6.7

Table Of Contents
For legacy hosts, changing the /etc/pamd/passwd file is still supported, but changing the file is
deprecated for future releases. Use the Security.PasswordQualityControl advanced option instead.
Changing Default Password Restrictions
You can change the default restriction on passwords or pass phrases by using the
Security.PasswordQualityControl advanced option for your ESXi host. See the vCenter Server and
Host Management documentation for information on setting ESXi advanced options.
You can change the default, for example, to require a minimum of 15 characters and a minimum number
of four words, as follows:
retry=3 min=disabled,disabled,15,7,7 passphrase=4
See the man page for pam_passwdqc for details.
Note Not all possible combinations of the options for pam_passwdqc have been tested. Perform
additional testing after you change the default password settings.
ESXi Account Lockout Behavior
Starting with vSphere 6.0, account locking is supported for access through SSH and through the vSphere
Web Services SDK. The Direct Console Interface (DCUI) and the ESXi Shell do not support account
lockout. By default, a maximum of ten failed attempts is allowed before the account is locked. The
account is unlocked after two minutes by default.
Configuring Login Behavior
You can configure the login behavior for your ESXi host with the following advanced options:
n
Security.AccountLockFailures. Maximum number of failed login attempts before a user's
account is locked. Zero disables account locking.
n
Security.AccountUnlockTime. Number of seconds that a user is locked out.
See the vCenter Server and Host Management documentation for information on setting ESXi advanced
options.
Before Upgrading ESXi Hosts
For a successful upgrade of your ESXi hosts, understand and prepare for the changes that are involved.
For a successful ESXi upgrade, follow these best practices:
1 Make sure that you understand the ESXi upgrade process, the effect of that process on your existing
deployment, and the preparation required for the upgrade.
n
If your vSphere system includes VMware solutions or plug-ins, make sure they are compatible
with the vCenter Server version that you are upgrading to. See the VMware Product
Interoperability Matrix at http://www.vmware.com/resources/compatibility/sim/interop_matrix.php.
VMware ESXi Upgrade
VMware, Inc. 20