6.0

5 (Optional) Enable or disable the policy compliance check.
6 Click OK to close the Profile Editor.
Edit a Policy
A policy describes how a specific configuration setting should be applied. The Profile Editor allows you to
edit policies belonging to a specific host profile.
On the left side of the Profile Editor, you can expand the host profile. Each host profile is composed of
several subprofiles that are designated by functional group to represent configuration instances. Each
subprofile contains many policies and compliance checks that describe the configuration that is relevant to
the profile. You can configure certain subprofiles, example policies, and compliance checks.
Each policy consists of one or more options that contains one or more parameters. Each parameter consists
of a key and a value. The value can be one of a few basic types, for example integer, string, string array, or
integer array.
Table 19‑1. Subset of Host Profile Subprofile Configurations
Sub-Profile Configuration
Example Policies and Compliance
Checks Notes
Memory reservation Set memory reservation to a fixed value.
Storage Configure storage options, including
Native Multi-Pathing (NMP), Pluggable
Storage Architecture (PSA), FCoE and
iSCSI adapters, and NFS storage.
n
Use the vSphere CLI to configure or modify
the NMP and PSA policies on a reference
host first, and then extract the host profile
from that host. If you use the Profile Editor
to edit the policies, to avoid compliance
failures, make sure that you thoroughly
understand interrelationships between the
NMP and PSA policies and the
consequences of changing individual
policies. For information on the NMP and
PSA, see the vSphere Storage documentation.
n
Setting values for the Initiator IPv6 Address
and Initiator IPv6 Prefix options in a host
profile with independent hardware iSCSI
adapters has no effect on the HBA because
no independent iSCSi HBAs have IPv6
support.
n
Add the rules that change device attributes
before extracting the host profile from the
reference host. After attaching a host to the
host profile, if you edit the profile and
change the device attributes (for example,
mask device paths or adding SATP rules to
mark the device as SSD) you are prompted
to reboot the host in order to make the
changes. However, after rebooting
compliance failures occur because the
attributes changed. Because Host Profiles
extract device attributes before rebooting, if
any changes occur after the reboot, it
evaluates and finds those changes, and
reports it as non-compliant.
Networking Configure virtual switch, port groups,
physical NIC speed, security and NIC
teaming policies, vSphere Distributed
Switch, and vSphere Distributed Switch
uplink port.
When DHCPv6 is enabled in the networking
sub-profile, the corresponding ruleset must also
be manually turned on in the firewall
subprofile.
Chapter 19 Using Host Profiles in the vSphere Client
VMware, Inc. 215