Well, that worked and the VM booted.... Windows joins domain, and.... /something went wrong, redeployment required/. No desktop, no apparent way to check for errors. We're beyond the scope of this thread. Thank you!

Serendipitously, someone from Netwrix called me soon after that. I told him I know the big two commercial virtualization names are supported, but all this /can/ be imported here... I also gave him a quick elevator pitch on XCP-ng, for as much good as that might do with a kinda new sales guy. From here on out, if their engineers can't help, I'm off to find something else.

@olivierlambert said in XOA import OVA - "must NOT have additional properties" / "compression":

Try also in private mode.

That did not help, /but/ I passed those VMDKs over to a standalone host separate from that pool and it has already gone well beyond those previous attempts. Fun fun fun in browserland!

@Danp Thank you! Also, please don't go too far out of your way to help me here. This is more me tinkering to try a product than it is anything but critical at the moment. If that were the case, we have a XOA Premium sub and I could put in a support ticket. I just hope because of the original error message that all of this effort has some sort of knock-on benefit to the projects and community.

This didn't seem anywhere urgent enough to need a support ticket...

I am wanting to try the Netwrix Advisor Virtual Appliance, if for no other reason than it would save me the trouble of spinning up a new instance of Windows Server and SQL Server, and probably some other config..... all just to try something that I am not entirely certain about yet.

Anyway, it is distributed as OVA for VMware (and whatever Hyper-V uses), but while XOA says it is importing initially there is no further indication. However, the logs show "invalid parameters", as well these messages on the disks to create: "message": "must NOT have additional properties" / "additionalProperty": "compression".

It can be found at the link below. Annoyingly, they require /downloading a downloader/ that may only run in Windows. I was attempting the Windows Server 2019 / OVA version.

https://www.netwrix.com/virtual_appliances.html

@gpoole Thank you! I'm sure this will be quite useful in my homelab, but maybe not at work just yet... particularly because I am hopeful Olivier and Vates are able to integrate this into XOA.

This is because I am looking into integrating at least one HSM into our xcp-ng infrastructure, and the $650 USB-A YubiHSM2 is quite attractive. It would be great to be able to reliably pass this through via XOA to a Windows Server VM. I could imagine this use case being potentially important for small-medium sized companies looking for alternatives to typical expensive HSMs.

@NerdsOrder66 Ah, good question... My most recent environment included a Windows Server with 100+ RDP users. There wasn't anything special for optimization there aside from giving it a bunch of RAM/CPU resources, but YMMV.

I wonder if you are unclear about something and may not be asking the right question. XCP-ng is a hypervisor, not a VDI solution. That's not to say that a VDI solution could not operate above XCP-ng, but that they are not the same thing.

@jimmymiller This isn't going to be quite the answer you are hoping for, but linking XOA to EntraID is entirely possible. I can't get you the exact details since I am no long with that company, but this can be done with the SAML plugin. Not sure about OIDC. If any of these folks have linked an external app with SAML before, it is going to be very similar. I remember the language used in XOA is slightly different from EntraID, but it can be done with a bit of trial and error.

Again, not the answer you were hoping for, but I do hope it helps, nonetheless!

@nikade Were these all on a domain? Does the network type on the interface show up as private network and not Domain? That was a huge problem for me until I discovered restarting the 'Network Location Awareness' service fixed it until the next time. Not sure what causes it, but in my case(s) the network type changed the Windows firewall profile and would break things like DHCP and DNS until that service was restarted.

(This took /far/ too long digging through Microsoft/Windows related forums to find out.)

I probably still wouldn't turn on automatic updates, but I was confident enough to do scheduled updates while directly monitoring those servers.

@olivierlambert Awesome! Thank you so much!

@olivierlambert I sent in my app 4 days ago (from Danp's reference), and thought to reply to this just now. Hopefully my 4+ years of professional experience can be of use to you!

Well, that worked and the VM booted.... Windows joins domain, and.... /something went wrong, redeployment required/. No desktop, no apparent way to check for errors. We're beyond the scope of this thread. Thank you!

Serendipitously, someone from Netwrix called me soon after that. I told him I know the big two commercial virtualization names are supported, but all this /can/ be imported here... I also gave him a quick elevator pitch on XCP-ng, for as much good as that might do with a kinda new sales guy. From here on out, if their engineers can't help, I'm off to find something else.

@olivierlambert said in XOA import OVA - "must NOT have additional properties" / "compression":

Try also in private mode.

That did not help, /but/ I passed those VMDKs over to a standalone host separate from that pool and it has already gone well beyond those previous attempts. Fun fun fun in browserland!

@florent Ha, of course it might be /that/ simple... The way I typically access while on the LAN is through Nginx Proxy Manager, but outside also goes through Cloudflare.

Okay, when accessing XOA via IP I'm getting "unable to fetch" (message flashes away quickly and not in logs) soon after clicking Import, then I am dumped back to the login page. This seemed maybe related to browser, or even host, but I tried Firefox and Chrome on two separate hosts.

@Danp Thank you! Also, please don't go too far out of your way to help me here. This is more me tinkering to try a product than it is anything but critical at the moment. If that were the case, we have a XOA Premium sub and I could put in a support ticket. I just hope because of the original error message that all of this effort has some sort of knock-on benefit to the projects and community.