In order to configure multipathing for an iSCSI storage device we can configure software iSCSI port binding on an ESXi Host in order to load-balance between paths when all paths are present and to handle failures of a path at any point between the server and the storage. Without port binding, all iSCSI LUNs will … More Storage – Configure Software iSCSI port binding on an ESXi Host
In my lab environment I was looking to tag a local hard drive as SSD in order to configure and manage vSphere Flash Read Cache, this activity actually ticks two boxes in the VCAP5-DCA blueprint as in order to achieve this I was required to use the Pluggable Storage Architecture (PSA) related commands from the … More Storage – Identity and tag SSD and local devices on an ESXi Host
When an ESXi host system is installed by default the firewall is enabled. All incoming and outgoing ports are blocked except the default TCP and UDP ports using for Management Services. The ESXi firewall protects the management interface of the ESXi host system, but provides no protection to virtual machines. By default, the following management … More Security – Part Five: Security Profile, Services and Firewall
To increase the security of an ESXi host system which is being managed by a vCenter Server system you can enable Lockdown Mode to restrict users from performing actions directly on an ESXi host using SSH or the ESXi shell. Also, users without the DCUI Access privelage will be restricted from accessing the DCUI. As Lockdown … More Security – Part Four: Enabling ESXi Lockdown Mode
In order to secure connections between clients, ESXi host systems and the vCenter Server system SSL is used. When an ESXi host system or vCenter Server system is installed, the installation will include SSL certificates by default to establish an initial connection. In order to connect ESXi host systems to a managed vCenter Server system … More Security – Part Three: Generating ESXi Host Certificates
Deans Blog 