6. Securing Hyper-V Storage | Hyper-V Security

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Hyper-V Security

By : Eric Siron, Andy Syrewicze

4.5 (2)

Hyper-V Security

4.5 (2)

By: Eric Siron, Andy Syrewicze

Overview of this book

Hyper-V Security is intended for administrators with a solid working knowledge of Hyper-V Server, Windows Server, and Active Directory. An administrator with a functional environment will be able to use the knowledge and examples present in this book to enhance security.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Introducing Hyper-V Security

1. Introducing Hyper-V Security

The importance of Hyper-V security

Basic security concerns

A starting point to security

Hyper-V terminology

Acquiring Hyper-V

Summary

2. Securing the Host

2. Securing the Host

Understanding Hyper-V's architecture

Choosing a management operating system

Disabling unnecessary components

Using the Windows Firewall

Relying on domain security

Leveraging Group Policy

Using security software

Configuring Windows Update

Employing remote management tools

Following general best practices

Summary

3. Securing Virtual Machines from the Hypervisor

3. Securing Virtual Machines from the Hypervisor

Using the Hyper-V Administrators group

Leveraging PowerShell Remoting

Using custom PowerShell Remoting endpoints

Summary

4. Securing Virtual Machines

4. Securing Virtual Machines

Understanding the security environment of VMs

Leveraging Generation 2 virtual machines

Employing anti-malware on a virtual machine

Using Group Policy with virtual machines

Limiting exposure with resource limitations

Applying general best practices

Summary

5. Securing the Network

5. Securing the Network

Understanding SSL encryption

Leveraging network hardware

Using the virtual switch's isolating technologies

Employing Hyper-V virtual switch ACLs

Configuring the Windows Firewall

Using management tools remotely

Using Hyper-V with IPsec

Configuring virtual network adapter protections

Encrypting cluster communications

Securing Hyper-V Replica traffic

Summary

6. Securing Hyper-V Storage

6. Securing Hyper-V Storage

Configuring NTFS security for VM storage

Securing SMB 3.0 shares for VM storage

Securing iSCSI connections

Using Secure Boot

Using BitLocker

Understanding the role of backup

Summary

7. Hyper-V Security and System Center VMM

7. Hyper-V Security and System Center VMM

Enhancing Hyper-V host security through VMM

Securing the VMM installation

Network virtualization and multi-tenancy

Providing secure self-service with the Windows Azure Pack

Summary

8. Secure Hybrid Cloud Management through App Controller

8. Secure Hybrid Cloud Management through App Controller

System requirements

Installing App Controller

App Controller's role-based security model

Summary

Index

Index

Using Secure Boot

The aging basic input/output system (BIOS) that has controlled PC-based systems since the beginning is gradually being replaced by a new system known as Unified Extensible Firmware Interface (UEFI). Most of the differences have little to do with security and instead address technological shortcomings of the earlier system. The big security difference is in Secure Boot. Hyper-V brings this to its guests in Generation 2 virtual machines, introduced in 2012 R2.

In Hyper-V, Secure Boot defends against malicious software taking over the boot process of a virtual machine's operating system. It maintains a database of signatures for trusted operating systems. If any guest operating system doesn't match an entry in the database, then Hyper-V won't allow the guest to boot. Windows 8 and 8.1 desktop operating systems and Windows Server 2012 and 2012 R2 server operating systems will boot inside a Generation 2 virtual machine configured for Secure Boot; other operating systems will...

Visually different images

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Hyper-V Security

Search

Your notes and bookmarks