Disabling VMware Remote Console (VMRC) for vSphere machines

Products

• VMware vSphere ESXi

Issue/Introduction

For vSphere machines, Connect Using VMRC action has been removed because of a security vulnerability. For details about this issue, see VMSA-2014-0013.

vRealize Automation Versions	Zip File Name for vRealize Automation	Download Links
6.0.1 GA	VMRC_VCAC_6.0.1.zip	vCAC-601
6.0.1.1 GA	VMRC_VCAC_6.0.1.1.zip	vCAC-6011
6.0.1.2 GA	VMRC_VCAC_6.0.1.2.zip	vCAC-6012
6.1 GA	VMRC_VCAC_6.1.zip	vCAC-61
6.1.1 GA	VMRC_VCAC_6.1.zip	vCAC-611

Caution: If you have applied any other hotfix to any of the versions that are mentioned in the table and want to apply this VMRC hotpatch, contact VMware customer support because the hotfix that is already applied might fail.

Resolution

Prerequisites

• Download the Zip files.
• For vRealize Automation 6.0.1, 6.0.1.1, or 6.0.1.2, backup the DynamicOps.Api.dll file located at <vcac installed directory>\vCAC\Web API\App_Data\plugins\DynamicOps.Api and DynamicOps.Web.dll file located at <vcac installed directory>\vCAC\Server\Website\bin.
• For vRealize Automation 6.1 or 6.1.1, backup the DynamicOps.Api.v61.dll file located at <vcac installed directory>\vCAC\Web API\bin and the DynamicOps.Web.dll file located at <vcac installed directory>\vCAC\Server\Website\bin.

Procedure

1. Stop the IaaS services in the following order:
   • All vRealize Automation agents.
   • All DEM Orchestrators.
   • All DEM Workers.
   • vRealize Automation Manager Service.
2. Stop the IIS service
3. For 6.0.1, 6.0.1.1, or 6.0.1.2, replace the original DynamicOps.Api.dll file located at <vcac installed directory>\vCAC\Web API\App_Data\plugins\DynamicOps.Api with the new DynamicOps.Api.dll file, and replace the original DynamicOps.Web.dll file located at <vcac installed directory>\vCAC\Server\Website\bin with the new DynamicOps.Web.dll file.
4. For 6.1 or 6.1.1, replace the original DynamicOps.Api.v61.dll file located at <vcac installed directory>\vCAC\Web API\bin with the new DynamicOps.Api.v61.dll file, and replace the original DynamicOps.Web.dll file located at <vcac installed directory>\vCAC\Server\Website\bin with the new DynamicOps.Web.dll file.
5. Start the IIS service.
6. Start all the IaaS services.

Rollback Steps

Perform the following procedure to rollback.

1. Stop the IaaS services in the following order:
   • All vRealize Automation agents.
   • All DEM Orchestrators.
   • All DEM Workers.
   • vRealize Automation Manager Service.
2. Stop the IIS service
3. Replace the original DLL files.
4. Start the IIS service.
5. Start all the IaaS services.