Symptoms
VDI Instant clone customization timeout errors with CarbonBlack during desktop provisioningYou see these entries in the Agent log:
<TimerService> [ws_perfmon] CPU-ALARM: cpu use = 100%
[vmware-svi-ga] svmga::core::windows::Guest::CustomizeVM(): Clone Customization Failed
[vmware-svi-ga] svmga::core::util::NotifyViewAgent::MarkCustomizationFailed(): Set NotifyVdmStatusValue to CustomizationFailed
Cause
CarbonBlack is an AntiVirus and EDR product and in general AV solutions consume more CPU.
When a VDI Instant clone desktops pool is provisioned with CarbonBlack, additional CPU is utilized during the provisioning process which might cause customization failures and eventual refresh of the desktop in environments, which are currently utilizing high CPU - 60 to 70% of utilization during Instant Clone provisioning.Expected additional CPU based on internal test runs are found to be approx 30% derived from performance and scale test results.
Note: The results are derived from a VDI environment with CB Endpoint Standard (formerly Defense), CB EDR (formerly CBTH), and CB Audit and Remediation enabled. The best practices for configuring CB(policy and settings) in VDI environments are followed in these tests.
Resolution
Currently, there is no resolution.
Workaround
To work around this issue:
Limit the concurrency of VC Clone provisioning from the default value of 20 to 10.If the desktops are not getting refreshed automatically, use these default settings to verify Auto refresh in the ADAM database of the Connection Server:
On the ADAM database, go to Server Group => <CN=Desktop_Pool_Name> => Pool propertiesAuto refresh - attribute and value => pae-RecoveryDisabled = <not set>.
