Survey -Holiday Getaway by Vembu

Interested on Amazon Gift card, please spend 2 min to fill up this survey:- click here

Winter 2018/2019 Quiz: PRTG & Paessler

Interested to win Amazon voucher worth 100 EURO?

If yes, kindly proceed to test your PRTG knowledge from this link

Unofficial Mobile App to Monitor Veeam Backup - "Weeatcher"

There is an unofficial mobile app called "Weeatcher". Weeatcher is powered by Veeam Enterprise Manager RESTful API. To use this mobile app, you need to have Veeam Backup & Replication Enterprise Plus and installed Veeam Enterprise Manager.

Currently, this mobile app is free & currently available at Google Play. Let walk through this mobile app:

1. Enter your enterprise manager hostname

2. Provide correct credential to access Enterprise Manager

3.Once authenticated, you can view your summary of last job - 24 hours, 7 days & 30 days.

4. Click on each job to view the backup status. You can perform action such as START, STOP, RETRY and DISABLE Job.

5. Under Report tab, you can view the status of VM protection, backup vm, replicate VM and repository usage.

6. Under Manage tab, view your job and & perform recovery.

That's all on the quick walkthrough

Do check it out and tested it yourself. To download, click here.

How to Backup MacBook Pro?

In this post, we are going to look into how to backup your existing Macbook Pro. Tool that we are going to use is default tool called "Time Machine".

Preparation:-
a) External HDD larger than your Macbook Pro. Make sure it is empty as any data inside will be erased.
b) Macbook Pro
c) Asus Router (optional). You can plug your HDD directly to the macbook pro. For my case, my hdd is plugged to Asus Router. I love asus router as it has multiple capabilities such as file share, download torrent movie, firewall, vpn , media server & lastly Time Machine target. Check out below screenshot on the capabilities.

Access the router UI

Let get started by select USB Application | Time Machine

Enable Time Machine, select the HDD (hard disk) and click Apply
We have completed the router configuration. Next step you need to configure Time Machine from your MacBook.

Enter Time Machine Preference program, select Disk which is pointing to your Asus Router. Provide the credential to access to the router & you are good to go.

* recommend using Ethernet for 1st time full backup.

That should do the trick and you may check if your existing router support this feature.

Enjoy!

How to Create an Empty Folder for VAO Templates?

In this post, we are going to look on how to create an empty folder for VAO Template to re-protect VM.

When you want to create a backup job for VAO Template, you cannot select Host, Cluster or VM. You should point to an empty folder.

To do so, follow this steps:

1. Access to vcenter console
2. On the Host, right click select New Folder | New VM and Template Folder. Name it "Empty for VAO'

3. Return to Veeam Backup Console, create a new job with description put [VAO TEMPLATE].

4. Navigate to VM & Templates object & select "Empty for VAO" folder

5. Final result your job should consist only Empty Folder with the size 0.

That should do the trick! Complete the wizard to create a VAO Template to reprotect your VM.

Create Self Signed Certicate to Use For Minio

By default minio is using http. To configure minio to use TLS, you need to create a self signed certificate. Original post is taken from here:- https://docs.minio.io/docs/how-to-secure-access-to-minio-server-with-tls.html

But it take me a while to figure out. Therefore, i come out a guide with screenshot.

In our lab scenario, we are using Windows based system.

Let start the configuration
1. Use GnuTLS. Download GNUTLS for Windows from here.
2. Set the system variable to include the path.[Under environment variable] Example my GNUTLS has extracted to C:\Backup\gnutls-MinGW64.DLLs-gnutls_3_6_4\win64-build\bin

3.Use command line to execute:-

certtool.exe --generate-privkey --outfile private.key

Generating a 3072 bit RSA private key...

private.key is generated.

4. Create a cert.cnf file and put this entry:

# X.509 Certificate options
#
# DN options

# The organization of the subject.
organization = "Example Inc."

# The organizational unit of the subject.
#unit = "sleeping dept."

# The state of the certificate owner.
state = "Example"

# The country of the subject. Two letter code.
country = "EX"

# The common name of the certificate owner.
cn = "Sally Certowner"

# In how many days, counting from today, this certificate will expire.
expiration_days = 365

# X.509 v3 extensions

# DNS name(s) of the server
dns_name = "localhost"

# (Optional) Server IP address
ip_address = "127.0.0.1"

# Whether this certificate will be used for a TLS server
tls_www_server

5. Run

certtool.exe --generate-self-signed --load-privkey private.key --template cert.cnf --outfile public.crt

It will create public.crt
Generating a self signed certificate...
X.509 Certificate Information:
        Version: 3
        Serial Number (hex): 59d89416fe9279c1e7967dd8c1ed165cc7a42587
        Validity:
                Not Before: Sat Oct 20 11:15:46 UTC 2018
                Not After: Sun Oct 20 11:15:46 UTC 2019
        Subject: C=MY,ST=Example,O=Example Inc.,CN=Lai
        Subject Public Key Algorithm: RSA
        Algorithm Security Level: High (3072 bits)
                Modulus (bits 3072):
                        00:dc:76:f5:e4:0e:bd:d4:42:14:07:e3:c5:19:82:81
                        4a:61:ee:8a:2a:76:49:81:c1:be:c8:ee:ff:89:9d:51
                        05:df:ac:cb:06:38:45:bb:87:e1:49:e8:5b:35:e7:4e
                        6e:7d:b4:b5:2a:91:83:10:2d:23:2e:01:06:49:73:fd
                        c9:29:6f:23:70:61:2c:5c:d4:0e:56:a3:f1:ca:bc:cb
                        c8:aa:c0:8b:02:43:45:91:d2:49:ac:1a:63:f3:22:f2
                        a8:ec:06:21:ef:db:fb:46:d3:a0:24:bf:f7:b2:63:0c
                        6c:ec:74:4d:8a:6a:60:a9:ad:a2:83:4e:2d:72:bb:71
                        df:5d:3f:dd:ec:2f:ba:d8:5f:e3:19:9b:38:09:8d:63
                        15:23:4f:69:2a:25:56:b0:21:ba:97:65:9b:5f:8e:27
                        a3:4a:1e:ef:5b:9d:3b:cc:a9:d1:94:dc:c7:a5:14:6c
                        90:cd:bc:08:4a:79:ce:e2:35:36:94:dc:0d:ba:b2:b5
                        8d:4b:a7:58:82:04:17:c5:aa:47:d6:19:32:b1:60:b3
                        a7:35:c9:c3:9f:6b:60:be:c5:ef:60:91:61:3c:22:d5
                        b1:6e:3e:28:ca:61:f6:8c:1e:59:e1:c8:f1:ce:6f:b8
                        aa:51:fc:db:92:01:63:80:3f:ee:a3:1e:00:76:2d:47
                        ef:16:8f:6c:f6:f6:e1:74:e7:b3:45:26:6f:1f:73:6d
                        4b:36:23:66:6b:5a:b9:57:b5:47:ca:61:1b:3b:7e:57
                        58:26:b1:b6:e9:07:7f:ec:60:1f:21:2e:7c:38:e6:23
                        39:cf:aa:87:53:75:f0:c1:3b:82:19:a4:e2:48:48:3d
                        8d:65:f7:da:67:4a:16:1e:6e:52:5b:f7:1f:11:ff:c0
                        c3:53:d0:94:64:75:ba:a8:99:7b:35:20:6a:34:e0:d0
                        95:b7:45:7c:13:44:51:7a:78:1c:10:b1:73:d9:92:7e
                        a9:1a:4c:c2:fa:85:1e:3e:22:a6:a6:d1:af:6e:80:ef
                        eb
                Exponent (bits 24):
                        01:00:01
        Extensions:
                Basic Constraints (critical):
                        Certificate Authority (CA): FALSE
                Subject Alternative Name (not critical):
                        DNSname: localhost
                        IPAddress: 127.0.0.1
                Key Purpose (not critical):
                        TLS WWW Server.
                Key Usage (critical):
                        Key encipherment.
                Subject Key Identifier (not critical):
                        9e5692715cd3badd71f601290ffcc1d2b7077877
Other Information:
        Public Key ID:
                sha1:9e5692715cd3badd71f601290ffcc1d2b7077877
                sha256:02025e1f401f84b942285b470b21e33c3db90cf0c9a275e84dfe9f260ce866bc
        Public Key PIN:
                pin-sha256:AgJeH0AfhLlCKFtHCyHjPD25DPDJonXoTf6fJgzoZrw=

Signing certificate...

6. Copy private.key and public.crt and put into C:\Users\UserProfileName\.minio\certs

7. Final verification, execute "minio sever C:\Backup\Minio [depend on your folder]

use Minio Client to verify:

Hope this help!

Note:- Information refer from https://docs.min.io/docs/how-to-secure-access-to-minio-server-with-tls.html

Install NFS Server Roles on Windows Server 2016

In this post, we are going to install NFS Server roles on Windows Server 2016. NFS share is different from SMB share.

• SMB is the standard for Windows
• NFS is perfect for UNIX

Both are good for file sharing purpose.

It is a simple step. Just go to Server Manager | Add Roles & Features

NFS Server roles are located under "File and Storage Services"

If you fail to install the role, do refer to this post.

Once role installed, proceed to create an NFS share.

1. Create a new directory called "NFSRepo". Right click | Properties. Select Manage NFS Sharing

Tick share this folder. Leave the setting default. Click on permission to set security right

Add a new permission. Enter

• Unix Server IP
• Read-Write permission
• Allow root access

Below is how it look like:-

The NFS share path will be "Servername:/NFSShare format

We're all done on the NFS Server side configuration.

Unable to Install NFS Server Roles on Windows Server 2016

When you try to install NFS Server Roles on Windows Server 2016 by using server manager, you were not able to. The system keeps requesting you to restart the server. [Pending restart]

But restart the server still does not allow you to install NFS Server roles.

Next step:-
This may be due to other application is using same port 111. Example:- Veeam vPower NFS Service

[ Resolution ]
1. Temporary disable the Veeam vPower NFS Service services
2. Install NFS Server Roles using Server Manager
3. Restart Veeam vPower NFS Service

That should do the trick!

Test Mac OS Sierra on AMD Ryzen Processor Using Vmware Workstation

I'm excited about the upcoming Apple event on Sept 12,2018. One of the new announcement will be the new model of Macbook Air (possible with Retina display). Before that, i never use MacOS before and been using Windows OS since day 1.

In order to familar with new operating system, the best is test MacOS on a virtual machine. While google around, manage to find a post from hackintosher which provide the guide to download the vmdk. A bit tricky is when running AMD processor and here is my tweak

My environment:-

• AMD Ryzen 5 2400G
• Vmware Workstation 14
• Download vmdk (special for AMD processor) from here.
• Unlock MacOS setting by download unlocker 2.1.1 from here. Execute win-install.cmd with "Run as Administrator"
• Create a new VM with the custom setting, attach the existing disk (SATA) and maintain existing Format. Don't power on the vm first. Modify the following settings:
• Processor - enable Virtualize Intel VT or AMD-V

• Modify vmx settings
• Add new entry:  smc.version = "0"
• VirtualHW.version = "10"
• firmware = "bios"

• Boot up VM and install Vmware Tool. Use from VMware Unlocker 2.1.1\VMware Unlocker 2.1.1\tools\darwin.iso
• Voila! You have MacOS Sierra running with your AMD processor

Enjoy your new MacOS! 

Cryptocurrency Mining Guide

Hi guy,

Recently my friend been talking about cryptocurrency either mining or trading. Probably never too late to check out on how it's work as a hobby or learning experience.

Well, here is my experience during my testing on cryptocurrency mining.

[Updated: 9 Sept 2018]
CPU Mining

At this moment, not a good option to use CPU to mine unless you just want to try it out.
So far the best coin to mine using CPU is AEON. (subject to change)

Cloud Mining
Avoid using it. Recently most cloud mining starts to end contract due to unprofitable business when bitcoin value dropped till 7k.

GPU Mining
This is the best way to start small on mining. You can build a mining rig with a set of GPU. With the price of GPU goes down, you can probably get a reasonable price on GPU. As starting I've bought

• Nvidia GTX 1050 Ti - 4GB
• Nvidia GTX 1060 AMP Edition - 6GB
• AMD Ryzen 5 2400G Processor
• SSD HDD
• Min 8GB RAM
• Asrock Ab230 Pro 4 Motherboard (able to support 6 GPU)
• PCI Riser
• 600w PSU

Here is my testing on mining pool and my 2cents comments

a) Nicehash (https://www.nicehash.com/)

You can download Nicehash miner from here:- https://www.nicehash.com/cpu-gpu-mining
Just select CPU and GPU that you want to use to mine. It will auto-detect the best coin to mine and convert the payout to BTC (bitcoin).
Prons:-

• Easy to use

Cons:-

• Must mine till minimum 0.001 BTC

b) Honeyminer (https://honeyminer.com)

This is a new pool as an alternative than nicehash.To join, click on here. You will get 1000 satoshi when joining the pool. It also allows you to select mine using CPU or GPU.
Prons:-

• Will get a bonus on every level (in satoshi). The longer you mine, the more bonus that you will get.
• Coin mined, will convert to satoshi (BTC)
• Able to withdraw without wait till high satoshi. Min 0.00002500 BTC and withdraw fees is cheaper (around 0.00000500 BTC) to any wallet

Cons:-

• Not able to select which coin to mine
• Withdrawal fees sometimes are high. But you can just wait till it drops to 0.00002500 BTC
• Most of the time, the honeyminer software will have any issue with antivirus software. So you need to put exclusion.

c) Winminer (https://www.winminer.com/)

Another alternative mining pool called winminer.  It also allows you to select mine using CPU or GPU.

Prons:-

• Has built-in monitoring on the web to monitor your mining rig. The best part is able to view your GPU temperature, stop/start mining and restart your mining rig
• Mobile app (currently on beta) for monitoring your mining rig
• Able to select coin to mine
• Mine coin will auto-convert to USD
• Variety of withdrawal option. You can use use the payout to Steam Gift card, Amazon Gift card, iTunes Gift card, Paypal or buy other coins such as BTC, ETH, LTC, BCH)

Cons:-

• The daily earning benchmark is lower compared to Nicehash. But this is subjective, it just an estimation value and you won't know till the end of the day.
• Auto convert to USD value on every coin that has been mined. This defeat the purpose of keeping the coin mine and hope the value will rise.

d) MiningPoolHub (https://miningpoolhub.com)

Good pool for getting others coin rather than just BTC. You can select which coin to mine.

Prons:-

• Able to decide which coin to mine
• Able to select AutoSwitch to let the system to select profitable coin to mine
• Able to select Auto Exchange to convert another coin to your prefer coin
• Payout according to your prefer coin

Cons:-

• List of limited coin to mine

[Summary]

Overall, the pool above is best to use. You can opt for different pool according to your preference.

I strongly recommend that you refer to WhatToMine to decide which coin is most profitable to mine. Click here to check out:- https://whattomine.com/

Note:-

There is a lot of alternative mining pool and I am still exploring. Do let us know if you have a better mining pool to share with the reader.

TOGAF 9 Certified Preparation (Level 1 & Level 2)

Just passed the TOGAF 9 Certified Exam. You can find the exam info from this sheet:- https://www.opengroup.org/togaf9/cert/docs/togaf9_cert.pdf 

TOGAF stand for "The Open Group Architecture Framework" & quite famous for Enterprise Architecture.

Here is my journey...

• July 11- 14,2018 - Attended TOGAF 9.2 Training conducted by eLearning LaunchPad Trainer. 4 days class is quite packed with TOGAF architecture, principles & concept. 
• July 23 -Aug 19 - Study for a month. Need to some time to study as the exam cost USD495.
• August 20, 2018 - Exam Day

Study material

1. Lecture Slides - Book 1 (hardcopy) - Learn all the theory about TOGAF 

2. Lecture Slides - Book 2 (hardcopy)- Learn about ADM Phases (objectives, approach, steps, input & output). This book allows you to apply the theory in Book 1 into ADM phases.

Study once for both book study.

Additional material to get some understanding about ADM phases, i use YouTube. Just search "TOGAF" and you able to find some good material.

Here are some links:-

• TOGAF 9.1
• Practical TOGAF® Case - Retail Stores in a Digital World
• Introduction to TOGAF ADM: Preliminary Phase
• Introduction to TOGAF ADM: Phase A Architecture Vision
• Introduction to TOGAF ADM: Phase B, C, D Business, Information Systems and Technology Architectures
• Introduction to TOGAF ADM: Phase E Opportunities and Solutions

3. Study the last book -Reference Material (hardcopy)

The most important book which I spend more time on it. Its contain info such as ADM phases, general definitions, deliverables, principles & Stakeholder Management. Great material to recap what you've studied on Book 1 & Book 2.

Take L1 & L2 Practice Exam to familiar with the question.

4. Familiar with TOGAF standard and Core Concept from online:- http://pubs.opengroup.org/architecture/togaf9-doc/arch/index.html

Exam Day

Section 1 - 40 questions (60 minutes)

• remember to draft ADM Phases into the paper before starting the exam.

Section 2 - 8 question with scenario (90 minutes)

• Each question will have a scenario. On the left side is the scenario & on the right side is the answer. You can view in the same screen.
• On top of the left side, you will have a REFERENCE button to assist you on Section 2. Refer to TOC first and scroll to correct page on the items that you want to refer to.
• Tips for this section is
• Read the scenario carefully
• Understand the concern raised
• Understand what the question wants
• Eliminate the wrong answer to avoid get 0 score
• Select those answer which helps to justify the concerned & more related to TOGAF. 

You will have plenty of time for both sections. 

TOGAF certification and Logo

At night, you will receive an email from The Open Group if you passed the exam. You can opt to join Association of Enterprise Architect as a member.

Hope this help on your study to become TOGAF 9 Certified! 

Good Luck!

Data Protection Nutanix Acropolis Using Veeam Availability for Nutanix AHV (VAN)

As the time of writing this blog, Veeam has just released a new hypervisor support:- Nutanix Acropolis.

To protect Nutanix Acropolis, you need three components
1. Veeam Backup & Replication 9.5 Update 3a
2. Veeam Proxy Appliance. Refer to http://www.ms4u.info/2018/07/deploy-veeam-proxy-for-nutanix.html
3. Veeam Backup Repository (not supported scale out backup repository & dedup appliance).

Veeam Availability for Nutanix AHV requires a Veeam backup server and Veeam backup repository as a target for backups of AHV VMs. These components can be deployed via Veeam Backup & Replication.

Veeam Backup Server is require to configure backup copy, tape out and perform granular item level recovery.

To configure the policy on v1, you need to access to proxy web UI. Here is the screenshot of Veeam Virtual Appliance

Dashboard
a single pane of glass to monitor AHV VM protection, job status, repository status, backup server status and events history.

Backup Jobs
Configure backup policy and view backup history

Protected VM

To perform recovery VM and virtual disk

Settings

In this page, you can perform administrative configuration such
1. Integration with Veeam Backup Server
2. Integration with Nutanix Cluster
3. Manage Veeam Proxy Appliance such as create support log, backup catalog and some settings

 Note:- Gather log for support purpose

 Note: Backup Catalog

That's concluded our short sneak peak on VAN. Feel free to try it from here.