8.0
Table Of Contents
- VMware ESXi Installation and Setup
- Contents
- About VMware ESXi Installation and Setup
- Introduction to vSphere Installation and Setup
- Introducing VMware vSphere Distributed Services Engine and Networking Acceleration by Using DPUs
- Installing and Setting Up ESXi
- ESXi Requirements
- Preparing for Installing ESXi
- Customizing Installations with vSphere ESXi Image Builder
- How the vSphere ESXi Image Builder Works
- Structure of ImageProfile, SoftwarePackage, and ImageProfileDiff Objects
- Install Prerequisite Software and Configure vSphere ESXi Image Builder
- Using VMware.Image Builder Cmdlets
- ESXi Image Profile Tasks
- Add a Software Depot
- Import a Software Depot
- Clone an Image Profile
- Create an Image Profile
- Edit an Image Profile
- Compare Image Profiles
- Move an Image Profile to a Different Software Depot
- Export an Image Profile to ISO or Offline Bundle ZIP
- Regenerate an Image Profile
- Preserve Image Profiles Across Sessions with PowerCLI Cmdlets
- Compare VIBs with PowerCLI Cmdlets
- vSphere ESXi Image Builder Workflows with PowerCLI Cmdlets
- Installing ESXi
- Installing ESXi Interactively
- Installing ESXi by Using a Script
- How to Boot an ESXi Host from a Network Device
- Installing ESXi Using vSphere Auto Deploy
- Understanding vSphere Auto Deploy
- Install and Configure vSphere Auto Deploy
- How vSphere Auto Deploy Works with PowerCLI
- Managing vSphere Auto Deploy with PowerCLI Cmdlets
- Overview of the vSphere Auto Deploy Process by Using PowerCLI
- Using vSphere Auto Deploy Cmdlets
- vSphere Auto Deploy PowerCLI Cmdlet Overview
- Assign an Image Profile to Hosts
- Write a Rule and Assign a Host Profile to Hosts
- Write a Rule and Assign a Host to a Folder or Cluster
- Configure a Stateless System by Running a Custom Script
- Test and Repair Rule Compliance
- Register a Caching Proxy Server Address with vSphere Auto Deploy
- vSphere Auto Deploy Tasks by Using the vSphere Client
- Managing vSphere Auto Deploy with the vSphere Client
- Create a Deploy Rule
- Clone a Deploy Rule
- Edit a Deploy Rule
- Activate, Deactivate, and Reorder Deploy Rules
- View Host Associations
- Edit the Image Profile Association of a Host
- Remediate a Non-compliant Host
- Add a Host to the vSphere Auto Deploy Inventory
- Add a Host to a Cluster That Uses a Single Image
- Add a Host to a Cluster That Manages ESXi Configuration at a Cluster Level
- Working with Script Bundles
- Download vSphere Auto Deploy Logs
- Start, Stop, or Restart the vSphere Auto Deploy Service
- Provision and Reprovision ESXi Hosts with vSphere Auto Deploy
- Using vSphere Auto Deploy for Stateless Caching and Stateful Installs
- Configure a Host Profile to Use Stateless Caching
- Configure a Host Profile to Enable Stateful Installs
- Setting Up a vSphere Auto Deploy Reference Host
- Configure an ESXi Dump Collector
- Configure Syslog from the Host Profiles Feature in the vSphere Client
- Enable NTP Client on a Reference Host in the vSphere Client
- Configure Networking for Your vSphere Auto Deploy Host in the vSphere Client
- Configure a Reference Host for Auto-Partitioning
- Converting Stateless Hosts to Stateful Hosts
- vSphere Auto Deploy Best Practices and Security Consideration
- Scenario to Set Up vSphere Auto Deploy and Provision Hosts with vSphere PowerCLI
- Install the TFTP Server
- Install PowerCLI
- Prepare the vSphere Auto Deploy Target Hosts
- Prepare the DHCP Server for vSphere Auto Deploy Provisioning
- Configure the vSphere Auto Deploy and TFTP Environment in the vSphere Client
- Prepare the ESXi Software Depot and Write a Rule
- Provision the First Host with vSphere Auto Deploy
- Extract and Configure a Host Profile from the Reference Host
- Create a Rule that Provisions Hosts from a Specific IP Range
- Provision Hosts and Set Up Host Customizations
- Troubleshooting vSphere Auto Deploy
- vSphere Auto Deploy Rule Takes Long to Complete
- vSphere Auto Deploy TFTP Timeout Error at Boot Time
- vSphere Auto Deploy Host Boots with Wrong Configuration
- Host Is Not Redirected to vSphere Auto Deploy Server
- Package Warning Message When You Assign an Image Profile to a vSphere Auto Deploy Host
- vSphere Auto Deploy Host with a Built-In USB Flash Drive Does Not Send Coredumps to Local Disk
- vSphere Auto Deploy Host Reboots After Five Minutes
- vSphere Auto Deploy Host Cannot Contact TFTP Server
- vSphere Auto Deploy Host Cannot Retrieve ESXi Image from vSphere Auto Deploy Server
- vSphere Auto Deploy Host Does Not Get a DHCP Assigned Address
- vSphere Auto Deploy Host Does Not Network Boot
- Recovering from Database Corruption on the vSphere Auto Deploy Server
- Setting Up ESXi
- Initial ESXi Configuration
- ESXi Autoconfiguration
- Managing ESXi Remotely
- About the Direct Console ESXi Interface
- Configure the Keyboard Layout for the Direct Console
- Create a Security Banner for the Direct Console
- Redirecting the Direct Console to a Serial Port
- Redirect the Direct Console to a Serial Port by Setting the Boot Options Manually
- Redirect the Direct Console to a Serial Port in a Host Deployed with Auto Deploy
- Enable ESXi Shell and SSH Access with the Direct Console User Interface
- Set the Password for the Administrator Account
- Configuring the BIOS Boot Settings
- Configuring Network Settings
- Network Access to Your ESXi Host
- ESXi Networking Security Recommendations
- Choose Network Adapters for the Management Network
- Set the VLAN ID
- Configuring IP Settings for ESXi
- Configure IP Settings from the Direct Console
- Configure IP Settings from the vSphere Client
- Configuring DNS for ESXi
- Configure DNS Settings from the Direct Console
- Configure DNS Suffixes
- Configure the Network Settings on a Host That Is Not Attached to the Network
- Test the Management Network
- Restart the Management Agents
- Restart the Management Network
- Test Connectivity to Devices and Networks
- Restoring the Standard Switch
- Configuring System Logging
- Set the Host Image Profile Acceptance Level
- Remove All Custom Packages on ESXi
- Deactivate Support for Non-ASCII Characters in Virtual Machine File and Directory Names
- Reset the System Configuration
- Initial ESXi Configuration
- After You Install and Set Up ESXi
- Troubleshooting ESXi Booting
- Decommission an ESXi Host
For example, you can change the option to the following.
retry=3 min=disabled,disabled,16,7,7
This example allows pass phrases of at least 16 characters and at least three words.
For legacy hosts, changing the /etc/pam.d/passwd file is still supported, but changing the file
is deprecated for future releases. Use the Security.PasswordQualityControl advanced system
setting instead.
Changing Default Password Restrictions
You can change the default restriction on passwords or pass phrases by using the
Security.PasswordQualityControl advanced system setting for your ESXi host. See the
vCenter
Server and Host Management
documentation for information on changing ESXi advanced system
settings.
You can change the default, for example, to require a minimum of 15 characters and a minimum
number of four words (passphrase=4), as follows:
retry=3 min=disabled,disabled,15,7,7 passphrase=4
See the man page for pam_passwdqc for details.
Note Not all possible combinations of password options have been tested. Perform testing after
you change the default password settings.
This example sets the password complexity requirement to require eight characters from four
character classes that enforce a significant password difference, a remembered history of five
passwords, and a 90 day rotation policy:
min=disabled,disabled,disabled,disabled,8 similar=deny
Set the Security.PasswordHistory option to 5 and the Security.PasswordMaxDays option to 90.
ESXi Account Lockout Behavior
Account locking is supported for access through SSH and through the vSphere Web Services SDK.
The Direct Console Interface (DCUI) and the ESXi Shell do not support account lockout. By default,
a maximum of five failed attempts is allowed before the account is locked. The account is unlocked
after 15 minutes by default.
Configuring Login Behavior
You can configure the login behavior for your ESXi host with the following advanced system
settings:
n Security.AccountLockFailures. Maximum number of failed login attempts before a user's
account is locked. Zero deactivates account locking.
n Security.AccountUnlockTime. Number of seconds that a user is locked out.
VMware ESXi Installation and Setup
VMware, Inc. 25