Although SSH should be disabled on all ESXi hosts as a security standard, there are many instances where it needs to be open. Troubleshooting is one of them. To be able to start and stop the SSH service on all…
Instead of having to enter the username and passwords every time you are running a script it is a good idea to create a credentials file and encrypt it on your system. Create encrypted file This creates a file C:\vCenterCredentials.xml…
Some scripts that I use to manage vSphere Turn off SSH if running Count the number of VMs that are in each vSphere cluster List the 10 largest VMs per cluster Per RAM Example output Export to CSV as well…
I wrote the post explaining what Admission control is So, if we have Slot Policy in Admission control active, how do we determine the maximum number of VMs we can run? We can calculate it manually or we can calculate…
ESXi Lockdown Mode is a security feature in VMware ESXi that restricts direct access to the ESXi host, allowing access only through vCenter Server. This feature is designed to enhance security by preventing unauthorized users from modifying the ESXi host…
I have been awarded membership in the VMware vExpert Special Honors Subprogram “vExpert Security” for my contribution to sharing knowledge of VMware Security topics through this blog. Thank you to the VMware Community for this recognition and for encouraging us…
VMware Admission Control is a component of VMware vSphere High Availability (HA) that guarantees enough resources are allocated within a cluster to satisfy failover needs. It prohibits adding virtual machines (VMs) to a cluster if this would compromise the cluster’s…
Encrypting data drives makes sense on a laptop. If you turn it off and it gets lost, a key has to be provided to decrypt the data on the drives to make it readable. But what about the disks of…
In a previous article, I described how to activate UEFI Boot, which will disable the ESXi OS from loading 3rd party packages. What is execInstalledOnly enforcement? execInstalledOnly will ensure that non-signed scripts can be run against the ESXi. Important to…
Option 1: Duo MFA for RDP (fast, easy, proven) Pros: High-level install steps: ▶ Link to official Duo guide:Duo MFA for Windows RDP – Step-by-Step Option 2: Azure MFA with NPS Extension (Microsoft “native” method) Pros: High-level install steps: ▶ Link to official Microsoft guide:Configure NPS…
