Slides of my speech at the Student Spring 2022.

1. InformationSecurityinAutomatingvSphere InfrastructureDeploymentusingPowerCLI
Always in touch with the future!

2. • Author:
Zakharov Denis Arturovich,
almost-graduated student from SPbSUT,
Security Engineer
Google IT Support Professional Certificate
• Research advisor:
Tsvetkov Alexander Yurievich
Sr. Lecturer.
@MisterZurg
2
About speaker

3. Relevance
• No one likes to spend money and do unnecessary things;
• IS breaches occur / Slow software delivery
• Reputation damage / minus money
Relevance 3

4. Requirenments Design Development
Security features Threat model
Static analysis &
Secure coding
Testing Review Deployment
Security Code Review / Pentesting
Source: Student Spring - 2021
S.D.A.L
In this research we will
Focus on the
deployment part
4

5. Automation
• Dynamic configuration of application services.
5

6. Automation
• Dynamic configuration of application services;
• Reducing the risk of errors caused by human error.
6

7. Automation
• Dynamic configuration of application services;
• Reducing the risk of errors caused by human error;
• Reduced operating costs.
7

8. Automation
• Dynamic configuration of application services;
• Reducing the risk of errors caused by human error;
• Reducing the risk of errors caused by human error;
• As well as a number of challenges related to accessibility in VM migration.
8

9. 9
PowerCLI

10. 10
PowerCLI

11. 11
Ideal Deploy

12. 12
Network

13. Installation
# To install PowerCLI just open a PowerShell console and run the
command below:
Install-Module -Name VMware.PowerCLI
13

14. Constants
# Our Datacenter
$dc = Get-Datacenter -Name DC1
# We will use template Windows2016Template
$Template = Get-Template -Name 'Windows2016Template'
$groupNumber = 7
14

15. Script
# Create Directory{1-7} where we expand the template
for ($counter = 1; $counter -le $groupNumber; $counter++) {
# Create folders in which the infrastructure will be located,
# if desired, DataCenter can be replaced with Cluster
New-Folder -Name "pod${$counter}" -Location (Get-Datacenter)[0]
# Deploying our infrastructure from a template
New-VM -Location "pod${$counter}" -Name 'Windows16VM' -Template $Template
-OSCustomizationSpec $Spec -VMHost 'ESXiHost' -Datastore 'VMDatastore'
}
15

16. Script
# Create Directory{1-7} where we expand the template
for ($counter = 1; $counter -le $groupNumber; $counter++) {
# Create folders in which the infrastructure will be located,
# if desired, DataCenter can be replaced with Cluster
New-Folder -Name "pod${$counter}" -Location (Get-Datacenter)[0]
# Deploying our infrastructure from a template
New-VM -Location "pod${$counter}" -Name 'Windows16VM' -Template $Template
-OSCustomizationSpec $Spec -VMHost 'ESXiHost' -Datastore 'VMDatastore'
}
16

17. Extra features
# Additionally, we change the settings of the MAC network adapter
Get-VM 'Windows16VM' | Get-NetworkAdapter | Set-NetworkAdapter -
WakeOnLan:$true
# progressBar for task status
Write-Progress -Activity "Progress" -Status "$counter% Complete:" -
PercentComplete $counter;
17

18. Extra features
Progress counter driven by for loop
18

19. 19
Modernization
Advantages

20. 20
Modernization Acceleration
Advantages

21. 21
Modernization Acceleration Visualization
Advantages

22. Q
:/
?
?
?
?
?
?
?
?
?
?
?
?
?
?

23. 23
June Castillote Back to Basics : The PowerShell For Loop [Electronic resource] /
ATALEARNING / Access mode : https://adamtheautomator.com/powershell-for-
loop/#:~:text=The%20PowerShell%20for%20loop%20is,out%20X%20number%20o
f%20items).
Tyurin A.V., Tyuluandin I.V., Maltsev V.S., Kirilenko I.A., Berezun D.A. Overview of
the Languages for Safe Smart Contract Programming. Trudy ISP RAN / [Text]
/Proc. ISP RAS, vol. 31, issue 3, 2019. pp. 157-176
VMware vSphere and vSAN / [Electronic resource] /
VMware Developers Documentation / Access mode :
https://developer.vmware.com/docs/powercli/latest/products/vmwarevspherea
ndvsan/
Used materials

24. Denis Zakharov
2022
Thank yoU!