6.0

Set Up CHAP for iSCSI Adapter in the vSphere Client
You can set up all targets to receive the same CHAP name and secret from the iSCSI initiator at the initiator
level. By default, all discovery addresses or static targets inherit CHAP parameters that you set up at the
initiator level.
The CHAP name should not exceed 511 alphanumeric characters and the CHAP secret should not exceed
255 alphanumeric characters. Some adapters, for example the QLogic adapter, might have lower limits, 255
for the CHAP name and 100 for the CHAP secret.
Prerequisites
Launch the vSphere Client and log in to a vCenter Server system.
n
Before setting up CHAP parameters for software or dependent hardware iSCSI, determine whether to
configure one-way or mutual CHAP. Independent hardware iSCSI adapters do not support mutual
CHAP.
n
In one-way CHAP, the target authenticates the initiator.
n
In mutual CHAP, both the target and the initiator authenticate each other. Use different secrets for
CHAP and mutual CHAP.
When you configure CHAP parameters, verify that they match the parameters on the storage side.
n
Required privilege: Host.Configuration.Storage Partition Configuration
Procedure
1 Access the iSCSI Initiator Properties dialog box.
2 On the General tab, click CHAP.
3 To configure one-way CHAP, under CHAP specify the following:
a Select the CHAP security level.
n
Do not use CHAP unless required by target (software and dependent hardware iSCSI only)
n
Use CHAP unless prohibited by target
n
Use CHAP (software and dependent hardware iSCSI only). To configure mutual CHAP, you
must select this option.
b Specify the CHAP name.
Make sure that the name you specify matches the name configured on the storage side.
n
To set the CHAP name to the iSCSI initiator name, select Use initiator name.
n
To set the CHAP name to anything other than the iSCSI initiator name, deselect Use initiator
name and type a name in the Name text box.
c Enter a one-way CHAP secret to be used as part of authentication. Use the same secret that you
enter on the storage side.
4 To configure mutual CHAP, first configure one-way CHAP by following the directions in Step 3.
Make sure to select Use CHAP as an option for one-way CHAP. Then, specify the following under
Mutual CHAP:
a Select Use CHAP.
b Specify the mutual CHAP name.
c Enter the mutual CHAP secret. Make sure to use different secrets for the one-way CHAP and
mutual CHAP.
vSphere Administration with the vSphere Client
318 VMware, Inc.