-
Ontap Tools Security
I'm studying ONTAP tools and would like to better understand your perspective on the tool. I think the value it adds to administration is fantastic. But I'm also concerned about the risks if an attacker gains access to vCenter and can also directly damage the storage, such as deleting datastores, Snapmirrors, etc. 1) Is…
-
ONTAP Tools for VMware - Adding VSC privileges to custom vCenter role
The role named "VSC Provision" has these custom privileges that appear to be added that apply only for ONTAP: NetApp ONTAP tools for VMware vSphere * View privilege.nvpfVSC.Kamino.Datastore.com.netapp.nvpf.label * Manage datastores * Provision privilege.nvpfVSC.VASAGroup.com.netapp.nvpf.label * View I have tried adding…
-
ONTAP Tools 9.13 direct to SVM instead of cluster
We are trying to direct ONTAP Tools for VMware 9.13 straight to the SVM on a cluster. I've been finding a lot of different documentation on this process and feel like I've followed each of these as closely as possible but it just does not seem to work. I get messages like "can't discover controllers" and stuff like that…
-
ZAPI & ONTAP tools for VMware vSphere
NetApp are phasing out the use of ZAPI and have messages everywhere about it. Its even mentioned during upgrades. During the upgrade of our storage array for our VMware environment we were notified that ZAPI had been used in the last 30 days. The only system other than the ESX hosts that communicates with the storage is…
-
OnTAP Tools Discovery
Is there a way to control storage system discovery in OnTAP Tools? For years this tool discovers 30+ storage units that aren't NetApp which just clutters up the screen. I prefer a nice clean screen of just the objects I need to manage. Is there a "hack" to prevent the automatic discovery from occurring, or at least to…
-
ONTAP Tools, igroup and vSphere/SRM - side effects
Hello, Today's logic with iGroup is way too strict and creates an unwanted situation. As documented in the following KB: VSC and VASA_Provider/Why does Virtual Storage Console (VSC) create "rcu_generated_alua" iGroup and Storage Replication Adapter: What determines if a new initiator group or export policy is created…
-
ONTAP Tools appliance still uses ext3.
Hi, Do you have technical limitations in running the appliance with ext3? We have been wondering why the appliance didn't want to start anymore. It was expecting a user input due to an fsck error on the root partition, hiding the output on a different TTY didn't help either! An upgrade to ext4 would not be too much.…
-
vsc plugin and account in vSphere?
We have VSC plugin installed in vSphere since a long time ago. Often, we can also see "vsc" account being used, for instance creating a Datastore in vSphere as shown in logs. I don't know how VSC works from high level. 1. Would somebody has to log into vSphere as "vsc" and performed the task? I couldn't find such logins…
-
How do I rename an Virtual Storage Console appliance?
A colleague installed a VSC appliance V9.7.1P1 however named it "SVC" instead of "VSC" and we would like to rename the device, however I'm not sure how to do that as there do not seem to be any options for it. We are using the VSC with vCenter/SRM in order to load in the SRA into vCenter. Is this possible?
-
Virtual Storage Console Limited Use Rights
Hello, I am attempting to reduce rights to the bare minimum on local OnTAP service accounts to increase our security posture. I've created a custom role for the VSC service account that just allows for discovery, however it occurred to me that we can probably go further. We use VSC for one single purpose only: to verify…