Get-VMHostHardware Permission to perform this operation was denied

For a user with read-only

Get-VMHostHardware fails with Permission to perform this operation was denied

Add the Host-Cim-CimInteraction privilege.


Download EJBCA certificate with powershell

i came up with this today

add-type @"
using System.Net;
using System.Security.Cryptography.X509Certificates;
public class TrustAllCertsPolicy : ICertificatePolicy {
    public bool CheckValidationResult(
        ServicePoint srvPoint, X509Certificate certificate,
        WebRequest request, int certificateProblem) {
        return true;
[System.Net.ServicePointManager]::CertificatePolicy = New-Object TrustAllCertsPolicy

you can look up the thumbprint to compare which one it is
get-childitem Cert:\CurrentUser\My

$superadmin = get-childitem Cert:\CurrentUser\My\YOUR_SUPERADMIN_CERT_HASH
invoke-webrequest -Uri "https://infralab.local:32768/ejbca/publicweb/webdist/certdist?cmd=lastcert&installtobrowser=&" -method "Get" -Certificate $superadmin

what's left is to generate the cert order via csr. this just just downloading the already made cert.

vSphere Lookup Service MOB


Using this link:


You can access the list() method, you have to fill out the filterCriteria

Leave it ‘blank’:


and click the Invoke Method.

From the vCenter appliance itself you can  use the list() method using the

/usr/lib/vmidentity/tools/scripts/ list –url https://localhost/lookupservice/sdk –no-check-cert | grep -v ‘SSL’

Mind that it will hide the SSL part to make screen content  more readable.


Matching physical disk in Dell R720 with vSan disk using naa and perccli

Really short:

check you naa in vsphere/vsan you are looking for, then using perccli installed in your esxi use:

./perccli /c0 show all | grep -i -B6 ‘WWN = 58cf32ee203db4d4’

Drive /c0/e15/s4 device attributes :
Manufacturer Id = TOSHIBA
Model Number = PX05SMB080Y
NAND Vendor = NA
WWN = 58cf32ee203db4d4

Where, s4 is your slot where the disk resides, and you can also double check via idrac if s/n matches the drive in slot.