationonpage 442.
3 TheMicrosoftMiniSetupprocessrunsunattended.
IftheMiniSetupprocessfails,theACEinstanceshutsdown.
4 (Optional)Additionalcommandstoexecuteotherscriptsthatyouspecifiedinthe
instancecustomizationdeploymentsettingsareexecuted.
VMware, Inc. 439
Chapter 20 Deploying ACE Packages
5 (Optional)Ifyouconfiguredaremotedomainjoin,thesoftwareexecutesthescript
youspecified,connectstheACEinstancetotheVPNserver,andjoinsthevirtual
machinetothedomain.
SeeSetUpaRemoteDomainJoinonpage 443.
6 Formanagedinstances,instancecustomizationisreportedtotheserverifitis
successful.
Prerequisites for Using Instance Customization
InstancecustomizationisavailableforbothmanagedandstandaloneACEinstances.
Beforeyouspecifyinstancecustomizationsettings,performthefollowingtasks:
InstallaWindows2000,32bitor64bitXPProfessional,Server2003,Vista,or7
guestoperatingsystemonanACEenabledvirtualmachine.
InstallthelatestversionofVMwareToolsontheguestoperatingsystem.See
InstallingVMwareToolsonpage 104.
DownloadtheMicrosoftSyspreptools.SeeDownloadtheMicrosoftSysprep
DeploymentToolsonpage 440.
Gatherthefollowinginformation:
TheWindowsproductIDfortheguestoperatingsysteminstallation.
IftheACEinstancewillbejoinedtoadomain(whethertheinstanceislocalor
remotetothedomain),theusernameandpasswordforanaccountthathas
permissiontoaddcomputerstothedomain.
RemotedomainjoinparametersifaremoteACEinstancewillbejoinedtoa
domain.SeeSetUpaRemoteDomainJoinonpage 443.
Workstation Users Manual
440 VMware, Inc.
Download the Microsoft Sysprep Deployment Tools
YoudonotneedtodownloadMicrosoftSysprepdeploymenttoolsifyouhavea
WindowsVistaandWindows7operatingsystem.TheyareincludedwiththeWindows
VistaandWindows7installation.
To download the Microsoft Sysprep deployment tools
1 GototheMicrosoftWebsiteandsearchforSysprepdeploymenttools.
2 FollowtheinstructionsonthesitefordownloadingtheSysprepdeploymenttools.
Downloadallversionsthatcorrespondtotheguestoperatingsystemsthatyou
plantodeploy.ThesetoolsincludeSysprepdeploymenttoolsforWindows2000,
Windows2003,andWindowsXPProfessionalSP1andSP2.TheSP1versionworks
withWindowsXPProfessionalwithnoservicepackandWindowsXPProfessional
SP1.
3 Unzipthefilesintothecorrespondingversionspecificdirectoryinthe
Resources\SysprepToolsdirectory.
Forexample,forWindowsXPSP3,unzipthefilesto:
C:\Program Files\VMware\VMware Workstation\Resources\SysprepTools\xpsp3
Specify Deployment Settings for Instance Customization
Beforeyoubegin,installallrequiredfilesforcustomizationscripts.SeePrerequisites
forUsingInstanceCustomizationonpage 439.
To specify deployment settings for instance customization
1 SelecttheACEenabledvirtualmachineandchooseVM>ACE>Deployment
Settings.
2 SelectInstanceCustomizationandcompletethesettingspanel.
VMware, Inc. 441
Chapter 20 Deploying ACE Packages
3 SelectSystemOptionsandcompletethesettingspanel.
Usethefollowinginformationtocompletethefields:
SystemoptionsYoucanuseplaceholdervariablesforthesystemname,
organizationname,andcomputername.Fordetailsontheplaceholder
variables,includinganexample,seePlaceholderValuestoUseinInstance
Customizationonpage 442.
Ifyousetthe%logon_user%placeholderinthosefieldsandtheplaceholder
variableresolvestoadministrator,thesoftwareautomaticallychangesthe
valuetoarandomalphanumericstringof10characters.
SecurityIDAnewSIDisalwaysgeneratedforWindowsVistaand
Windows7guests,regardlessofthesettingyouchoosehere.
4 SelectInitializationScriptsandtypetheadditionalcommandstorunscriptsinthe
guestoperatingsystemattheendoftheMiniSetupprocessontheACEusers
machine.
Formoreinformationaboutcommands,seetheMicrosoftdeploymenttools
documentation.
Specifythepathtothebatchfilewithoutusingquotationmarks.Quotationmarks
areaddedautomatically.Formoreinformation,seetheMicrosoftknowledgebase
articleabouttroubleshootingCmdlines.textduringanunattendedsetup.
5 SelectWorkgrouporDomainandcompletethesettingspanelusingthefollowing
information:
InstancecustomizationsupportsonlyIPaddressesthatDHCPservers
provide.StaticIPaddressesarenotsupported.
ToallowthisACEinstancetojointhedomainfromalocationremotetothe
domain,seeSetUpaRemoteDomainJoinonpage 443.
6 SpecifyothertypesofdeploymentsettingsorclickOK.
Tocreateapackagewiththesesettings,seeCreatingaPackageonpage 449.
CAUTIONTheMiniSetupprocessfailsifyouenteradministratorinthe
NamefieldortheComputerNamefieldorforWindowsVistaandWindows
7guests,ifthecomputernameismorethan15characters.
Workstation Users Manual
442 VMware, Inc.
Placeholder Values to Use in Instance Customization
Useplaceholdervaluestoconstructmachinespecificnamesinsidetheguestoperating
systemduringtheMiniSetupprocess.
Followingaretheavailableplaceholders:
%logon_user%or%logon_user(n)% Theuserloggedintothehostmachineat
thetimetheMicrosoftMiniSetupprocessbegins.
Youcanuse%logon_user(n)%,where<n>isthemaximumnumberofcharacters
obtainedfromtheactualloggedinuserwhenthenameisresolved.Use<n>ifyou
theusernamemustberesolvedtonomorethanacertainnumberofcharacters.
Forexample,ifyouspecifythat3randomcharactersaretobeaddedtotheactual
usernameandyouwanttolimittheresolvednameto15characters,set<n>to12.
YourentryintheNamefieldintheSystemOptionspanelis
%logon_user(12)%%random_alpha_digit(3)%.
Including(n)intheplaceholderisoptional.Ifyouuseonly%logon_user% orif
youset<n>tozero(0),theplaceholderresolvestothefullloggedinusername.
%host_name% or %host_name(n)% Thenameofthehostcomputer(usually
usedwithsomeadditionalrandomnumberorname).
Youcanuse%host_name(n)%,where<n>isthemaximumnumberofcharacters
obtainedfromtheactualcomputerhostnamewhenthenameisresolved.Use<n>
ifthehostnamemustberesolvedtonotmorethanacertainnumberofcharacters.
Forexample,ifyouspecifythat3randomcharactersaretobeaddedtotheactual
hostnameandyouwanttolimittheresolvednameto15characters,set<n>to12.
YourentryintheComputerNamefieldintheSystemOptionspanelis
%host_name(12)%%random_alpha_digit(3)%.
Including(n)intheplaceholderisoptional.Ifyouuseonly%host_name%,orif
youset<n>tozero(thatis,theplaceholderresolvestothefullhostname.
%random_alpha_digit(n)%Arandomlygeneratedstringoflettersand
numbers,where<n>isthenumberofcharacters.Youmustspecify<n>.
%random_alpha(n)%Arandomlygeneratedstringofletters,where<n>isthe
numberofcharacters.Youmustspecify<n>.
%random_digit(n)%Arandomlygeneratedstringofnumericcharacters,where
<n>isthenumberofcharacters.Youmustspecify<n>.
ForWindowsVistaandWindows7guests,ifthecomputernameismorethan15
characters,theMiniSetupprocessfailsontheusermachine.
VMware, Inc. 443
Chapter 20 Deploying ACE Packages
Specify Additional License Information for Windows Server Products
TosupplyadditionallicenseinformationforWindowsServerproducts,youcanadda
filenamedsysprep_license.txttotheACEenabledvirtualmachinedirectory.
To specify additional license information for Windows Server products
1 Useatexteditortocreateafilenamedsysprep_license.txtinthevirtual
machinedirectoryfortheACEenabledvirtualmachine.
2 Addthefollowinglinetothefile:
AutoMode=[PerSeat | PerServer]
Thislineindicateswhetherthelicenseisforoneclientlicenseorforacertain
numberofclientlicensesforaserver.
3 IfAutoModeissettoPerServer,addthefollowinglinetothefile,where<n>
indicatesthenumberofclientlicensesfortheserver:
AutoUsers=<n>
4 Saveandclosethefile.
Formoreinformation,gototheMicrosoftTechNetWebsiteandintheWindowsServer
Library,searchfor[LicenseFilePrintData](Sysprep).
Ifthisfileisnotfoundinthevirtualmachinedirectory,adefaultisused.AutoModeis
settoPerServerwith5clientlicenses.
Ifyousupplythisfile,thelicenseportionoftheMiniSetupprocessappearsunchanged
duringpreview.YoualwaysseeAutoMode=PerServerandAutoUsers=5inthe
MiniSetupuserinterface.Thelicenseinformationyousupplyisneverthelessset
correctlybytheMiniSetupprocess.
Set Up a Remote Domain Join
TheremotedomainjoinfeatureprovidesanautomatedwaytojoinACEinstancestoa
domainfromaremotesite.
AftertheACEpackageisinstalledontheendusersmachineandtheACEinstanceis
activatedandauthenticated,theMicrosoftMiniSetupprocessruns.Thescriptfor
joiningtheremoteACEinstancetothedomainexecutesattheendofthatprocess,and
themachineisjoinedtothedomain.
Workstation Users Manual
444 VMware, Inc.
Beforeyoubegin,performthefollowingtasks:
DeterminewhichVPNclienttodownload.TheVPNclientmustsupporta
commandlineinterfacesothatascriptcanbeusedforloggingintotheVPN
server.YoumightneedtocontacttheVPNproductstechnicalsupporttofindout
whethertheVPNclientsupportsacommandlineinterface.
ObtainaVPNaccountforloggingintotheserver.Credentialsincludeausername
andpassword.Randomlygeneratedsecuritytokenscannotbeusedaspasswords.
Forexample,youcannotuseanRSAsecuritytoken.
DeterminethefollowinginformationtousefortheVPNclientprofile:the
companysgroupandpasswordinformationandthenameoftheVPNserverto
contacttoestablishasecureconnection.
DeterminethenameofthedomainthatyouplantoaddtheACEinstanceto.
Determinetheusernameandpasswordforanaccountthathaspermissiontoadd
computerstothedomain.
To set up a remote domain join
1 IntheguestoperatingsystemoftheACEenabledvirtualmachine,installaVPN
clientthatsupportsacommandlineinterface.
2 UsetheVPNclientsoftwaretoconfigureaprofileforthisclient.
TheprofileintheVPNclientcontainsacompanysgroupandpassword
informationanddetermineswhichservertocontacttoestablishasecure
connection.
3 Writea.batscriptthatallowsremoteexecutionduringtheinstancecustomization
process.
Followingisanexampleofa.batscriptforaCiscoVPNclient:
"net" start "Cisco Systems, Inc. VPN Service"
"C:\Program Files\Cisco Systems\VPN Client\vpnclient.exe" connect
<profile_name> user <vpn_user_name> pwd %1 >> vpnlogs.txt
Thisexampleconsistsoftwolines.ThecommandinthefirstlinestartstheCisco
VPNclientsbackgroundservice.Thecommandinthesecondlineconnectstothe
CiscoVPNusingacommandlineinterface.ItsuppliesthenameoftheVPNprofile
andthecredentialsforloggingintotheVPNserver.Theexampleusesthe
passwordplaceholdervariable,butyoucouldalsouseastaticpasswordforthe
VPNaccount.Astaticpasswordincludedinascriptissentincleartext.
VMware, Inc. 445
Chapter 20 Deploying ACE Packages
4 Savethe.batfileontheC:driveoftheguestsfilesystem.
5 InWorkstation,selecttheACEenabledvirtualmachineandchooseVM>ACE>
DeploymentSettings.
6 SelectWorkgrouporDomain.
7 Inthesettingspanel,selectDomainandspecifyanorganizationalunitanduser
nameforanaccountthathaspermissiontoaddcomputerstothedomain.
AnexampleofanentryintheOUfullpathfileis
OU=orgunits,DC=dpt,DC=domain,DC=com.
IftheACEenabledvirtualmachineismanaged,passwordsandcommandsare
storedonACEManagementServer.
IftheACEenabledvirtualmachineisstandalone,passwordsandcommandsare
storedwiththepackage.Besuretouseencryptionforthepackage.
8 SelectEnableRemoteDomainJoin.
9 SpecifythepasswordforloggingintotheVPNserver.
Youcanthenusethe%password%placeholdervariableintheCommandtextbox
torefertothispassword.
10 Enterthecommandthatexecutesthescript.
Forexample,ifyounamethe.batscriptvpn.batandwanttousethepassword
placeholdervariable,enterthefollowingcommand:
C:\vpn.bat%password%
Ifyouuseapasswordplaceholdervariable(%password%)intheCommandfield,
theplaceholdervariableisresolvedandreplacedwiththevaluefromthe
Passwordfieldwhenthescriptexecutes.
11 ClickOK.
Tocreateapackagewiththesesettings,seeCreatingaPackageonpage 449.
Custom EULA Settings
Youcanprovideacustomenduserlicenseagreement(EULA)thatappearswhenan
ACEinstanceisactivated.Theusermustseeandaccepttheagreementbeforethe
instancecanrunforthefirsttime.
Workstation Users Manual
446 VMware, Inc.
ThecustomEULAmustbeatextfilelocatedintheACE Resourcesdirectoryforthe
ACEenabledvirtualmachine.Thefilecanusethefollowingformats:
ForWindowshosts,usea.txtor.rtffile.
ForLinuxhosts,usea.txtfile.
IfyouplantodeploythepackagetobothWindowsandLinuxcomputers,usea
.txtfile.
TospecifywhethertodeploytoWindowshosts,Linuxhosts,orboth,usethe
DeploymentPlatformsettinginthedeploymentsettingseditor.
Deployment Platform Settings
Bydefault,ACEpackagesarecreatedforWindowshosts.Changethissettingtodeploy
toLinuxorbothLinuxandWindowshosts.
ACE Resources Directory
TheACE ResourcesdirectoryisasubdirectoryoftheACEenabledvirtualmachines
directory.AllfilesplacedinthisdirectoryarecopiedintotheACEpackagesothatthey
canbeusedinendusersvirtualmachines.
PlacethefollowingtypesoffilesintheACE Resourcesdirectory:
Authenticationscripts
SeeUsinganAuthenticationScriptonpage 394.
Poweronandpoweroffscripts
SeeIncludeaPowerOnandPowerOffScriptinthePackageonpage 394.
Otherresourcefilesthatauthentication,poweron,orpoweroffscriptscall
DevicefilessuchasISOimagesorFLPimagesthatthevirtualmachineis
configuredtopointto
Theskinfile,whichyoucancreatetocustomizetheVMwarePlayericons,
removabledeviceicons,andtitlebartextusedintheVMwarePlayeruserinterface
onWindowsguests
SeeCreateandSpecifyaSkinFileonpage 428.
VMware, Inc. 447
Chapter 20 Deploying ACE Packages
IconfilesforremovabledevicesortheVMwarePlayerapplication
SeeCustomizingtheVMwarePlayerIconsonpage 429andCustomizingthe
RemovableDeviceDisplayonpage 430.
CustomEULAs
SeeCustomEULASettingsonpage 445.
WhenyouusetheACE Resourcesdirectory,takethefollowingconsiderationsinto
account:
DonotplacefilesinasubdirectoryoftheACE Resourcesdirectory.Ifscriptsor
skinfilesreferenceotherfiles,placethoseotherfilesinthemainACE Resources
directory.Makesurethescriptusesrelativepathstoreferencethoseresources.
AresourceisconsideredanyfileintheACE Resourcesdirectory.Youcanspecify
whethertoverifyallfilesintheACE Resourcesdirectoryorjustthepolicyscripts
inthatdirectory.Formoreinformation,seeSettingResourceSigningPolicieson
page 401.
IfyouchangeapolicyorpackagesettingthatrequirestheACE Resources
directory,youmustcreateanupdatepackagetodeploythechangetoendusers.
Review the Configuration of an ACE-Enabled Virtual
Machine
TofinishpreparingyourACEenabledvirtualmachineanditsfilesforpackaging,
reviewitsconfigurationandpoliciesandensurethattheappropriateoperatingsystem
andsoftwareareinstalledinit.
To review the configuration of an ACE-enabled virtual machine
1 VerifythattheACEenabledvirtualmachinehasthenecessaryoperatingsystem,
applicationsoftware,andVMwareToolsinstalled.
SeeInstallingVMwareToolsonpage 104.Forguestoperatingsystemsupport,
knownissues,andinstallationinstructions,seetheonlineVMwareCompatibility
Guide.GototheVMwareWebsiteandselectResources>CompatibilityGuides,
andclicktheViewtheGuest/HostOStabontheVMwareCompatibilityGuide
Websitelink.
2 Toreviewconfigurationsettings,selecttheACEenabledvirtualmachineand
chooseView>CurrentView>Summary.
3 Toreviewvirtualmachinedevicesandvirtualhardware,clicktheDevicestabin
thesummaryview.
Workstation Users Manual
448 VMware, Inc.
4 Toreviewvirtualmachineconfigurationoptions,clicktheOptionstab.
5 Tomakechangestodevicesoroptions,clickEditvirtualmachinesettingsinthe
Commandslist.
6 Toreviewpoliciesanddeploymentsettings,clicktheACEtab.
7 Tomakechangestopoliciesordeploymentsettings,clickEditpoliciesorEdit
deploymentsettingsintheCommandslist.
Use Preview Mode to Test Policy and Deployment
Settings
Previewmodeenablesyoutoseetheeffectsofchangedpolicieswithouthavingto
packageanddeploythem.Previewmodealsoenablesyoutoseetheeffectsofsetup
choiceswithouthavingtocreate,deploy,andinstallafullpackage.
Beforeyoubegin,verifythatthesettingsanddeploymentplatformsyouwanttotest
areappropriateforpreviewmode.BecauseACEfeaturesareavailableonlyinthe
WindowsversionofWorkstation,youcannotusepreviewmodetorunACEinstances
createdforLinuxhosts.Youalsocannottestahostpolicyinpreviewmode.TotestACE
instancesthatyouplantodeployonLinuxhosts,orforwhichyouwanttotestahost
policy,seePerformanEndtoEndDeploymentTestonpage 455.
YoucanruntheACEinstanceinpreviewmodeinVMwarePlayerandalsorunthe
ACEenabledvirtualmachineinWorkstationwithouthavingtoshutdownthe
preview.
To use preview mode to test policy and deployment settings
1 OpentheACEenabledvirtualmachinetotest.
2 Inthesummaryview,clickEditpoliciesintheCommandslist.
3 InthePolicylist,selectthepolicytochange,completethesettingspanelforthat
policy,andclickOK.
NOTEYoucanrunanyACEenabledvirtualmachinedirectlyinWorkstationtobesure
thattheguestoperatingsystemandapplicationsperformasexpected.However,an
ACEenabledvirtualmachinerunninginWorkstationdoesnotrespectanypoliciesthat
restrictitsfunctionality.
VMware, Inc. 449
Chapter 20 Deploying ACE Packages
4 Inthesummaryview,clickthePreviewinPlayerintheCommandslist.
Apackagebasedonalinkedcloneiscreatedinanewdirectory,Preview
Deployment,insidetheACEenabledvirtualmachinesdirectory.Thelinkedclone
iscreatedfromasnapshotofthevirtualmachinescurrentstate.Unlikeapackage
thatisdeployedtoanACEusersmachine,thispackageisnotinstalled.
VMwarePlayerallowsyoutoactivateandauthenticatetheACEinstance(ifthose
policiesareset).Ifconfigured,instancecustomizationisalsoperformed.Theguest
operatingsystemstarts.
5 TestthepolicychangeintherunningACEinstancetoensurethatitistheoneyou
wanttomake.
PreviewmodeenablesVMwarePlayertoruninteractivelysothatyoucanseeany
instancecustomizationerrorsandmakecorrectionsasneeded.
6 (Optional)Tomakeadditionalchangestopoliciesordeploymentsettings,shut
downthevirtualmachineandrepeatthisprocedure.
YoucanhaveonlyonepreviewinstanceperACEenabledvirtualmachine.When
youclickPreviewinPlayerasecondorsubsequenttime,amessageasksifyou
wanttoreplacethecurrentpreviewinstancewithanewdeploymentorusethe
existingdeployment.
Tochangeonlypoliciesandnotrepeattheactivationandinstancecustomization
steps,usetheexistingdeployment.
7 IfACEManagementServerismanagingthevirtualmachine,clickPublish
PoliciestoServer.
Creating a Package
AfteryoucreateanACEenabledvirtualmachineandconfigurepolicies,devices,and
deploymentsettings,usetheNewPackagewizardtocreateapackagethatyoucan
deploytousers.
ForpackagesthatyouplantodeploytoWindowshosts,youcanspecifythatthe
packagebedistributedthroughanetworkimageorthroughDVDsorCDs.ForDVD
andCDdistribution,thepackageisdividedintofilesthatfitonstandarddiscs.
NOTETocreateaPocketACEpackagefordistributiononportabledevices,usethe
PocketACEPackagewizardratherthantheNewPackagewizard.SeeCreateaPocket
ACEPackageonpage 460.
Workstation Users Manual
450 VMware, Inc.
Overview of Package Creation and Validation
DependingonwhetheryouwanttodeployanewACEinstanceorupdateaninstalled
one,youcancreateanyofthefollowingtypesofpackages:
FullIncludesaninstallerandtheadditionalfilesneededtoinstallanACE
packageandtheVMwarePlayerapplicationthatrunstheACEinstance.Afull
packageallowsyoutocreateacompletelynewACEinstance.
PolicyUpdateorServerUpdateIncludesjustthepolicyrelatedfiles.
ForstandaloneACEenabledvirtualmachines,theoptionisPolicyUpdate.
Formanagedvirtualmachines,theoptionisServerUpdate.
Amongotherpolicies,aserverupdatepackageallowsyoutochangethe
serverthattheACEenabledvirtualmachineisassociatedwithorchangean
activationonlyserversetuptoanactivationandtrackingsetup.
CustomAllowsyoutochoosespecificitemstodeploy.
PocketACEThecomponentsforaPocketACEpackagevaryslightlyfromthose
forthefullpackage.ForinformationaboutthePocketACEpackage,seeCreatea
PocketACEPackageonpage 460.
ThedeploymentsettingsanddevicesettingsthatyoualreadysetforanACEenabled
virtualmachineallowyoutocreatemultiplepackagesquickly.Youcanusethesame
settingsagainandagain.
PackagevalidationoccursafteryoucompletetheNewPackagewizard.Package
validationdoesthefollowing:
ChecksthatallfilesthattheACEenabledvirtualmachinerequiresarepresent.
Thosefilesinclude:
Diskandsnapshotfiles
Scriptfiles(ifanypolicyisusingscripts)
CAUTIONIfyoureplaceanexistingACEinstancebysupplyinganewfull
package,endusersloseanydataorcustomsettingsstoredintheolderACE
instance.
NOTEPackagevalidationdoesnotcheckfordevicefiles(ISOimages,FLPimages,
andsoon).Toincludedevicefilesinthepackage,putthefilesintheACE
ResourcesfolderfortheACEenabledvirtualmachineandsetthedevicestopoint
tothatlocation.
VMware, Inc. 451
Chapter 20 Deploying ACE Packages
ChecksthattheACEenabledvirtualmachinecanbecloned:thatitispoweredoff,
multiplesnapshotsareenabled,anditisnotreadonly.
ChecksthatthelatestversionofVMwareToolsisinstalled.
Ifinstancecustomizationisenabled,checksthattheSysprepToolsdirectoryfor
theACEenabledvirtualmachinesguestoperatingsystemisnotempty.
IftheguestoperatingsystemisWindows2000,WindowsXP,orWindows2003,
checksthatthefoldersintheProgram Files\VMware\VMware
Workstation\Resources\SysprepToolsfolderarenotempty.
YoucandeployapackageoveranetworkoronDVDorCD.Ifyoudeploythepackage
ondiscs,thefirstdiscofthesetincludestheAutorunfilesneededtostarttheinstaller
automaticallywhentheuserinsertsthediscinthehostcomputersdrive.
Turn Off the VMware Tools Check for Test Deployments
IfyoudonothavethelatestversionofVMwareToolsinstalledintheguestoperating
system,thewizardfailstocreatethepackage.Tocreatepackageswithoutinstallingthe
latestVMwareToolsversioneachtimeforexample,ifyouwanttoperformatest
deploymentyoucanturnofftheVMwareToolscheck.
To turn off the VMware Tools check for test deployments
1 CloseWorkstation.
Useatexteditortoopenthepreferences.inifile,whichislocatedinthe
followingdirectory:
OnWindowsXP:C:\Documents and Settings\<user>\Application
Data\VMware
OnWindowsVistaandWindows7:
C:\Users\<test>\AppData\Roaming\VMware
2 Addthefollowinglinetothefile:
pref.ignoreToolsPkgCheck = "TRUE"
SettingthislinetoFALSEreinstatestheVMwareToolscheck.
3 Saveandclosethepreferences.ini file.
Beforeyoucreatepackagesthatyouplantodeployinproductionenvironments,
reinstatetheVMwareToolscheck.
Workstation Users Manual
452 VMware, Inc.
Prerequisites for Using the Packaging Wizards
ThefollowingprerequisitesapplytotheNewPackagewizardandthePocketACE
Packagewizard:
EnsurethattheguestoperatingsystemandthemostrecentversionofVMware
ToolsareinstalledintheACEenabledvirtualmachine.SeeInstallingVMware
Toolsonpage 104.
Defragmentvirtualdiskstoensurethatthepackageisascompactaspossible.See
DefragmentVirtualDisksonpage 239.
PreviewtheACEinstancetoverifythatallsettingsareworkingcorrectly.SeeUse
PreviewModetoTestPolicyandDeploymentSettingsonpage 448.
Determinethepasswordsusedforthepoliciesanddeploymentsettings.Thesecan
includethefollowing:
ActivationpasswordAccesscontrolpolicyissettoPassword.
DomainjoincredentialsAccesscontrolpolicyfortheACEinstanceissetto
Password,andtheInstanceCustomizationdeploymentsettingforDomain
isenabled.Thispasswordisfortheuseraccountthathaspermissiontoadd
computerstothisdomain.
RemotedomainjoincredentialsandVPNcredentialsTheInstance
CustomizationdeploymentsettingsforDomainandEnableremotedomain
joinareenabled.Thedomainpasswordisfortheuseraccountthathas
permissiontoaddcomputerstothisdomain.ThepasswordintheRemote
domainjoinsectionisfortheuseraccountthathaspermissiontoaccessthe
VPNserver.
Verifythatyouhaveenoughdiskspacefortemporaryfilescreatedduring
packaging.Youmusthavetwicethecombinedsizesofallthecomponentsofthe
package.
Thewizarddisplaysinformationabouttheamountofspaceneededandthe
locationswherethespaceisneeded.Ifyoudonothaveenoughfreespace,youcan
moveordeletefilesonthetargetdrivestomakeroomforthewizardsworking
files.
Determinethetypeofpackageyouwanttodeploy:full,update,orcustom.See
OverviewofPackageCreationandValidationonpage 450.
TodistributethepackageonDVDsorCDs,determinehowmuchdiskspaceis
available.Youcanthenspecifythemaximumfilesizeusedwhenthepackageis
dividedintomultiplefiles.
VMware, Inc. 453
Chapter 20 Deploying ACE Packages
Touseinstancecustomization,verifythatthefollowingprerequisitesaresatisfied:
MakesurethattheguestoperatingsystemisWindowsXP,Windows2000,or
WindowsServer2003,WindowsVista,orWindows7.
CopytheMicrosoftSysprepDeploymentToolsintothecorrectfolderforthe
virtualmachine.SeeDownloadtheMicrosoftSysprepDeploymentToolson
page 440.
Ifthesetoolsarenotavailable,thepackagingoperationfails.Thefailuremightnot
occuruntilwellintothepackagingprocessandmightcauseyoutolosesubstantial
time.
Usepreviewmodetotestwhetherinstancecustomizationrunsunattended.
For example,verifythatavalidWindowsproductIDisusedsothatnodialogbox
promptsfortheproductIDduringtheMiniSetupprocess.
Ifyouconfiguredautomaticlogin,usepreviewmodetoverifythatautomaticlogin
workscorrectly.Ifitfails,instancecustomizationfails.
Use the New Package Wizard
TheNewPackagewizardcreatesanexecutablefilethatcontainsanACEenabled
virtualmachine,itspolicies,deploymentsettings,scripts,andacopyofVMware
Player.Youcaneasilydeployandinstallthepackageonendusersmachines.
Beforeyoubegin,verifythatthepackagingprerequisitesaresatisfied.See
PrerequisitesforUsingthePackagingWizardsonpage 452.
To use the New Package wizard
1 OpentheACEenabledvirtualmachinetouseasthebasisforthepackage.
2 Makesurethevirtualmachineispoweredoffratherthansuspended.
Whenyouexitpreviewmode,bydefaultVMwarePlayersuspendsthevirtual
machine.Ifnecessary,useWorkstationtopoweroffthevirtualmachine.
3 ChooseVM>ACE>NewPackage.
4 CompletetheNewPackagewizard.
5 (Optional)Ifyouarepromptedtoselectapackagedistributionformatandyou
selectMultiplefoldersforcreatingDVDsorCDs,writedownthedisclabelprefix
youspecify.
Whenyoulaterusediscburningsoftwaretocreatethediscs,thenameyouenter
foreachdiscmustbethesameasthenameofthefolderthewizardcreatestohold
thatdiscscontents(forexample,DISC1,DISC2).
Workstation Users Manual
454 VMware, Inc.
6 Tobeginthepackagingprocess,clickNextonthePackageSummarypage.
Packagecreationtakesasubstantialamountoftime,especiallyforpackagesthat
includelargevirtualmachinesorinstancecustomizationsettings.
Duringtheinstancecustomizationstage,iftheguestoperatingsystemdoesnot
shutdownafterapproximately10minutes,theproblemmightbethattheSysprep
toolswerenotinplace.Theoperationiscancelledandanerrormessagetellsyou
thatinstancecustomizationfailed.
ThePackageCreationCompletepageappearswhentheprocessiscomplete.Itlists
thelocationofthenewlycreatedpackageandprovidesalinktothepackage
directory.
7 Dependingonwhichdistributionmethodyouchose,dooneofthefollowing:
Ifyoucreatedasinglefilefornetworkdistribution,copythefiletothe
appropriatelocationonanetwork.
IfyoucreatedoneormorefilesfordistributiononCDorDVD,use
discburningsoftwaretocreatethediscs.Followtheseguidelines:
Thedisclabelyouenterinyourdiscburningsoftwareforeachdiscmust
bethesameasthenameofthefolderthewizardcreatestoholdthatdiscs
contents.
Burnthecontentsofeachdiscontothetoplevelofthedisc.
Thepackageinstallerexpectstofindonlythecontentsofthefolder,and
notthefolderitself,attherootlevelonthedisc.Ifyouburnthefolder
itselfontothedisc,whenyouattempttoinstallthecontentsofthesecond
orsubsequentdiscsontheusersmachine,theerror1309,Error
reading from file <filename>,appears.
View Package Properties and Add Notes
UsethePackagePropertiesdialogboxtoviewpropertiesofthepackagesthatyou
created.AlsoaddoreditnotesthatappearinthesummaryviewoftheACEenabled
virtualmachine.
To view package properties and add notes
1 OpentheACEenabledvirtualmachine.
2 ChooseView>CurrentView>Summary.
VMware, Inc. 455
Chapter 20 Deploying ACE Packages
3 OnthePackagestab,doubleclickthepackagename.
4 InthePackagePropertiesdialogbox,clickthetabstoviewtheproperties.
5 ClicktheNotestabtoaddoreditnotes.
Existingnotesmighthavebeenaddedwhenthepackagewascreatedusingthe
NewPackagewizard.Thesenotesarenotbeseenbyendusers.Theyarevisible
onlyintheWorkstationwindow.
Perform an End-to-End Deployment Test
PerformanendtoendtesttodeployanewACEpackageratherthanapackageupdate.
Alsouseanendtoendtestifusingpreviewmodeisnotappropriate.
BecauseWorkstationrunsonlyonWindowshosts,youcannotusepreviewmodeto
runACEinstancesastheywillrunonLinuxhosts.Youalsocannottestahostpolicyin
previewmode.
Beforeyoubegin,ifyouplantouseanACEManagementServertomanagetheACE
instances,installandconfigureatestACEManagementServer.SeetheVMwareACE
ManagementServerAdministratorsGuide.
To perform an end-to-end deployment test
1 IfyouusetheACEManagementServer,selecttheACEenabledvirtualmachine,
chooseFile>ConnecttoACEManagementServer,andconnecttothetestserver.
2 Inthevirtualmachinessummaryview,clickCreatenewpackageinthe
Commandslist.
3 CompletetheNewPackagewizard.
4 Navigatetothepackagelocationandcopythepackagedirectorytoaclienttest
machine.
5 Ontheclienttestmachine,runtheACEinstancessetup.exefileandcompletethe
pagesoftheinstallationwizard.
NOTEThistestmighttakeasubstantialamountoftimebecausepackagingand
encryptionprocessescanbelengthy.
Workstation Users Manual
456 VMware, Inc.
6 StarttheACEinstanceandactivateitwhenprompted.
Dependingonhowyouconfiguredthepackage,aStartmenuitemoradesktop
shortcutorbotharecreatedontheclientmachine.Dependingontheruntime
preferencesyouset,theACEinstancemightstartinfullscreenmodewhenthe
hostsystemstarts.
7 VerifythattheACEinstanceisconfiguredasyouintendedandrunsasyouexpect.
8 IfyouuseACEManagementServer,connecttheACEenabledvirtualmachineto
theproductionserver.
Ontheadministratormachine,inWorkstation,selecttheACEenabledvirtual
machineandchooseFile>ConnecttoACEManagementServer,andconnectto
theproductionserver.
9 IfyouuseACEManagementServer,createanewpackage.
Thepackageyoucreatedforthetestreferstotheserveryouusedfortesting.
Instancescreatedfromthatpackagerefertothetestserver.
Deploy Packages
DeployingpackagesmeansmakingtheACEpackageavailabletoendusers.You
specifythedistributionmethodwhenyoucreatethepackage.
To deploy packages
Dependingonthetypeofpackage,dooneofthefollowing:
Forafull,policyupdate,serverupdate,orcustompackage,distributethepackage
onCDorDVD,ormakethepackageavailableonanetwork.
ForaPocketACEpackage,seeDeployingtheACEPackageonaPortableDevice
onpage 461.
VMware, Inc. 457
21
ThePocketACEfeatureenablesyoutostoreACEinstancesonportabledevicessuchas
USBkeys(flashmemorydrives),AppleiPodmobiledigitaldevices,andportablehard
drives.ACEusersattachtheseportabledevicestox86hostcomputers,runtheirACE
instanceswithVMwarePlayer,andthendetachtheportabledevices.Thenexttime
theyneedaccesstotheirACEinstances,theycanattachthedevicestothesamehost
computersortodifferentcomputers.
UsePocketACEtopackageadailycomputingenvironmentandallowenduserstotake
thatenvironmentincludingdocuments,settings,applications,andVPN
accesswherevertheyneedtogo.
Thischapterincludesthefollowingtopics:
UseCasesforPocketACEonpage 458
PortableDeviceRequirementsonpage 459
PoliciesandDeploymentSettingsforPocketACEonpage 460
CreateaPocketACEPackageonpage 460
DeployingtheACEPackageonaPortableDeviceonpage 461
RunthePocketACEInstanceonpage 463
Pocket ACE 21
Workstation Users Manual
458 VMware, Inc.
Use Cases for Pocket ACE
UsethefollowingscenariostodeterminewhentousePocketACEandwhichkindsof
policiestosetforvarioussituations:
ProvidingaccesstoemployeesworkingremotelyEmployeesoftenusetheir
ownhomecomputerforaccessingenterpriseresourcesremotely.Unmanaged
clientscanbeinfectedbymalwareorspyware.Inaddition,thereisariskoflost
dataifaremoteuserdownloadssensitivedatatoapersonalcomputer.Thereis
alsotheaddedburdenofdeployingandmanagingthesoftwareneededbyremote
users.
UsingPocketACE,ITadministratorscandeployatrusted,managed,andmore
securevirtualdesktopinstancetoremoteusers.ThevirtualdiskofthePocketACE
canbeencryptedtominimizetheriskoflostdata.Bysettingspecificnetwork
quarantinepolicies,administratorscanstrictlycontroltrafficbetweenthe
untrustedclientandPocketACEinstance,protectingtheenterprisefromcreating
acompromisedhost.
IncreasingthesecurityandmobilityofmobileusersMobileusersoftenaccess
orcarrysensitivedataoutsidetheenterpriseusinglaptopsorothermobiledevices.
ThequestionforITorganizationsisnotif,butwhen,amobileuserslaptopwillbe
lostorstolen,leadingtothelossofsensitiveorconfidentialdata.
UsingPocketACEtodeployadesktopenvironmenttomobileusers,IT
administratorscanreducetheriskoflostdatawhilealsoincreasingusersmobility
becausePocketACEinstancecanbeusedwithanysupportedx86system.A
desktopinstancewithanencrypteddiskcanbedeployedtomobileusers.Using
ACEManagementServer,alostorstolenPocketACEcanbedisabledremotely.
Providingtemporaryaccesstocontractworkersusinguntrustedhosts
Contractorsandbusinesspartnersoftenconnecttotheenterprisenetworkfrom
unknownoruntrustedclients.PocketACEcanbeusedtoprovideastandardized,
trusted,andmanagedenvironmenttotheseuserswhileenablingsafeconnectivity
toenterpriseresources.
Forcontractors,thePocketACEinstancecanbeconfiguredtobeavailableonly
duringthelengthofthecontract.Whentheexpirationdateisreached,the
contractorcannolongerusethePocketACEinstance.
VMware, Inc. 459
Chapter 21 Pocket ACE
ProvidingaccesstooffshoreoutsourcepartnersTypically,offshorepartners
manageandownthedesktopsystemstheyuse.Becausetheseresourcesareowned
byanoutsideorganization,theydonotfallunderstandardITpolicy.Insome
cases,desktopsystemsarepurchased,imaged,andshippedtoanoffshorepartner
foraccessingtheenterprise.Thisisoftenalengthyandcostlyprocess.
WithPocketACE,ITadministratorscaneasilydeployatrusted,managed,and
moresecurevirtualdesktopinstancetooffshorepartners.Thevirtualdesktop
instancescanbedistributedusingportablemediaordownload.Securityfeatures
includethedataencryptionfeatureandthenetworkquarantineandrestriction
featuresalreadymentioned.
ProvidingdisasterrecoveryUsingPocketACE,organizationscaneasilypackage
desktopinstanceswithallthenecessaryenterpriseapplicationsforuseinthecase
ofadisaster.Theseinstancescanbedeployedtoportablemediadevicesandstored
safelyinasecureoffsitefacility.Ifadisasteroccurs,thePocketACEinstancescan
bequicklydistributedandused.
DistributingbetaortrialsoftwareUsingPocketACE,ISVscandistribute
softwarepreinstalledasavirtualapplianceeitherbydownloadoronaportable
mediadevice.AnISVcanprovideacompleteworkingenvironment,ensuringno
compatibilityissues.CustomEULAscanbecreatedandusedtoensurethatauser
acceptstheagreementpriortousinganACEinstance.Inaddition,anexpiration
periodcanbesetthatdisablesanACEinstanceafteranallottedperiodoftime.
Portable Device Requirements
YoucaninstallACEpackagesonthefollowingtypesofdevices:
Flashmemorydrives(USBkeys)
FlashbasedAppleiPodmobiledigitaldevices
HarddrivebasedAppleiPodmobiledigitaldevices
Portableharddrives
ForUSBdevices,useUSB2highspeeddevicesonly.
WhenaPocketACEpackageisdeployedtoaremovabledevice,thevirtualdiskis
preallocatedtofullcapacityforenhancedperformance.Makesurethattheremovable
devicehasenoughdiskspacetostorethevirtualdiskstotalcapacity,memory,and
approximately300MBforoverhead.SeeUsetheNewVirtualMachineWizardon
page 89.
Workstation Users Manual
460 VMware, Inc.
Policies and Deployment Settings for Pocket ACE
SomepoliciesapplyonlytoPocketACE.YoucansetPocketACEclosebehaviorby
editingtheruntimepreferencespolicy.
ClosebehaviordetermineswhethertheACEinstanceispoweredofforsuspended
whentheuserexitsandwhetherchangesaresynchronizedontheremovabledevice.
SeePocketACECacheSettingsonpage 417.
PocketACEignoressomepolicies.Althoughyoucansethostandsnapshotpoliciesand
createapackagethatincludesthem,PocketACEinstancesignorethesepolicies.
AdministratorscannotreverttoreimagesnapshotswhenrunningaPocketACEin
administratormodeinVMwarePlayer.
Create a Pocket ACE Package
Beforeyoubegin,determinethefollowinginformation,whichisspecifictoPocket
ACE:
Makesuretheportabledevicemeetsthehardwareanddiskspacerequirementsfor
PocketACE.SeePortableDeviceRequirementsonpage 459.
DeterminewhetheryouwanttodeploythePocketACEtoWindowsmachines,
32bitLinuxmachines,64bitLinuxmachines,orsomecombination.Yourchoices
affectthediskspacerequirements.
Determinethepasswordyouwanttouseforanyonewhoattemptstodeploythe
packagetoaportabledevice.
Ifyoudonotwanttorequireapassword,makesuretheaccesscontrolpolicys
authenticationtypeissettoNone.Makesuretheencryptiondeploymentsetting
forpackageprotectionissettoNone.
Inaddition,completethetaskslistedinPrerequisitesforUsingthePackaging
Wizardsonpage 452.
To create a Pocket ACE package
1 OpentheACEenabledvirtualmachinetouseasthebasisforthepackage.
2 Makesurethevirtualmachineispoweredoffratherthansuspended.
Whenyouexitpreviewmode,bydefaultVMwarePlayersuspendsthevirtual
machine.Ifnecessary,useWorkstationtopoweroffthevirtualmachine.
VMware, Inc. 461
Chapter 21 Pocket ACE
3 TocreateanewPocketACEoranupdatepackage,chooseVM>ACE>New
PocketACEPackage.
4 Completethewizard.
WhenyouspecifyalocationontheNamethePackagepage,choosealocationon
theadministratormachine.Donotspecifyalocationontheportabledevice.You
deploythepackagetothedeviceafterthepackageiscreated.
TheCompletingthePocketACEPackageWizardpageappearswhentheprocess
iscomplete.
5 (Optional)Todeploythepackageimmediately,selectDeploytoaportabledevice
now.
Ifyoudonotdeploythepackageimmediately,seeDeployingtheACEPackageona
PortableDevice.
Deploying the ACE Package on a Portable Device
YoucandeploymultipleACEpackagesonasingleportabledevice.Theonlylimitation
onthenumberofpackagesistheamountofavailablespaceonthedevice.
Runthedeploy.exefiletousetheGUIdeploymentutility.UsethebulkDeploy.exe
programtousethecommandlinedeploymentutility.Youcancreateabatchfilethat
containsmultiplebulkDeploycommandstodeploymultipleACEpackagestoa
portabledevice.
Thewizardautomaticallypreallocatesdiskspaceandsplitsthediskinto2GB
segments.
ThePocketACEinstanceisreencryptedduringthedeploymentinsteadofafterthe
usersfirstrunoftheinstance.Forthisreencryption,thepolicyappliedisthepackage
protectionpolicythatwasinplaceatthetimeofpackaging.
Use the Graphical Utility to Deploy Pocket ACE Packages
Beforeyoubegin,makesuretheremovabledevicemeetsthehardwareanddiskspace
requirements.SeePortableDeviceRequirementsonpage 459.
To use the graphical utility to deploy Pocket ACE packages
1 NavigatetothepackagelocationyouspecifiedintheNewPocketACEPackage
wizard.
2 Doubleclickthedeploy.exe file.
Workstation Users Manual
462 VMware, Inc.
3 IftheEnterPassworddialogboxappears,enterthedeploymentpassword.
4 CompletetheVMwarePocketACEDeployUtilitydialogboxandclickDeploy.
WhenyoudistributethePocketACE,giveitdirectlytotheuserandtelltheusertokeep
thePocketACEsecureuntiltheuserrunstheACEandchangestheuserpassword.
Use the Command-Line Utility to Deploy Pocket ACE Packages
ThebulkDeploy.exeutilityisacommandlineversionoftheVMwarePocketACE
DeployUtilitydialogbox(deploy.exe).UsebulkDeploy.execommandsinabatch
filetodeployoneormorePocketACEpackagestothesameormultipletarget
directoriesorremovabledevices.
Beforeyoubegin,makesuretheremovabledevicemeetsthehardwareanddiskspace
requirements.SeePortableDeviceRequirementsonpage 459.
IfyouplantodeploythePocketACEpackagetoacustomfolderratherthana
removabledrive,createthefolder.
To use the command-line utility to deploy Pocket ACE packages
1 Openacommandpromptandchangedirectoriestothepackagelocationyou
specifiedintheNewPocketACEPackagewizard.
Forexample,enterthefollowingcommand:
cd C:\Documents and Settings\Administrator\My Documents\
Virtual Machines\ACE-Enabled Virtual Machine\Packages\Pocket ACE Package
2 Enterthefollowingbulkdeploymentcommandandspecifythenecessary
parameters:
bulkDeploy.exe <deployment_directory> <parameters>
The<deployment_directory>valuecanspecifyaremovabledriveoracustom
folder.
Table 21-1. Deployment Commands
Parameter Usage
-p Deploymentpassword.Requiredwhenthepackageispasswordprotected.
-s Pathtothe.vmxfileonthehost.Usethisparameteronlyifyouusea
bulkDeploy.exefilethatisnotlocatedinsidethesamePocketACE
packageasthe.vmxfileyouwanttodeploy.
VMware, Inc. 463
Chapter 21 Pocket ACE
Forexample,
bulkDeploy.exe E: -p password -s C:\pocketACEPackage\VM\packagedVMX.vmx
-q -t
3 (Optional)TodeployaPocketACEpackagetomultiplelocations,ortodeploy
multiplepackagestothesameormultiplelocations,createabatchfilewitha
bulkDeploy.execommandoneachline.
Usequotationmarksforpathsthatcontainspaces.Followingisanexampleofa
batchfile:
"C:\My VMs\vm_1\Packages\Pkg_1\bulkDeploy.exe" E: -p password -q -t
"C:\My VMs\vm_1\Packages\Pkg_1\bulkDeploy.exe" F: -p password -s
"C:\My VMs\vm_2\Packages\Pkg_2\VM\Pkg_2.vmx" -q -t
"C:\My VMs\vm_1\Packages\Pkg_1\bulkDeploy.exe" F: -p password -s
"C:\My VMs\vm_3\Packages\Pkg_3\VM\Pkg_3.vmx" -q -t
Run the Pocket ACE Instance
AfteryoudeployaPocketACEpackagetoaremovabledevice,runningitusually
involvesonlypluggingitin.
Beforeyoubegin,makesurethatthehostcomputersclockissettothecorrecttime.If
youmoveaPocketACEfromonehostcomputertoanotherandtheclockofthesecond
hostisearlierthantheclockofthefirst,thePocketACEdoesnotrun.
WhentheACEinstanceruns,itsdiskandcheckpointcachesareinitialized.IfthePocket
ACEhasasessiononthishost,thatsessioncontinues.Otherwiseanewsessionis
started.
Thecheckpointstateandvirtualdiskarecachedonthehostduringuseand
synchronizedbacktotheportabledevicelater.Thecheckpointstateandvirtualdiskare
protectedwiththesameencryptionlevelusedfortheACEinstanceontheportable
device.
-q Parametertoturnoffreportingtheprogressofthebulkdeployment.
-t PerformsaspeedtesttodeterminewhethertheUSBdeviceandthehost
USBstackarefastenoughforPocketACE.Ifthetestissuccessful,0is
returned.Ifitfails,anegativenumberisreturned.Thistestisalwaysdone
atruntimewhenthePocketACEisopened.Itisdonewhenyouusethe
bulkDeploycommandonlyifyouusethe-tparameter.
Table 21-1. Deployment Commands (Continued)
Parameter Usage
Workstation Users Manual
464 VMware, Inc.
ThePocketACErunsprimarilyfromthehostcache,althoughitoccasionallyreadsfrom
theparentdiskontheportabledevice.TheACEinstancedoesnotwritetotheparent
diskuntilsynchronization.
To run a pocket ACE instance
1 Plugtheportabledeviceintothehostcomputer.
2 IfthehostsystemsAutorunconfigurationisnotsettostarttheACEinstance
automatically,dooneofthefollowing:
OnWindowshosts,navigatetotheremovabledeviceandrunthePocketACE.
Usually,startingthePocketACEmanuallyisnotnecessary.TheAutorun
programisincludedinthepackageandcheckswhetherVMwarePlayeris
installed.Ifnot,VMwarePlayerisinstalledautomatically.
OnLinuxsystems,installVMwarePlayerfromthePlayerdirectoryonthe
USBdrive.
Forexample,iftheUSBdriveismountedat/media/USBFLASH,navigateto
/media/USBFLASH/player.
InstallVMwarePlayerasdescribedinManuallyInstallVMwarePlayer
onaLinuxHostonpage 469.
UseVMwarePlayertoopenthe.vmx fileandstarttheACEinstance(see
InstalltheACEInstanceonaSingleLinuxHostonpage 470).
VMware, Inc. 465
22
Thischapterincludesthefollowingtopics:
InstallinganACEPackageonaWindowsHostonpage 465
InstallinganACEPackageonaLinuxHostonpage 469
UpgradingACEInstancestoACE2.6onpage 473
StartandUseanACEInstanceonpage 474
InstallanACEClientLicenseonpage 478
QuitVMwarePlayeronpage 479
TroubleshootingToolsonpage 479
Installing an ACE Package on a Windows Host
IfanenduserscomputerdoesnotalreadyhaveVMwareACEorVMwarePlayer
installed,thefirsttimeyouinstallanACEpackage,VMwarePlayerisinstalledalong
withtheACEinstance.
YoucaninstallACEinstancesononehostatatime,oryoucanusethesilentinstallation
featuresoftheMicrosoftWindowsInstallertoquicklyinstallanACEinstanceon
multiplecomputers.
Installing ACE Packages 22
Workstation Users Manual
466 VMware, Inc.
Install an ACE Instance on a Single Windows Host
IfVMwarePlayerisnotalreadyinstalledonthemachine,theinstallationprogram
installsitbeforeinstallingthevirtualmachinefilesthatmakeuptheACEinstance.
Beforeyoubegin,considerthefollowingprerequisites:
MakesurethehostcomputerhasenoughdiskspacefortheACEinstance.
IfthisisthefirstinstallationofanACEinstanceontheusersmachine,auserwith
administrativeprivilegesmustruntheinstallation.Onlyauserwith
administrativeprivilegescaninstallanduninstallVMwarePlayer.
IftheACEinstanceincludesahostpolicy,auserwithadministrativeprivileges
mustruntheinstallation.Ahostpolicyisahostnetworkaccesspolicyorapolicy
thatrestrictswhichvirtualmachinescanrunonahost.SeeSettingNetwork
AccessPoliciesonpage 402andControlWhichACEInstancesRunonaHost
onpage 422.
Onlyonesetofhostpoliciescanbedeployedtoaparticularhost.Ifapackage
containshostpoliciesandthehostalreadycontainshostpoliciesfromanother
package,installationofthesecondpackagefails.
To install an ACE instance on a single Windows host
1 IfVMwarePlayerisnotyetinstalledontheusersmachine,logintothehost
computerastheAdministratoruserorasauserwhoisamemberoftheWindows
Administratorsgroup.
2 DependingonwhetheryouareinstallingfromaCD,DVD,ornetworklocation,do
oneofthefollowing:
ForCDsandDVDs,insertthefirstdisc.
Foranetworklocation,navigatetothelocationoftheinstaller.
3 Findthesetup.exefileanddoubleclickit.
4 Followtheprompts.
Installing an ACE Package Silently on Multiple Windows Hosts
IfyouareinstallingaVMwareACEpackageonanumberofWindowshostcomputers,
youmightwanttousethesilentinstallationfeaturesoftheMicrosoftWindows
Installer.Thistypeofinstallationrequiresthatthehostcomputershaveversion2.0or
lateroftheMSIruntimeengine.Thisversionoftheinstallerisavailableinversionsof
WindowsbeginningwithWindowsXP.Iftheruntimeengineisnotinstalled,see
InstalltheMSI2.0RuntimeEnginefromanACEPackageonpage 467.
VMware, Inc. 467
Chapter 22 Installing ACE Packages
Install the MSI 2.0 Runtime Engine from an ACE Package
TheinstallerfortheMSI2.0runtimeengineisincludedintheVMwareACEpackage
astheinstmsiw.exe file.
To install the MSI 2.0 runtime engine from an ACE package
1 Onthehostcomputer,openacommandprompt.
2 Enterthefollowingcommand:
instmsiw.exe /Q
ForadditionaldetailsonhowtousetheMicrosoftWindowsInstaller,seetheMicrosoft
Website.
Install an ACE Instance on Multiple Hosts
YoucanusetheMicrosoftWindowsInstallercommandlineinterfacetosilentlyinstall
anACEinstanceonmanycomputers.Endusersarenotpromptedforinformation
duringtheinstallationprocess.
Beforeyoubegin,verifythatthehostcomputershaveversion2.0orlateroftheMSI
runtimeengine.
Youcancustomizethebasicpackageinstallationcommandtospecifyoneormoreof
thefollowing:
InstallationdirectoryfortheACEinstance
InstallationdirectoryforVMwarePlayer
Installationwithoutadesktopicon
Youcanalsoinstallanupgradesilently.Anupgradeisalwaysinstalledinthesame
directoryordirectoriesasthepreviouspackage.
To install the ACE instance on multiple hosts
1 Onthehostcomputer,openacommandprompt.
2 Enterthefollowingcommand:
setup.exe /s/v"/qn"
ThiscommandinstallsthepackageandVMwarePlayer(ifincluded)intothe
defaultlocationsandcreatesashortcutfortheACEinstanceonthedesktop.The
defaultlocationfortheVMwarePlayerapplicationisC:\Program
Files\VMware\VMware Player.
Workstation Users Manual
468 VMware, Inc.
Thedefaultlocationforthevirtualmachinefiles:
OnWindowsXPisC:\Documents and Settings\All Users\Application
Data\VMware\VMware ACE\<ACE_name>.
OnWindowsVistaandWindows7isC:\ProgramData\VMware\VMware
ACE\
3 Tocustomizethepackage,enterthefollowingcommand:
msiexec -i package.msi <installation_options>
Enterthecommandononeline.Theinstallationoptionsfollow.
Thefollowingexamplecommandillustratestheoptionsandtheirusage:
msiexec -i package.msi DESKTOP_SHORTCUTS=0
INSTALLDIR="G:\packages"
PLAYER_INSTALLDIR="C:\VMware\VMware Player" /qn
Uninstall VMware Player or an ACE instance from a Windows
Host
UninstallingVMwarePlayerdoesnotuninstalltheACEinstance.Onlythe
AdministratoruserorauserwhoisamemberoftheWindowsAdministratorsgroup
canuninstallVMwarePlayer.
UninstallinganACEinstancedoesnotuninstalltheVMwarePlayerapplication.When
youremoveanACEinstance,theACEinstancesdatafiles,shortcuts,andregistry
entriesareremoved.YoudonotneedtobeanAdministratorusertouninstallanACE
instance.
To uninstall VMware Player or an ACE instance from a Windows host
1 GotoStart>ControlPanel>AddorRemovePrograms>ChangeorRemove
Programs.
2 SelecttheVMwarePlayerprogramortheACEinstanceandclickRemove.
Table 22-1. Installation Options
Option Description
DESKTOP_SHORTCUTS Whensetto0,skipsinstallationoftheACEinstanceshortcuton
thedesktop.Thedefaultis1.
INSTALLDIR SetstherootinstallationdirectoryfortheACEinstance.
PLAYER_INSTALLDIR SetstherootinstallationdirectoryfortheVMwarePlayer
application.
VMware, Inc. 469
Chapter 22 Installing ACE Packages
3 Followtheinstructionsinthewizard.
4 (Optional)IfyouusedPocketACEonthishostandwanttoremovethePocketACE
cachetoconservediskspace,deletethefollowingfolder:
OnWindowsXP:C:\Documents and Settings\<user>\Local
Settings\Application Data\VMware\Roaming VM cache\
OnWindowsVistaandWindows7:
C:\Users\<USER>\AppData\Local\VMware\Roaming VM cache
Inthispath,<user>representsauserspecificdirectory.Ifmorethanoneuserused
PocketACEonthehost,youmustremovethedirectoryforeachuser.
Installing an ACE Package on a Linux Host
IfanenduserscomputerdoesnotalreadyhaveVMwareACEorVMwarePlayer
installed,VMwarePlayerisautomaticallyinstalledwhenyouruntheACEpackages
VMware-Player.bundlefileasrootorsudo.
YoucaninstallACEinstancesononehostatatime,oryoucansilentlyinstallanACE
instanceonmultiplecomputers.
Manually Install VMware Player on a Linux Host
ManuallyinstallVMwarePlayeronsystemswheretheenduserdoesnothaveroot
accessanddoesnotalreadyhaveVMwareACEorVMwarePlayerinstalled.
To manually install VMware Player on a Linux host
1 Inaterminalwindow,enterthefollowingcommandtobecometherootuser:
su
2 MounttheACEpackage,andlocatetheVMwarePlayerinstallerinthepackage
directory.
Dependingonwhetherthehostisa32bitcomputerora64bitcomputer,yousee
oneofthefollowingfilenames:
VMware-Player-i386.bundle
VMware-Player-x86_64.bundle
Workstation Users Manual
470 VMware, Inc.
3 Copythe.bundlefiletoatemporarydirectoryontheharddrive.
Forexample,ifyouhavea64bitcomputerandyouwanttoputthefileinthe/tmp
directory,enterthefollowingcommand:
cp VMware-Player-x86_64.bundle /tmp
4 Enterthefollowingcommandtochangetothedirectorytowhichyoucopiedthe
file:
cd /tmp
5 Enterthefollowingcommandtoruntheinstallationprogram:
sh VMware-Player-<architecture>.bundle
The<architecture>valueiseitheri386,for32bitsystems,orx86_64,for64bit
systems.
6 Followthewizardpromptsthatappear.
OnmostLinuxdistributions,aGUIwizardappears.OnRedHatEnterpriseLinux
5.1andsomeotherdistributions,acommandlinewizardappears.Inthe
commandlinewizard,toquicklyscrolltotheendofthelicenseagreement
prompt,pressqandaccepttheagreement.
7 Wheninstallationiscompleted,enterthefollowingcommandtoexitfromthe
rootaccount:
exit
Install the ACE Instance on a Single Linux Host
OnlytheuserwhoinstallstheACEinstanceorauserwithnecessarypermissions(such
asroot)isallowedtorunthatACEinstance.IfVMwarePlayerisnotalreadyinstalled
onthemachine,itisautomaticallyinstalledwhenyouruntheACEpackagessh
VMware-Player-<architecture>.bundle asrootorsudo.
Beforeyoubegin,considerthefollowingprerequisites:
MakesurethehostcomputerhasenoughdiskspacefortheACEinstance.
TheACEpackagemustbeaccessibletotheLinuxusermachinesforinstallation.
VMware, Inc. 471
Chapter 22 Installing ACE Packages
IfthisisthefirstinstallationofanACEinstanceontheusermachine,arootuser
mustruntheinstallation.OnlyarootusercaninstallanduninstallVMwarePlayer.
IftheACEinstanceincludesahostpolicy,arootusermustruntheinstallation.A
hostpolicyisahostnetworkaccesspolicyorapolicythatrestrictswhichvirtual
machinescanrunonahost.SeeSettingNetworkAccessPoliciesonpage 402and
ControlWhichACEInstancesRunonaHostonpage 422.
Onlyonesetofhostpoliciescanbedeployedtoaparticularhost.Ifapackage
containshostpoliciesandthehostalreadycontainshostpoliciesfromanother
package,installationofthesecondpackagefails.
To install an ACE instance on a single Linux host
1 Copythe.bundlefileforthepackagetothehostcomputer.
2 Openaterminalwindowandchangetothepackagedirectory.
3 Enterthefollowingcommandtoruntheinstallationprogram:
./vmware-install.pl
4 Followthewizardpromptsthatappear.
OnmostLinuxdistributions,aGUIwizarddoesnotappear.OnRedHat
EnterpriseLinux5.1andsomeotherdistributions,acommandlinewizard
appears.Inthecommandlinewizard,toquicklyscrolltotheendofthelicense
agreementprompt,pressqandaccepttheagreement.
Install an ACE Package Silently on Multiple Linux Hosts
YoucansilentlyinstallanACEinstanceonmanycomputers.Endusersarenot
promptedforinformationduringtheinstallationprocess.
To install the ACE instance on multiple Linux hosts
1 Copythe.bundlefileforthepackagetothefirsthostcomputer.
2 Openaterminalwindowandenterthefollowingcommand:
./vmware-install.pl
3 Repeatthisprocedureforotherhosts.
Workstation Users Manual
472 VMware, Inc.
Prepare a Linux Host for Running in Kiosk Mode
OnLinuxhosts,ifyouplantousekioskmodetopreventusersfromaccessingthehost
operatingsystem,youmustsetsomeadditionalproperties.Ifyoudonotpreparethe
host,usersmightbeabletousekeyboardshortcutsorothermechanismstoaccessthe
hostwheninkioskmode.
Beforeyoubegin,createanACEinstancethatusesakioskmodepolicyandinstalliton
aLinuxhost.SeeSettingKioskModePoliciesonpage 420andInstallinganACE
PackageonaLinuxHostonpage 469.
ThepreferredwindowmanagersforrunningACEinstancesinkioskmodeare
F VirtualWindowManager(FVWM)andMetacity.
To prepare a Linux host for running in kiosk mode
1 Useatexteditortoaddthefollowinglinestothehosts~/.vmware/preferences
file:
pref.grabOnKeyPress = "TRUE"
pref.grabOnMouseClick = "TRUE"
2 AddthefollowinglinestocreateaServerFlagssectioninthe
/etc/X11/xorg.conffile:
Section "ServerFlags"
Option "DontZoom" "true"
Option "DontZap" "true"
Option "DontVTSwitch" "true"
EndSection
3 RestarttheXsession.
4 Manuallydisableallkeyboardshortcutsinhostswindowmanager.
5 IftheDeskbarappletprogramisusedinthepanelonthehost,removeitby
rightclickingitandselectingRemovefromPanel.
Ifyoudonotremovethisapplet,ausercanpressthekeyboardcombinationfor
exitingkioskmodeandthenpressAlt+F3toaccessthehostfilesystem.
6 Topreventthehostsfilebrowserfromopeningwhenaremovabledeviceis
connectedtothehost,disabletheapplicableoptionsinthehostssystem
preferencesandfilebrowserpreferences.
Forexample,openafilebrowseronthehostandselectEdit>Preferences>Media
anddeselecttheBrowsemediawheninsertedcheckbox.Also,fromthehosts
Systemmenu,selectPreferences>RemovableDevices,orsimilarlynamedtabs,
anddeselectthecheckboxes.
VMware, Inc. 473
Chapter 22 Installing ACE Packages
Uninstall VMware Player or an ACE Instance from a Linux Host
ACEuserscanuninstallonlytheACEinstancesthattheyinstalled.Onlytherootuser
canuninstallothersACEinstances.UninstallinganACEinstancedoesnotuninstall
theVMwarePlayerapplication.WhenyouuninstallanACEinstance,theACE
instancesdatafiles,shortcuts,andregistryentriesareuninstalled.
UninstallingVMwarePlayerdoesnotuninstalltheACEinstance.Onlytherootuser
canuninstallVMwarePlayer.
To uninstall VMware Player or an ACE instance from a Linux host
1 Onthehostcomputer,openaterminalwindow.
2 Dooneorbothofthefollowing:
TouninstallanACEinstance,enterthefollowingcommand:
<path_to_instance_directory>./vmware-uninstall-ace.pl
TouninstallVMwarePlayer,enterthefollowingcommand:
vmware-installer -u vmware-player
3 (Optional)IfyouusedPocketACEonthishostandwanttoremovethePocketACE
cachetoconservediskspace,deletethefollowingdirectory:
/home/<user>/.vmware/roamcache
Inthispath,<user>representsauserspecificdirectory.Ifmorethanoneuserused
PocketACEonthehost,youmustremovethedirectoryforeachuser.
Upgrading ACE Instances to ACE 2.6
IfyouhaveACE2.0instances,youcanuseWorkstation7.0andACEManagement
Server2.6tosendnewACE2.6policiestoendusers.
Althoughnewpolicies,suchasPocketACEcachesettingsandnetworkadapter
settingscanbeusedonACE2.0endpoints,thevirtualmachineversionisnotchanged.
Toupgradeendusersvirtualmachinehardwareversion,youmustcreateafull
packageanduseittoreplacetheexistingACEinstance.
WhenyouuninstalltheolderACEinstanceandVMwarePlayerfromtheusers
computer,theenduserlosesanydataorcustomsettingsstoredintheoldACEinstance.
Takethisconsiderationintoaccountwhenchoosingbetweenupgradingthehardware
versionandcontinuingwiththecurrenthardwareversionbutaddingnewACE2.6
policies.
Workstation Users Manual
474 VMware, Inc.
Start and Use an ACE Instance
WhenyourunanACEinstance,VMwarePlayerstartsandopenstheinstance.Youstart
theinstanceinthesamewaythatyoustartotherapplicationsonthehost.
OneexceptionisiftheadministratorconfigurestheACEinstancetostartandruninfull
screenmodewhenthehostsystemstarts.SeeSettingRuntimePreferencesPolicies
onpage 415.
DependingonhowtheACEinstanceisconfigured,endusersmightberequiredto
enternopassword,one,ortwopasswordswhentheyruntheinstanceforthefirsttime.
Thepossibilitiesare:
Nopasswordsarerequiredatthefirstrunoftheinstanceoronsubsequentruns.
Youmustenteronepasswordatthefirstrun,andthatpasswordissuppliedtoyou
bytheadministrator.Onsubsequentrunsoftheinstance,nopasswordsare
required.
Youmustcreateapasswordatthefirstrun.Onsubsequentruns,youmustenter
thatpassword.
Youmustenteranadministratorsuppliedpasswordatthefirstrunandalsocreate
apassword.Onsubsequentruns,youmustenteronlythepasswordthatyou
created.
Theadministratorcanalsorestricthowmanycharactersorwhichcharacterscanbe
usedinpasswordsthatenduserscreate.SeeAuthenticationSettingsonpage 393.
To start and use an ACE instance
1 Dependingonthehostoperatingsystem,dooneofthefollowing:
OnWindowshosts,usethedesktopiconortheStartmenutostarttheACE
instance.
OnLinuxhosts,usetheApplicationsmenuorenterthefollowingcommand
inaterminalwindow:
vmplayer <path_to__package_directory>/<name_of_ACE_vmx_file>.vmx
2 Ifpromptedtoenterorcreateapassword,doso.
3 IftheEnterSerialNumberdialogboxappears,dooneofthefollowing:
Ifyouradministratorprovidedaserialnumber,enterit.
Ifyouneedtopurchasealicense,clickGetSerialNumber.
VMware, Inc. 475
Chapter 22 Installing ACE Packages
4 ClickinsidetheVMwarePlayerwindowtobeginusingtheguestoperatingsystem
andtheapplicationsinstalledintheACEinstance.
Youcanusetheoperatingsystemandapplicationsjustasyouwouldiftheywere
runningdirectlyonaphysicalcomputer.
5 (Optional)Tochangeapasswordthatyoucreated,chooseVM>ACE>Change
Password.
6 (Optional)FormoreinformationaboutusingVMwarePlayer,chooseHelp>Help
Topics.
Change Default Kiosk Mode Startup Behavior
IfanACEinstanceisconfiguredtoruninkioskmode,thevirtualmachinerunsinfull
screenmodeanddoesnotdisplaytheACEmenubarorACEPlayeronlinehelp.
Beforegoingintokioskmode,adialogboxappears,requiringtheusertoconsentto
enteringkioskmode.Formoreinformation,seeSettingKioskModePolicieson
page 420.
YoucanuseacommandlinecommandtostartanACEinstanceinkioskmodewithout
displayingtheusualwarningmessage.
YoucanalsostarttheACEinstancesothatitisnotinkioskmode.Youcanthenusethe
VMwarePlayermenustochangepreferencesettingsorenteradministratormodeifthe
ACEinstanceisconfiguredforthatmode.
To change default kiosk mode startup behavior
1 OpenacommandpromptonWindowshostsoraterminalwindowonLinuxhosts.
2 Tosuppressthedialogboxusuallyshownatstartup,dooneofthefollowing:
OnWindows,enterthefollowingcommand:
<path>\vmplayer.exe -k "<config-file>"
Inthiscommand,<path>isthepathonyoursystemtotheVMwarePlayer
applicationfileand<config-file>isthepathtothevirtualmachine
configuration(.vmx)file.
OnLinux,enteroneofthefollowingcommands:
vmplayer -k "<config-file>"
vmplayer --noKioskWarning "<config-file>"
Inthesecommands,<config-file>isthepathtothevirtualmachine
configuration(.vmx)file.
Workstation Users Manual
476 VMware, Inc.
3 TostarttheACEinstancewithoutenteringkioskmode,dooneofthefollowing:
OnWindows,enterthefollowingcommand:
<path>\vmplayer.exe -K "<config-file>"
NoticethecapitalK.Inthiscommand,<path>isthepathonyoursystemto
theVMwarePlayerapplicationfileand<config-file>isthepathtothe
virtualmachineconfiguration(.vmx)file.
OnLinux,enteroneofthefollowingcommands:
vmplayer -K "<config-file>"
vmplayer --forceNoKiosk "<config-file>"
Inthesecommands,<config-file>isthepathtothevirtualmachine
configuration(.vmx)file.
4 Ifyouuseacommandtostarttheinstancewithoutenteringkioskmode,enterthe
administratorpasswordwhenprompted.
Thisproceduredescribestypingthecommandatthecommandline,butyoucanalso
usethecommandtocreateabatchfileoradesktopshortcut.SeeUsingStartup
OptionsinaWindowsShortcutonpage 487.
Use Multiple Virtual Machines in Kiosk Mode
YoucanstartmultipleACEinstancesthatareconfiguredtoruninkioskmode.Youcan
thenswitchbetweenvirtualmachinesbyusingakeyboardshortcut.
Beforeyoubegin,createandpackagemultipleACEinstancesthatusethesame
administratorpasswordforkioskmodeandthesamehotkeycombinationforexiting
kioskmode.SeeSettingKioskModePoliciesonpage 420.
Whenmultiplevirtualmachinesruninkioskmode,enduserscanpressthehotkey
combinationalongwiththerightarroworleftarrowkeytoswitchtothenextor
previousvirtualmachine.Forexample,ifthehotkeycombinationisCtrl+Alt,userscan
pressCtrl+Alt+rightarrowtoswitchtothenextvirtualmachineorCtrl+Alt+leftarrow
toswitchtothepreviousvirtualmachine.
VMware, Inc. 477
Chapter 22 Installing ACE Packages
To use multiple virtual machines in kiosk mode
1 InstalltheACEinstancesonthehostmachine.
2 Usethefollowingexamplestowriteabatchfileorscripttostartthevirtual
machines:
Windowsbatchfile:
cd Program Files\VMware\VMware Player
start vmplayer.exe -k "C:\Documents and Settings\user1\My Documents\My
Virtual Machines\ace1\ace1.vmx"
sleep 20
start vmplayer.exe -k "C:\Documents and Settings\user1\My Documents\My
Virtual Machines\ace2\ace2.vmx"
sleep 20
start vmplayer.exe -k "C:\Documents and Settings\user1\My Documents\My
Virtual Machines\ace3\ace3.vmx"
Linuxscriptfile:
#!/bin/bash
vmplayer -k ~/vmware-ace/ace1/ace1.vmx & sleep 20
vmplayer -k ~/vmware-ace/ace2/ace2.vmx & sleep 20
vmplayer -k ~/vmware-ace/ace3/ace3.vmx &
The-kflagsuppressesthekioskmodedialogboxsothatyoudonotneedtoclick
OKtoenterkioskmode.
3 Ifanyvirtualmachinesthatarenotsettoruninkioskmodeareopenorrunning
onthehost,powerthemoffandclosethem.
Thescriptcannotstartandrunvirtualmachinesinkioskmodeifany
nonkioskmodevirtualmachinesareopen.
4 Runthebatchfileorscripttostartthevirtualmachinesinkioskmode.
Thevirtualmachinesarestartedintheorderlistedinthebatchfileorscript.Thefirst
virtualmachinestarteddefinestheadministratorpasswordforkioskmodeandthe
hotkeycombinationforexitingkioskmode.Ifasubsequentvirtualmachineinthelist
hasadifferentpasswordorhotkey,itdoesnotstart.Ifasubsequentvirtualmachinein
thelistisnotconfiguredtostartinkioskmode,itisnotallowedtostart.
Workstation Users Manual
478 VMware, Inc.
Install an ACE Client License
AnACEclientlicenseisadevicespecificlicense.DevicesincludePCs,laptops,and
portablemediadevicessuchasUSBflashdrives(storingaPocketACE).Thedetailsof
thelicensingtermsareprovidedintheenduserlicenseagreement(EULA)forACE
publishedonwww.vmware.com.
AlicenseddevicecanrunanynumberofACEinstances.TheACEclientlicenseis
associatedwiththedeviceitisinstalledonandisnotrestrictedtoaspecificACE
instance.
Ifyoupurchaseavolumelicense,youdonotneedtoinstallclientlicenses.
To install an ACE client license
1 ObtaintheACEclientlicenseserialnumberfromyourACEadministrator.
2 DoubleclickthedesktopshortcutfortheinstalledACEinstance.
3 Attheprompt,entertheserialnumberintheappropriatefieldandenteryour
nameandtheorganizationnameinthedialogbox.
4 ClickOK.
Change the ACE Client License
YoucanuseaVMwarePlayermenucommandtochangeorupdatealicense.
To change the ACE Client License
1 ChooseHelp>EnterACEClientLicense.
2 Dooneofthefollowing:
Entertheserialnumberinthedialogbox.
Ifyouneedtopurchasealicense,clickGetSerialNumber.
3 ClickOK.
NOTEIfyouarenotusinganACEvolumelicensekey,beawarethatwhenyoudeploy
aPocketACEtoaportablemediadevice,youshouldenteranACEclientlicense
immediately.ThePocketACEwillrunlocallyonthatcopyofWorkstation,butifitis
movedtoanotherunlicenseddevicewithouthavingtheACEclientlicenseentered,it
willnotpoweron.
VMware, Inc. 479
Chapter 22 Installing ACE Packages
Quit VMware Player
Asabestpractice,quitVMwarePlayerbeforeyoushutdownthehostcomputer.
To quit VMware Player
ChooseFile>ExitonWindowshostsorFile>QuitonLinuxhosts.
Dependingontheconfiguredexitbehavior,theACEinstanceissuspendedorshuts
downandthewindowcloses.
Alsodependingontheconfiguration,endusersmightbeabletochangetheexit
behaviorinthePreferencesdialogbox(File>Preferences).
Troubleshooting Tools
VMwareACEincludessometroubleshootingtoolsthatallowadministratorsandhelp
deskassistantstofixsomecommonproblemsthatusershavewithACEinstances,such
asforgottenuserpasswords.Thetoolsare:
ForstandaloneACEinstances:
TheACETools,whichisacommandlinetool.SeeUsingthevmwareacetool
CommandLineToolonpage 479.
Thehotfixfeature,whichusersaccessfrombuttonsindialogboxes.See
RespondtoHotFixRequestsonpage 481.
FormanagedACEinstances,seetheVMwareACEManagementServer
AdministratorsGuide.
Using the vmware-acetool Command-Line Tool
Thevmware-acetoolcommandlinetoolisatroubleshootingtoolthatenablesACE
administratorstofixalimitedsetofproblemsforstandaloneACEinstancesdirectlyon
anACEuserssystem.
Youcanprovidethefollowingsolutionswithvmware-acetool:
Settheuserspassword,sotheusercanruntheACEinstance.
Setcopyprotection,sotheusercanruntheACEinstanceinanewlocation.
Settheexpirationdate,sotheusercancontinuetouseanACEinstancethatispast
itsscheduledexpirationdate.
Workstation Users Manual
480 VMware, Inc.
Theconfigurationfile(.vmxfile)fortheACEinstancemustbeontheACEusers
machine.Thatis,youcannotusevmware-acetooltomakefixestofilesassociatedwith
theinstanceunlesstheconfigurationfileisonthesamemachineasthosefiles.
Youcanactuallyusethevmware-acetoolprogramtoresetpasswordsandfix
expirationdatesonanothermachine,butyoumusthavethe.vmx,.vmpl,andace.dat
filesfromtheuserallsetupinthesamedirectory.Thefollowingisanexampleofa
vmware-acetoolcommand:
vmware-acetool <command> <ACEconfigurationfile> <parameters>
Password Prompts
Allcommandspromptfortheadministrativetoolspassword.SeeSetting
AdministratorModePoliciesonpage 419.
ThesetPasswordcommandalsopromptsfortherecoverykeypasswordforthe
privaterecoverykeyfile,anewACEinstancepassword,andconfirmationofthatnew
password.SeeSetaRecoveryKeyforEncryptedACEInstancesonpage 396.
Followingisanexampleofthecommand:
vmware-acetool setPassword myACE.vmx recKey.priv
Table 22-2. Commands and Parameters for vmware-acetool
Command Parameters Description
setPassword Pathtorecoverykeyfile SettheACEinstances
password.
setExpirationDate Newexpirationdate SettheACEinstances
expirationdate.
allowCopy AllowtheACEinstanceto
runfromitscurrentlocation.
updateCurrentTime Updatetheinternalpolicy
clockofanACEinstanceto
thecurrenttime.
cloneToVM Netcloneconfigurationfile
Pathtorecoverykeyfile
Clonearegularvirtual
machinefroman
ACEenabledvirtual
machine.
VMware, Inc. 481
Chapter 22 Installing ACE Packages
Expiration Dates
Thenewexpirationdatecanbepassedasoneofthefollowing:
Anumberofdaysfromthecurrentdate
AnabsolutedateintheformatYYYY-MM-DD
AstartdateandanenddateintheformatYYYY-MM-DDYYYY-MM-DD
Thespecialvalue"never",sothattheinstanceneverexpires
Thespecialvalue"expired",sothattheinstanceexpiresimmediately
Followingareexamplesofthecommand:
vmware-acetool setExpirationDate myACE.vmx 30
vmware-acetool setExpirationDate myACE.vmx 2007-06-16
vmware-acetool setExpirationDate myACE.vmx "never"
vmware-acetool allowCopy myACE.vmx 30
Respond to Hot Fix Requests
IfyouenablethehotfixfeatureforstandaloneACEinstances,userscaneasilyrequest
helptoresolvethefollowingproblems:
Lostorforgottenpassword
ExpiredACEinstance
CopyprotectedACEinstancerunfromanewlocation
Forinformationaboutenablingthehotfixfeature,seeSettingHotFixPoliciesfor
StandaloneACEInstancesonpage 421.Forinformationaboutsettingarecoverykey,
whichyoumusthavetosendahotfixforalostorforgottenuserpassword,seeSeta
RecoveryKeyforEncryptedACEInstancesonpage 396.
Whenthehotfixfeatureisenabled,ifanenduserseesanotificationthattheACE
instanceisexpiredorcopyprotected,aRequestHotFixbuttonappearsinthedialog
box.Theuserclicksthisbutton,whichlaunchestheHotFixRequestwizard.This
wizardgeneratesahotfixrequestfile.Theusercansubmitthisfiletotheadministrator
asanemailattachmentorinsomeotherway.
Workstation Users Manual
482 VMware, Inc.
To respond to a hot fix request
1 Whenyoureceivethehotfixrequestfile,saveittoalocationthatyoucanaccess
fromtheadministratormachinewhereWorkstationisinstalled.
2 OpentheACEenabledvirtualmachinefortheinstancethatrequiresthehotfix.
3 ChooseFile>Open.
4 NavigatetothelocationofthehotfixrequestfileandclickOpen.
AhotfixtabopensintheWorkstationwindow.Thehotfixtabdisplaystheusers
nameandemailaddress,theproblemthatledtothehotfixrequest,andany
additionalnotetheuserentered.
5 ClickApprovehotfix.
6 Entertheappropriateinformationinthedialogbox.
7 Selectoneofthefollowingmethodsforsendingtheresponse:
ClickSendhotfixonthehotfixtabandclickOK.
Sendthehotfixfile.Itisinthesamefolderasthehotfixrequest.Thefile
extensionforthefixfileis.vmhf.
Thedisplayonthehotfixtabshowsthestatusofthehotfixrequest,approvedor
denied,andthedateonwhichyoutookaction.
Theuserappliesthehotfixbydoubleclickingthehotfixfile.
Troubleshooting Setup Issues
OccasionallyACEendusershaveproblemsloggingintoadomainafterrunningthe
ReverttoReimageSnapshotcommand.Theymightsometimesalsohaveproblems
withdomainvalidationandnameresolution.
Login Issues After Reverting to a Reimage Snapshot
Problem:TheACEusercannotlogtheACEinstancebackintoadomainafterchoosing
VM>Snapshot>ReverttoReimageSnapshot.
Description:TheACEinstancehasaWindowsguestoperatingsysteminstalledand
themachineaccountpasswordforthedomainisperiodicallyrenewedbydefault.Ifthe
passwordisrenewedbythetimetheuserrevertstheACEinstancetothesnapshot,the
snapshotspasswordisinvalidandloginfails.
Solution:Toavoidthisproblem,ensurethatthefollowingsecuritypolicyisenabled:
Refusemachineaccountpasswordchanges.
VMware, Inc. 483
Chapter 22 Installing ACE Packages
YoucanenablethispolicyontheACEenabledvirtualmachine(affectingallinstances
createdfromit)orontheprimarydomaincontroller.Fordetailsabouthowtochange
thepolicy,seethefollowingMicrosoftarticles:
LocalSecurityPoliciesGototheMicrosoftSupportsite,entertheMicrosoft
knowledgebasearticleID175468inthesearchcriteria,andclickthefirstsearch
result.
PDCSecurityPoliciesGototheMicrosoftTechNetWebsiteandenterDomain
controller:Refusemachineaccountpasswordchanges,inthesearchcriteria.
Issues with Domain Validation or Name Resolution
Problem:WhenyoutrytojoinanACEenabledvirtualmachinetoadomain,domain
validationornameresolutiondoesnotwork.
Description:SomeACEenabledvirtualmachineswithcertainnetworkconfigurations
mightdemonstratetheseproblems.
Solution:ConsulttheMicrosoftknowledgebasearticle.GototheMicrosoftSupport
Website,entertheMicrosoftknowledgebasearticleID314108inthesearchcriteria,
andclickthefirstsearchresult.
Issues with Domain Joins for Windows Vista and Windows 7 Guests
Problem:TheWindowsVistaandWindows7ACEinstancescannotjointhelocal
domainandinstancecustomizationfailedwiththemessageNetDomainJoin
function Error 1722: Could not join domain.
Description:WindowsVistaandWindows7ACEinstancesmighthavethisproblem.
Solution:Telltheusertopowerofftheinstanceandpoweritonagaintoretryinstance
customization.Theproblemisintermittentandrestartingmightsolvetheproblem.
Workstation Users Manual
484 VMware, Inc.
VMware, Inc. 485
Thisappendixdiscussesthecommandlineoptionsthatareavailableforthevmware
program.
Forinformationaboutusingthevmware-fullscreencommandtousefullscreen
switchmode,seeUsingvmwarefullscreentoRunaVirtualMachineonpage 377.
Forinformationaboutusingthevmrunprogramtooperateteamsorvirtualmachines
fromthecommandline,seemanualcalledUsingvmruntoControlVirtualMachines.
Thisappendixincludesthefollowingtopics:
StartupOptionsforWorkstationandVirtualMachinesonpage 485
UsingStartupOptionsinaWindowsShortcutonpage 487
Startup Options for Workstation and Virtual Machines
Table A1describesoptionsavailablewhenyourunWorkstationfromthecommand
line.YoucantypethesecommandsinaLinuxterminalwindoworattheWindows
commandprompt.Youcanalsocreatescriptstorunmultiplecommands.
Thesyntaxforthiscommandis:
OnaLinuxhostoperatingsystem:
/usr/bin/vmware [-n] [-x] [-X] [-m] [-t] [-q] [-s <variablename>=<value>]
[-v]
[/<path_to_virtual_machine>/<virtual_machine_name>.vmx]
[X toolkit options]
Appendix: Workstation
Command-Line Reference
Workstation Users Manual
486 VMware, Inc.
OnaWindowshostoperatingsystem:
C:\Program Files\VMware\VMware Workstation\vmware.exe [-B] [-n] [-x] [-X]
[-t] [-q] [-s <variablename>=<value>] [-v]
[<path_to_virtual_machine>\<virtual_machine_name>.vmx]
OnLinuxhosts,Xtoolkitoptionscanbepassedasarguments,althoughsomeofthem
(mostnotablythesizeandtitleoftheWorkstationwindow)cannotbeoverridden.
XtoolkitoptionsarenotrelevantonaWindowshost.
Table A-1. Command-Line Options for the vmware Program
Option Description
-n OpensanewWorkstationwindow.
-B (Windowshostsonly)OpensanewWorkstationwindowbut
hidesthesidebarandtoolbars.Onlythetabsofopenvirtual
machinesareshown.Usingthisoptionhasthesameeffectas
clickingtheWorkstationiconintheupperleftcornerofthe
WorkstationwindowandchoosingHideControlsfromthe
menuthatappears.
-t Opensavirtualmachineorteaminanewtabintheexisting
Workstationwindow.
-x PowersonthevirtualmachinewhenWorkstationstarts.This
isequivalenttoclickingthePowerOnbuttoninthe
Workstationtoolbar.
-X PowersonthevirtualmachineandswitchestheWorkstation
windowtofullscreenmode.
-m Startstheprograminquickswitchmode.
-q Closesthevirtualmachinestabwhenthevirtualmachine
powersoff.Ifnoothervirtualmachineisopen,italsoexits
Workstation.Thisoptionisusefulwhentheguestoperating
systemcanpoweroffthevirtualmachine.
-s Setsthespecifiedvariabletothespecifiedvalue.Anyvariable
namesandvaluesthatarevalidintheconfigurationfilecan
bespecifiedonthecommandlinewiththe-sswitch.
-v Displaystheproductname,version,andbuildnumber.
<path_to_VM_or_team> Launchesavirtualmachinebyusingthespecifiedvirtual
machineorteamconfigurationfile(.vmxor.vmtm file).
VMware, Inc. 487
Appendix: Workstation Command-Line Reference
Using Startup Options in a Windows Shortcut
Themostconvenientwaytousethestartupoptionsistoincorporatethemintothe
commandthataWindowsshortcutgenerates.
Tocreatetheshortcut,rightclicktheshortcutandclickProperties.IntheTargetfield,
addanyswitchestouseafterthevmware.exefilename.Forexample,thefollowing
commandlaunchestheWindowsMevirtualmachinespecified,powersiton,and
switchestofullscreenmode:
"C:\Program Files\VMware\VMware Workstation\vmware.exe -X C:\Documents and
Settings\<username>\My Documents\My Virtual Machines\Windows
Me\Windows Me.vmx"
Enclosetheentirecommandstringinquotationmarks.Theconfigurationfilehasa
.vmxextensionbydefault.
Workstation Users Manual
488 VMware, Inc.
VMware, Inc. 489
B bridgednetworking
Atypeofnetworkconnectionbetweenavirtualmachineandthehostsphysical
network.Withbridgednetworking,avirtualmachineappearsasanadditional
computeronthesamephysicalnetworkasthehost.Seealsohostonlynetworking.
C clone
Aduplicateofavirtualmachine.Seealsofullclone,linkedclone.
customnetworking
Anytypeofnetworkconnectionbetweenvirtualmachinesandthehostthatdoes
notusethedefaultbridged,hostonly,ornetworkaddresstranslation(NAT)
networkingconfigurations.Forinstance,differentvirtualmachinescanbe
connectedtothehostbyseparatenetworksorconnectedtoeachotherandnotto
thehost.Anynetworktopologyispossible.
DE diskmode
Apropertyofavirtualdiskthatdefinesitsexternalbehavior(howthe
virtualizationlayertreatsitsdata)butiscompletelyinvisibletotheguestoperating
system.Availablemodesincludepersistentmode(changestothediskarealways
preservedacrosssessions),nonpersistentmode(changesareneverpreserved),and
undoablemode(changesarepreservedattheusersdiscretion).
F Favoriteslist
AlistintheleftpanelofthemainWorkstationwindowthatshowsthenamesof
virtualmachinesthatauserhasadded.YoucanusetheFavoriteslisttolauncha
virtualmachineortoconnecttothevirtualmachinesconfigurationfileandmake
changesinthevirtualmachinesettings.
Glossary
Workstation Users Manual
490 VMware, Inc.
fullclone
Acompletecopyoftheoriginalvirtualmachine,includingallassociatedvirtual
disks.Seealsolinkedclone.
fullscreenmode
Adisplaymodeinwhichthevirtualmachinesdisplayfillstheentirescreen.See
alsofullscreenswitchmode.
fullscreenswitchmode
Adisplaymodeinwhichthevirtualmachinesdisplayfillstheentirescreen,and
theuserhasnoaccesstotheWorkstationuserinterface.Theusercannotcreate,
reconfigure,orlaunchvirtualmachines.Asystemadministratorperformsthose
functions.Seealsofullscreenmode.
G GotoSnapshot
Acommandthatallowsyoutorestoreanysnapshotoftheactivevirtualmachine.
SeealsoReverttoSnapshot.
guestoperatingsystem
Anoperatingsystemthatrunsinsideavirtualmachine.Seealsohostoperating
systemonpage 490.
HK hostonlynetworking
Atypeofnetworkconnectionbetweenavirtualmachineandthehost.With
hostonlynetworking,avirtualmachineisconnectedtothehostonaprivate
network,whichnormallyisnotvisibleoutsidethehost.Multiplevirtualmachines
configuredwithhostonlynetworkingonthesamehostareonthesamenetwork.
Seealsobridgednetworking,customnetworking.
host
ThephysicalcomputeronwhichtheVMwareWorkstationsoftwareisinstalled.
hostoperatingsystem
Anoperatingsystemthatrunsonthehostmachine.Seealsoguestoperating
system.
independentdisk
Atypeofvirtualdiskthatisnotaffectedbysnapshots.Youcanconfigure
independentdisksinpersistentandnonpersistentmodes.Seealsononpersistent
mode,persistentmode,snapshot.
VMware, Inc. 491
Glossary
LM LANsegment
Aprivatevirtualnetworkthatisavailableonlytovirtualmachineswithinthesame
team.Seealsovirtualnetwork,team.
linkedclone
Acopyoftheoriginalvirtualmachinethatmusthaveaccesstotheparentvirtual
machinesvirtualdisks.Thelinkedclonestoreschangestothevirtualdisksina
separatesetoffiles.Seealsofullclone.
NO nonpersistentmode
Adiskmodeinwhichalldiskwritesissuedbysoftwarerunninginsideavirtual
machineappeartobewrittentotheindependentdiskbutareinfactdiscarded
afterthevirtualmachineispoweredoff.Asaresult,avirtualdiskorphysicaldisk
inindependentnonpersistentmodeisnotmodifiedbyactivityinthevirtual
machine.Seealsodiskmode,persistentmode.
P parent
Thesourcevirtualmachinefromwhichyoutakeasnapshotormakeaclone.Afull
clonehasnocontinuedlinktoitsparent,butalinkedcloneandasnapshotmust
haveaccesstotheparentsvirtualdiskfiles.Ifyoudeletetheparentvirtual
machine,anylinkedcloneorsnapshotbecomespermanentlydisabled.Toprevent
deletion,youcanmaketheparentatemplatevirtualmachine.Seealsofullclone,
linkedclone,snapshot.
persistentmode
Adiskmodeinwhichalldiskwritesissuedbysoftwarerunninginsideavirtual
machineareimmediatelyandpermanentlywrittentoavirtualdiskthathasbeen
configuredasanindependentdisk.Asaresult,avirtualdiskorphysicaldiskin
independentpersistentmodebehaveslikeaconventionaldiskdriveonaphysical
computer.Seealsodiskmode,nonpersistentmode.
physicaldisk
Aharddiskinavirtualmachinethatismappedtoaphysicaldiskdriveorpartition
onthehostmachine.Aphysicaldiskisalsoreferredtoasarawdisk.Avirtual
machinesdiskcanbestoredasafileonthehostfilesystemoronalocalharddisk.
Whenavirtualmachineisconfiguredtouseaphysicaldisk,Workstationdirectly
accessesthelocaldiskorpartitionasaphysicaldevice(notasafileonafile
system).Seealsovirtualdisk.
Workstation Users Manual
492 VMware, Inc.
Q quickswitchmode
Adisplaymodeinwhichthevirtualmachinesdisplayfillsmostofthescreen.In
thismode,tabsatthetopofthescreenallowyoutoswitchquicklyfromone
runningvirtualmachinetoanother.Seealsofullscreenmode.
R rawdisk
Seephysicaldisk.
record/replayfeature
ThisfeatureletsyourecordallofaWorkstation5.xor6.xvirtualmachinesactivity
overaperiodoftime.UnlikeWorkstationsmoviecapturefeature,the
record/replayfeatureletsyouexactlyduplicatetheoperationsandstateofthe
virtualmachinethroughoutthetimeoftherecording.
redolog
Thefilethatstoreschangesmadetoadiskinallmodesexceptthepersistentand
independentpersistentmodes.Foradiskinnonpersistentmode,theredologfile
isdeletedwhenyoupowerofforresetthevirtualmachinewithoutwritingany
changestothedisk.Youcanpermanentlyapplythechangessavedintheredolog
toadiskinundoablemodesothattheybecomepartofthemaindiskfiles.Seealso
diskmode.
ReverttoSnapshot
Acommandthatrestoresthestatusoftheactivevirtualmachinetoitsimmediate
parentsnapshot.Thisparentisrepresentedinthesnapshotmanagerbythe
snapshotappearingtotheimmediateleftoftheYouAreHereicon.SeealsoGoto
Snapshot,snapshotmanager.
S sharedfolder
Afolderonahostcomputeroronanetworkdriveaccessiblefromthehostthat
canbeusedbyboththehostandoneormorevirtualmachines.Itprovidesaway
ofsharingfilesbetweenhostandguestoramongvirtualmachines.InaWindows
virtualmachine,sharedfoldersappearasfoldersonadriveletter.InaLinuxor
Solarisvirtualmachine,sharedfoldersappearunderaspecifiedmountpoint.
snapshot
Areproductionofthevirtualmachinejustasitwaswhenyoutookthesnapshot,
includingthevirtualmachinespowerstate(on,off,orsuspended).Ifthevirtual
harddisksarenotsettoindependentmode,asnapshotalsoincludesthestateof
thedataonallthevirtualmachinesdisks.Youcantakeasnapshotwhenavirtual
machineispoweredon,poweredoff,orsuspended.Seealsoindependentdisk.
VMware, Inc. 493
Glossary
snapshotmanager
Acontrolpanelusedtotakeactionsonanyofthesnapshotsandrecordings
associatedwiththeselectedvirtualmachine.Seealsorecord/replayfeature,
snapshot.
TU team
Agroupofvirtualmachinesthatareconfiguredtooperateasoneobject.Youcan
poweron,poweroff,andsuspendateamwithonecommand.Youcanconfigure
ateamtocommunicateindependentlyofanyothervirtualorrealnetworkby
settingupaLANsegment.SeealsoLANsegment,virtualnetwork.
Unitymode
Adisplaymodeinwhichavirtualmachinesapplicationsaredisplayedin
applicationwindowsdirectlyonthehostsdesktop.Thevirtualmachineconsole
viewishidden,andyoucanminimizetheWorkstationwindow.Inthismode,a
virtualmachinesapplicationslookjustlikeotherapplicationwindowsonthehost.
VX virtualdisk
Afileorsetoffilesthatappearsasaphysicaldiskdrivetoaguestoperating
system.Thesefilescanbeonthehostmachineoronaremotefilesystem.Seealso
physicaldisk.
virtualhardware
Thedevicesthatmakeupavirtualmachine.Thevirtualhardwareincludesthe
virtualdisk,removabledevicessuchastheDVDROM/CDROMandfloppy
drives,andthevirtualEthernetadapter.Youconfigurethesedeviceswiththe
virtualmachinesettingseditor.Seealsovirtualmachinesettingseditor.
virtualmachine
Avirtualizedx86PCenvironmentinwhichaguestoperatingsystemand
associatedapplicationsoftwarecanrun.Multiplevirtualmachinescanoperateon
thesamehostmachineconcurrently.
virtualmachineconfiguration
Thespecificationofwhichvirtualdevices,suchasdisksandmemory,arepresent
inavirtualmachineandhowtheyaremappedtohostfilesanddevices.
virtualmachineconfigurationfile
Afilecontainingavirtualmachineconfiguration.This.vmxfileiscreatedwhen
youcreatethevirtualmachine.Itisusedtoidentifyandrunaspecificvirtual
machine.
Workstation Users Manual
494 VMware, Inc.
virtualmachinesettingseditor
Apointandclickcontrolpanelusedtoviewandmodifyavirtualmachines
settings.
virtualnetwork
Anetworkconnectingvirtualmachinesthatdoesnotdependonphysical
hardwareconnections.Forexample,youcancreateavirtualnetworkbetweena
virtualmachineandahostthathasnoexternalnetworkconnections.Youcanalso
createaLANsegmentforcommunicationbetweenvirtualmachinesonateam.See
alsoLANsegment,team.
virtualnetworkeditor
Apointandclickeditorusedtoviewandmodifythenetworkingsettingsforthe
virtualnetworkscreatedbyWorkstation.
VMwarePlayer
FreesoftwarethatenablesPCuserstocreateandrunanyvirtualmachineona
WindowsorLinuxPC.VMwarePlayerrunsvirtualmachinescreatedbyVMware
Workstation,VMwareServer,orESXServerandalsosupportsMicrosoftvirtual
machinesandSymantecBackupExecSystemRecoverydiskformats.
VMwareTools
Asuiteofutilitiesanddriversthatenhancestheperformanceandfunctionalityof
yourguestoperatingsystem.KeyfeaturesofVMwareToolsincludesomeorallof
thefollowing,dependingonyourguestoperatingsystem:anSVGAdriver,a
mousedriver,theVMwareToolscontrolpanelandsupportforsuchfeaturesas
sharedfolders,draganddropinWindowsandLinuxguests,shrinkingvirtual
disks,timesynchronizationwiththehost,VMwareToolsscripts,andconnecting
anddisconnectingdeviceswhilethevirtualmachineisrunning.Seealsoshared
folder.
VMware, Inc. 495 VMware, Inc. 495
Index
Numerics
3D support 173
A
About tab
VMware Tools 123
access control policies, ACE 391, 397
ACE instance
defined 383
installing on a Linux host 470
installing on a Windows host 466
offline usage 421
removable device policy 411
running a Pocket ACE 463
setting policies for 390
uninstalling from a Linux host 473
uninstalling from a Windows
host 468
upgrading 473
ACE Management Server
and Active Directory 397
defined 383
ACE New Package wizard 449
ACE Resources directory 446
ACE tools, using 479
ACE-enabled virtual machine
configuring 447
creating packages for 450
defined 383
deployment platform 446
ACPI S1 sleep feature 380
activation policy, ACE 391
Active Directory
password change proxying 397
adapter
host virtual adapters 301, 410
in promiscuous mode on a Linux
host 316
specifying physical, for ACE 410
virtual Ethernet 295
Add Hardware wizard 332, 363
Add Shared Folder wizard 191
address
assigning IP 305
assigning MAC manually 309
IP on virtual network 304
MAC 308
network address translation 316
using DHCP to assign 304
administrative tools policy, ACE 419
Advanced Linux Sound Architecture,
using 176
ALSA See Advanced Linux Sound
Architecture
AMD Athlon 64 processor 37
AMD Opteron processor 37
AMD Sempron processor 37
AMD Turion 64 processor 37
appliance view
for virtual machines 182
policy for ACE instances 415
assign
IP address 304
network port number in NAT 323
Workstation Users Manual
496 VMware, Inc.
Athlon 64 processor 37
audio 32, 175, 176
AudioPCI 176
authentication policy, ACE 391
autofit settings 164
automatic bridging 297, 410
AutoProtect
restrictions 214
setting up 215
AutoProtect feature
See also snapshot, AutoProtect 214
B
background, running virtual machines
in 71, 264
bandwidth
controlling, in team networks 271
LAN segment 281
battery information, reporting in
guest 180
BIOS
file in virtual machine 97
provided in virtual machine 30
setup, entering 148
.bmp files for screen captures 183
bridged networking
ACE policy for network
adapters 410
and Samba servers 329
configuring options 297
browser
and appliance views 182
configuring on Linux host 45
BSD
supported 32-bit guest operating
systems 36
supported 64-bit guest operating
systems 36
BT/KT-958 drivers 86
bulkDeploy.exe program 462
bundle installer for Workstation 45
BusLogic 30, 362
C
capacity, disk 236, 249
capture
screenshot 183
snapshot of virtual machine 203
virtual machine activity 257
CD
adding drive to virtual machine 250
CD-ROM image file 30
legacy emulation mode for 252
package delivery for ACE 453
.cfg file 97
change
hot-key combinations 74
team name 274
virtual machine name 65
Change Version wizard 94
clock
real-time on Linux host 44
synchronize guest and host 120
clone template 221
Clone Virtual Machine wizard 222
clones
creating, for teams 272, 276, 283
creating, in Clone Virtual Machine
wizard 221
enable template mode 221
full 220
IP address 222
linked 220, 227
MAC address and UUID of 219
network identity of 222
overview 219
static IP address 222
VMware, Inc. 497
Index
color
display on VNC clients 228
screen, in a virtual machine 172
comm port
See serial connection, serial port
command-line interface
for VMware Tools 132
for Workstation 485
commands
keyboard shortcuts 72
startup, on the command line 378,
485
startup, on Windows hosts 487
compacting virtual disks 240
configure record/replay 259
connect
CD/DVDs and floppies to ISO
images 253
USB devices 353
Conversion wizard 133, 142, 143
converting virtual machines 133
copy and paste feature 189
copy protection policy for ACE
instances 400
copy virtual machine 225
CPU
host requirement 23
provided in virtual machine 29
creating
ACE packages 449
policies for an ACE instance 390
virtual disks 242
Creative Labs 176
Creative Labs Sound Blaster 32
Ctrl+Alt hot-key combination 340
custom EULA ACE package setting 445
D
DDNS (dynamic domain name
service) 311
debugging
using serial connection 338
default scripts for VMware Tools 125
defragmenting virtual disks 239
deleting
recordings of virtual machine
activity 212, 268
snapshots 208, 212
virtual machines 158
deploy.exe program 461
deployment settings, ACE
deployment platform 446
encryption 436
EULA 445
instance customization 437
package lifetime 436
destinations for imported virtual
machines 140
device connection policy 411
device drivers
for generic SCSI devices 363
VMware Tools 102
devices
ACE policies for USB 412
adding a generic SCSI device 363,
364
connecting and disconnecting 122,
181
disconnecting from USB
controller 357
processor 29
removable, ACE policies for 411
USB 351
Devices tab
in Preferences dialog box 67
VMware Tools 122
Workstation Users Manual
498 VMware, Inc.
DHCP
assigning IP addresses on a virtual
network 304
changing settings 300
configuring on a Linux host 306
configuring on a Windows host 306
DHCPD 311
lease 300
on a virtual network with NAT 317
server 286, 300
server on virtual network 290, 291
stopping 314
dial-up connection 306
directories, shared 195, 196
disable
acceleration 179
copying and pasting text and
files 190
drag-and-drop of files and
folders 188
folder sharing 192
interface features 369
disc labels for packages 453
disk
See also virtual disk
IDE drive supported in host 24
IDE drives in virtual machine 30
independent 207
mapping to a drive 199
optical drives supported in host 25
SCSI drive supported in host 24
size 236, 249
space required on host computer 24
.vmdk virtual disk file 97
display
autofit settings for 164
color depth 172
fitting window to virtual machine 169
full screen 162, 164
multiple monitor 166, 169
requirements on hosts 24
switching virtual machines 165
Display tab in preferences editor 169
distributing ACE packages 449
DMZ 271
DNS
on a NAT network 318
setup issues, troubleshooting 482
domain join, remote 443
domain problems 482
domain setting, in ACE instance
customization 440
downgrading virtual machines 94
download components 153
drag-and-drop feature 187
dragging and dropping
images, text, and file contents
between host and
guest 188
drivers
SCSI 362
sound 176
video, in older versions of
Windows 105
drives
CD/DVD-ROM 30, 250
floppy 31, 250
IDE 30
tape 361
virtual IDE 242
virtual SCSI 242
dual-boot computers and virtual
machines 254
dual-monitor display 166, 169
DVD
adding drive to virtual machine 250
legacy emulation mode for 252
VMware, Inc. 499
Index
optical, supported 25
package delivery for ACE 453
dynamic domain name service 311
E
Eclipse
installing the Workstation plug-in
for 41
EHCI controller 31
EM64T processor 37
encrypt
restrictions 156
encrypting a virtual machine 155
encryption for ACE packages and
instances 436
enhanced virtual keyboard 339, 416
Ethernet adapter
adding to virtual machine 295
for teams 282
promiscuous mode 316
virtual network adapters 286
Ethernet controller 25
Ethernet switches 32
exclusive mode 165
expand
virtual disk 240
expiration policy for ACE instances 399
F
Favorites list
creating folders in 64
overview 63
removing virtual machines from 64
files
BIOS in virtual machine 97
redo log 97
Samba and file sharing on a Linux
host 328
sharing among virtual machines and
host 187
snapshot 97
suspended state 97
used by a virtual machine 97
used by snapshot 97
virtual machine 150
firewall 324
fit to guest and fit to window 169
floppy
drives in virtual machine 31, 252
image file 31, 253
folders
in the Favorites list 64
shared, See shared folder
FreeBSD
supported 32-bit guests 36
supported 64-bit guests 36
VMware Tools for 112
FTP 318
full screen mode 162
full screen settings 164
full screen switch mode 372, 379
full screen toolbar 164, 415
G
gated host network 310
global configuration file 372
graphics
See also display
support in virtual machine 30, 172
guest
autofit 169
defined 22
fit command 169
guest network access policies, ACE 402,
411
guest operating system
for ACE instance customization 439
installing 91
support for 64-bit 37
Workstation Users Manual
500 VMware, Inc.
supported 32
supported FreeBSD 32-bit 36
supported FreeBSD 64-bit 36
supported Linux 32-bit 35
supported Linux 64-bit 36
supported MS-DOS 33
supported Solaris 32-bit 36
supported Solaris 64-bit 36
upgrades 94
Windows 32-bit 33
Windows 64-bit 34
GUID Partition Table (GPT) disks 139
H
Hardware tab in virtual machine settings
editor 69
headless virtual machines (run in the
background) 71, 264
HIDs (human interface devices) 353
host
defined 22
hard disk space required 24
network access policies, ACE 411
optical drives supported 25
policies, ACE 402, 466
system requirements 23
virtual adapters 301
host-guest data script policies 397
host-only networking
basic configuration 290
selecting IP addresses 304
hot fix, ACE
policies 421
responding 481
hot keys
for full screen switch mode 373, 375
hexadecimal values for 373
in Workstation preferences 340
setting 74
using Ctrl+Alt+Insert and
Ctrl+Alt+Delete 72
Hot Keys tab 67
I
ICMP 318
IDE
drive supported in host 24
drives in virtual machine 30
optical drive supported in host 25
IDESCSI, setting up virtual disk as 237
image file
floppy 31, 253
ISO 30, 250, 253
import 145
importing virtual machines 133, 135
independent disk 207
initialization scripts for instance
customization 440
install components 153
install ESX 4.0 and ESXi 4.0 on
Workstation 90
installation requirement
ESX 4.0 and ESXi 4.0 90
installing
ACE instance on a Linux host 470
ACE instance on a Windows
host 466
guest operating systems 91
Pocket ACE on portable device 461
software in a virtual machine 179
VMware Player on a Linux host 469
VMware Tools silently on Windows
guests 106
Workstation on Linux host 44
Workstation on Windows host 41
Workstation silently on Windows
hosts 42
VMware, Inc. 501
Index
instance customization, ACE
deployment settings for 440
guest operating systems for 439
initialization scripts 440
Microsoft Sysprep deployment tools
for 439
package settings, overview 437
packages with 453
placeholder values 442
specifying license information for
Windows servers 443
workgroup or domain setting 440
Intel EM64T processor 37
IP address
assigning 305
clone 222
static 305
IP packet forwarding 307
ISO image file 30, 250, 253
K
Kbps, for LAN segment 281
kernel
paravirtual, support for 93
key code mapping 345
keyboard
enhanced virtual, ACE policy 416
enhanced virtual, on Windows 339
language keymaps for VNC
clients 341
mapping on a Linux host 342
shortcuts 72, 158
USB 351
keyloggers 416
keysym
defined 344
mapping 345
kiosk mode, ACE
policies 420
preparing Linux hosts for 472
starting multiple virtual machines
in 476
startup behavior 475
L
LAN segments
and teams 280
changing name 281
configuring connections to 282
deleting 283
setting bandwidth 281
setting Kbps 281
setting packet loss 281
leaks, IP packet 306
legacy emulation for DVD/CD-ROM
drives 252
licensing, serial number and 474
linked clones 227
Linux
32-bit host 27
64-bit host 27
installing on Linux host 44
supported 32-bit guest operating
systems 35
supported 64-bit guest operating
systems 36
supported host operating
systems 27
uninstalling Workstation on Linux
host 47
upgrading on Linux host 51
LiveState system image, importing 135
local area networking 25
location of virtual machine files 83, 150
lock files 236
log files 97, 379
LSI Logic 30, 86, 362
Workstation Users Manual
502 VMware, Inc.
M
MAC address
and clones 219
assigning manually 309
of virtual Ethernet adapter 308
map
key code 345
keyboard 342
keysym 345
mapped drives, for virtual disks 198
mapping virtual disks to a drive 199
master boot record (MBR) disks 139
memory
amount required on host 23
settings 415
Microsoft Sysprep deployment tools 440
MIDI 175
mode
exclusive 165
full screen 162
preview 448
promiscuous 316
quick switch 165
Unity 158
modifier keys 373
monitors
specifying the number of 166, 169
using multiple 166, 169
mouse
driver, installed by VMware
Tools 102
USB 351
movie capture 184
moving a virtual machine 223
MP3 175
MS-DOS 33
multiple monitors, using 166, 169
Mylex 30, 86, 362
N
name
changing team name 274
changing virtual machine name 65
NAT
ACE policies for 409
advanced configuration 319
and DHCP 317
and DNS 318
and the host computer 317
external access from a NAT
network 318
on virtual network 289, 316
port forwarding 323, 328
sample configuration file for Linux
host 327
selecting IP addresses 304
specifying connection from port
below 1024 320
NAT.conf file 321, 327
NetLogon 324
NetWare, Novell 36, 113, 123
network
adding and modifying virtual
Ethernet adapters 295
automatic bridging 297
automatic bridging for ACE
instances 410
changing DHCP settings 300
changing subnet settings 300
changing the configuration 295
components 285
configuring bridged networking
options 297
DHCP 304
DHCP server 286
dial-up connection 306
dynamic domain name service 311
hardware address 308
VMware, Inc. 503
Index
host-only 290
host-only subnet 304
identity, clone 222
IP forwarding 307
IP packet leaks 306
MAC address 308
NAT 289, 316
NAT as firewall 324
NAT subnet 304
packet filtering 307
promiscuous mode on a Linux
host 316
routing between two host-only
networks 314
Samba 328
second bridged network on a Linux
host 299
switch 285
token ring 289
two host-only networks 302
virtual DHCP server 290, 291
virtual Ethernet adapter 286
virtual network editor 297, 301, 306
virtual switch 285
virtualizing in a team 271
network access policies, ACE 402, 410
network adapters
creating, for team networks 282
virtual, adding 295
virtual, overview of 286
network image package delivery for
ACE 453
New Package wizard 449
New Virtual Machine wizard 66, 80, 89,
235
NFS ports 320
Novell NetWare
supported guests 36
VMware Tools for 113
Novell Open Enterprise Server
supported guests 36
NVRAM 97
O
offline usage of ACE instances,
policy 421
Open Enterprise Server 36
open virtual machine format (.ovf and
.ova files) 137
operating system
32-bit Windows host 26
64-bit Windows host 26
FreeBSD 32-bit guest 36
FreeBSD 64-bit guest 36
installing guest 91
Linux 32-bit guest 35
Linux 32-bit host 27
Linux 64-bit guest 36
Linux 64-bit host 28
MS-DOS guest 33
Solaris 32-bit guest 36
Solaris 64-bit guest 36
support for 64-bit guest 37
Windows 32-bit guest 33
Windows 64-bit 34
Opteron processor 37
optical drive supported in host 25
Options tab
virtual machine settings editor 70
VMware Tools 120
.ovf and .ova files 137
P
P2V (physical-to-virtual) conversion 133
Package Properties dialog box 454
package settings, ACE
custom EULA 445
deployment platform 446
Workstation Users Manual
504 VMware, Inc.
encryption 436
instance customization 437
package lifetime 436
placeholder values in instance
customization 442
remote domain join 443
workgroup or domain in instance
customization 440
Packages tab 454
packages, ACE
burning files onto discs 453
changing lifetime setting 436
creating 449
creation progress 453
deployment for Pocket ACE 461
deployment platform for 446
disc labels for 453
disk space required for 452
distribution format 453
Pocket ACE installation 461
pre-deployment test for 455
previewing before deployment 455
registration 453
testing before deployment 455
viewing history of 454
packet
filtering 307
leaks 306
packet loss, configuring, for LAN
segments 281
parallel ports
configuring on a Linux host 333
in a virtual machine 331
installing in virtual machines 332
paravirtualized kernels in Linux
guests 93
parent snapshot 204
pause
restrictions 154
pause feature 154
physical disk
adding physical disks 244
capacity 238
storing virtual disks on 237
using in a virtual machine 238
ping 318
placeholder values in instance
customization 442
platform deployment settings, ACE 446
Player policy, ACE 415
plug-ins
writing, for ACE instances 424
.png files for screen captures 183
Pocket ACE
deleting the cache 468, 473
deploying 461
description 88, 457
Disk Size Calculator 88
installing on portable device 461
instructions for running 463
portable device requirements 459
Pocket ACE Deploy Utility dialog
box 461
policies, ACE
access control 391
activation 391
administrative tools 419
authentication 391
copy protection 400
device connection 411
expiration 399
host 402, 466
host-guest data script 397
hot fix 421
kiosk mode 420
network access 402
Player runtime 415
removable device 411
VMware, Inc. 505
Index
resource signing 401
runtime preferences 415
setting for an ACE instance 390
snapshot 418
update frequency 421
USB device 412
using scripts 424
virtual printer policy 414
policy editor, using 390
policy update frequency, ACE 421
port
TCP and UDP below 1024 320
VNC 228
port forwarding 323, 328
Power menu
disable functions 369
using, for teams 280
power off
snapshot options 213
team 279
Power Off button 152
power on
a virtual machine 148
team 279
to BIOS 148
Powered On list 65
power-on script for ACE instances 394
preferences
display 169
hot keys 340
setting, for Workstation 67
VMware Tools upgrade options 115
workspace 67
Preview in Player icon 448
preview mode, ACE 448, 455
previewing ACE packages 455
printers
ACE virtual printer policy 414
using host printers in a virtual
machine 180
processor
host requirement 23
provided in virtual machine 29
supported for 64-bit guest 23, 37
promiscuous mode 316
publishing ACE policy changes 455
Q
quick switch mode 165
quiet mode, install VMware Tools 106
quitting ACE Player 479
R
RAM
amount required on host 23
raw disk 238
Real Media 175
real-time clock requirement on Linux
host 44
record/replay feature 257, 259
recordings of virtual machine execution
deleting 212
renaming 210
.REDO file 97
registration
of ACE packages 453
of VMware Workstation 75
reimage snapshots 418
remote connections to a virtual
machine 228
remote domain join 443
RemoteDisplay.vnc.keyMap
property 341
removable devices
ACE policies for 411
deploying Pocket ACE packages
to 461
disconnecting 357
Workstation Users Manual
506 VMware, Inc.
removable drive for Pocket ACE 461
removing
a virtual disk 243
devices from a virtual machine 181
Repair option
for VMware Tools installations 105
repairing VMware Tools
installations 114, 118
Replay toolbar 261, 262
reporting problems to VMware 76
Reset button 152
resizing
Linux guests 170
Solaris guests 171
resolution, screen 164
resource signing policy for ACE
instances 401
restricted user interface 369
resume
team 279
virtual machine 201
reverting to snapshot 211
routing
between host-only networks 314
host only 310
runtime preferences policy, ACE 415
S
Samba
and file sharing on a Linux host 328
modifying configuration for
Workstation 328
on both bridged and host-only
networks 330
scan code 344
scanner 361
screen captures 183
screen colors
for VNC clients 228
setting, for virtual machines 172
screen modes
full screen 162
quick switch 165
screen resolution 171
screenshot capture 183
screenshots 183
scripts
creating custom VMware Tools 126
enabling, disabling, and
running 122
for ACE instance customization 440
power on, for ACE instances 394
running and disabling 128
running during power state
changes 125
startup, for ACE kiosk mode 476
writing, for ACE instances 424
Scripts tab in VMware Tools 122
SCSI
adding a generic SCSI device 363,
364
avoiding concurrent access on a
Linux host 363
connecting to generic 361
devices in virtual machine 30
drive supported in host 24
driver for Windows NT guest 362
driver for Windows Server 2003
guest 362
driver for Windows XP guest 362
drivers 86, 362
generic SCSI on a Linux host 363
generic SCSI on a Windows
host 361
VMware, Inc. 507
Index
optical drives 25
permissions for a generic SCSI
device on a Linux host 361
setting up virtual disk as 237
Sempron processor 37
serial connection
between host application and virtual
machine 335
between two virtual machines 335
for debugging 338
to a serial port on the host 335
serial number
for ACE instances 474
serial port, installing and using 335
server
DHCP 286, 306, 317, 324
DNS 311, 317, 318, 319
WINS 319
setting up AutoProtect 215
share
files on a Linux host with
Samba 328
shared folder
enable and disable 192
mounting, on Linux 196
on Linux and Solaris guests 196
permissions on Linux 196
using 190
viewing 195
sharing virtual machines 227
shortcuts, keyboard 67, 72, 340
shrink
virtual disks 123, 240
virtual disks in Netware 123
Shrink tab, VMware Tools 123
sidebar panel 62
size
disk 236, 249
virtual disk 30
sleep, ACPI 380
smart cards in virtual machines 358
SMP
See virtual SMP
snapshot 215
and Workstation 4 virtual
machines 215
as background activity 206
AutoProtect 214
deleting 208, 212
disabling menu functions 369
excluding virtual disks from 207
files 97
linear process 203
parent 204
policies 418
power-off options 213
preserving AutoProtect 215
process tree 204
renaming 208, 210
restoring 211
reverting to 211
reverting to at power off 211
taking 209
team 283
using 203
snapshot manager 208
Solaris
resizing guests 171
supported 32-bit guest operating
systems 36
supported 64-bit guest operating
systems 36
VMware Tools for 111
sound
configuring 175
drivers for Windows 9x and NT
guests 176
Workstation Users Manual
508 VMware, Inc.
Sound Blaster 176
support in guest 32
.spf file, importing 135
starting
ACE Player 474, 475
Workstation 53
startup commands
used by VMware Tools 130
startup scripts
for ACE kiosk mode 476
using VMware Tools 129
static IP addresses
clone 222
range of 317
.std file 97
stopping
ACE Player 479
recording virtual machine
activity 264
StorageCraft images, importing 135
streaming virtual machines 149, 230
stretch guest display setting 164
subnet
changing settings 300
in NAT configuration 304
on host-only network 304
substring matching, for configuring which
physical network adapter to
use 410
Sun Solaris
supported 32-bit guest operating
systems 36
supported 64-bit guest operating
systems 36
support scripts, running 76
suspend
files 97
team 279
virtual machine 201
.sv2i file, importing 135
SVGA drivers
installing, in older Windows
guests 105
switch
virtual network 285
workspaces in Linux guest 340
symmetric multiprocessing
See virtual SMP
system requirements 23
for guests 32
host 23
T
tabs
in Preferences dialog box 67
in VMware Tools control panel 119
virtual machine 54
tape drive 361
.tar file for installing VMware Tools 109
team
adding virtual machine to 276
and LAN segments 280
cloning virtual machine from 283
closing 274
creating clone in New Team
wizard 272, 276
deleting 275
Ethernet adapters for 282
name change 274
network 271
new 272
no clone template 221
opening 273
overview 271
power off 279
powering on 279
removing virtual machine from 277
resume 279
VMware, Inc. 509
Index
snapshot 283
suspend 279
Telnet 318
template mode for clones 221
3D support 173
time, synchronizing, between guest and
host 120
time.synchronize options for VMware
Tools 121
token ring 289
toolbar
customizing 61, 62
hide 369
Tools panel in the virtual machine
settings editor 117
Tools upgrade options 115
troubleshooting
responding to ACE hot fix
requests 481
with vmware-acetool 479
Turion 64 processor 37
two-way virtual SMP 366
U
UHCI controller 31
uninstalling
an ACE instance from a Linux
host 473
an ACE instance from a Windows
host 468
host virtual adapters 301
VMware Tools 118
Workstation on Linux host 47
Workstation on Windows host 44
Unity mode 158
update frequency 421
updates, checking for Workstation 65
updating VMware Tools 117
upgrade
ACE instances 473
guest operating systems 94
on Linux host 51
on Windows host 48
on Windows Vista host 49
removing snapshots before virtual
machine upgrades 47
virtual machines 94, 95
VMware Tools 115, 117
USB
connecting devices 353
control of devices by host and
guest 356
controller, enabling and
disabling 352
device policies, ACE 411, 412
devices in a virtual machine 351
disconnecting devices 357
keyboard and mouse 351
on a Linux host 356
on a Windows host 355
port specifications 31
supported device types 351
user interface
overview 54
restricted 369
UUID (universal unique identifier)
and clones 219
location 217
options for when you move a virtual
machine 218
specifying 218
V
VAssert API 185
version, changing virtual machine 94
VGA 171
Workstation Users Manual
510 VMware, Inc.
virtual adapters
host virtual adapters 301
specifications for 32
virtual appliances
open virtual machine format
(OVF) 137
virtual disk
See also disk
adding to virtual machine 242, 243
allocating disk space 88
compacting 240
defined 236
defragmenting 239
expanding 240
IDE, size 30
legacy 254
mapping, to a Windows drive 198,
199
setting up as IDE or SCSI 237
shrinking 123, 240
shrinking in Netware 123
size 30
storing on physical disks 237
using in a new virtual machine 82
Virtual Disk Manager 254
.vmdk file 97
Virtual Disk Manager 254
virtual hardware
CPU issues 143
disk device issues 143
Ethernet adapter issues 143
graphics card issues 143
virtual keyboard 339
virtual machine
adding a virtual disk 242, 243
adding floppy drive 252
adding or modifying an Ethernet
adapter 295
adding physical disk 244
adding to team 276
and SMP 366
cloning from team 283
constituent files 97
conversion 133
creating 79, 133
creating a clone 221
default location of 83
delete 158
encrypting 155
files 150
IDE drives in 30
installing software in 179
migrating 226
moving 217, 223
moving SMP virtual machines 367
name change 65
pausing 154
platform specifications 29
portability 236
power off vs. shut down 152
removing from Favorites list 64
removing from team 277
reset vs. restart 152
resuming 201
running in the background 71, 264
settings 69
shutting down 151
starting 148
starting in full screen mode 377
suspending 201
upgrade or downgrade 94
upgrading procedure 95
using snapshots 203
Virtual Machine Communication
Interface (VMCI) 102
virtual machine settings editor
restricting access 369
VMware Tools panel 117
VMware, Inc. 511
Index
Virtual PC, importing 135
virtual printer feature 180
virtual printer policy, ACE 414
virtual SMP 366, 367
virtual switch 285
virtual symmetric multiprocessing
See virtual SMP
Visual Studio
installing the Workstation plug-in
for 41
VIX API 185
VM streaming 149, 230
.vmc file, importing 135
VMCI Sockets interface 185
.vmdk file 97
.vmem file 97
VMI (Virtual Machine Interface) enabled
kernels 93
VMnet1 312
VMnet8 317
.vmsd file 97
.vmsn file 97
.vmss file 97
.vmtm file 97
vmtoolsd program 102, 126, 130, 132
VMware ACE, key features of 382
vmware command for VM
streaming 149, 230
vmware command-line program 485
VMware Converter 133, 135
VMware Player
installing on a Linux host 469
quitting ACE 479
running 232
sharing virtual machines with 231
starting ACE 474
VMware Tools
About tab 123
automated install 106
command-line interface 132
configuring 119
configuring in a Netware virtual
machine 123
control panel 119
device drivers 102
Devices tab 122
for FreeBSD guests 112
for NetWare guests 113
for Solaris guests 111
installing from the command line
with the RPM installer 109
installing from the command line
with the tar installer 109
installing on Windows guests 104
modifying installation 118
Options tab 120
running scripts during power state
changes 125
Scripts tab 122
Shrink tab 123
silent install 106
taskbar icon, displaying 120
uninstalling 118
updating 115, 117
using from command line 123
VMware user process 103
vmwtool commands 123
VMware Tools service
executing commands on halt or
reboot 128
overview of 102
passing strings from the host 129
VMware user process, in VMware
Tools 103
vmware-user, starting manually 114
vmware-acetool, using 479
vmware-fullscreen log file 379
vmwtool program 123
.vmx file 97
Workstation Users Manual
512 VMware, Inc.
.vmxf file 97
VNC
setting a keyboard map for 341
setting a virtual machine to act as a
VNC server 228
VProbes 185
v-scan code
defined 344
table of codes 347
W
.wav file 175
Windows
32-bit guest operating systems 33
64-bit guest operating systems 34
uninstalling on Windows host 44
upgrading on Windows host 48
upgrading to Windows Vista 49
VMware Tools for 104
Windows 95 sound driver 176
Windows 98 sound driver 176
Windows NT
SCSI driver for guest 362
sound driver 176
Windows Server 2003
SCSI driver for guest 362
Windows XP
SCSI driver for guest 362
Windows XP Mode 145
wizard
Add Hardware 332, 363
Add Shared Folder 191
Change Version 94
Clone Virtual Machine 222
Conversion 133
New Package 449
New Team 272
New Virtual Machine 66, 80, 89
Workspace tab in preferences editor 67
workspaces
location of 67
switching in Linux guest 340
Workstation
checking for updates for 65
starting 53
X
X server and keyboard mapping 342
X toolkit options 486
xFree86 and keyboard mapping 342
Z
zip drives 357