6.0.3

3 Write scripts to perform parameter checking or modication, and run them.
For example, you can check or set the shell interactive timeout of a host as follows:
Language Commands
vCLI (ESXCLI)
esxcli <conn_options> system settings advanced
get /UserVars/ESXiShellTimeOut
esxcli --formatter=csv --format-param=fields="Path,Int
Value"
system settings advanced list |
grep /UserVars/ESXiShellTimeOut
PowerCLI
#List UserVars.ESXiShellInteractiveTimeOut for each host
Get-VMHost | Select Name,
@{N="UserVars.ESXiShellInteractiveTimeOut";E={$_
| Get-AdvancedSetting -Name
UserVars.ESXiShellInteractiveTimeOut
| Select -ExpandProperty Value}}
# Set UserVars.ESXiShellTimeOut to 900 on all hosts
Get-VMHost
| Foreach { Get-AdvancedSetting -Entity $_ -Name
UserVars.ESXiShellInteractiveTimeOut | Set-AdvancedSetting
-Value 900 }
4 In large environments, create roles with dierent access privileges and group hosts into folders
according to the tasks that you want to perform. You can then run scripts over dierent folders from
dierent service accounts.
5 Verify that the changes happened after you run the command.
Configure ESXi Hosts with Host Profiles
Host proles allow you to set up standard congurations for your ESXi hosts and automate compliance to
these conguration seings. Host proles allow you to control many aspects of host conguration including
memory, storage, networking, and so on.
You can congure host proles for a reference host from the vSphere Web Client and apply the host prole
to all hosts that share the characteristics of the reference host. You can also use host proles to monitor hosts
for host conguration changes. See the vSphere Host Proles documentation.
You can aach the host prole to a cluster to apply it to all hosts in the cluster.
Procedure
1 Set up the reference host to specication and create a host prole.
2 Aach the prole to a host or cluster.
3 Apply the host prole of the reference host to other hosts or clusters.
Chapter 5 Securing ESXi Hosts
VMware, Inc. 155