Book Image

Learning VMware vSphere

By : Rebecca Fitzhugh, Abhilash G B
Book Image

Learning VMware vSphere

By: Rebecca Fitzhugh, Abhilash G B

Overview of this book

Computer virtualization is a method to enable the running of multiple application workloads on a machine to achieve efficient utilization and reduce the number of physical machines in a data center. This has now become the foundation of many modern day data centers. What began as a technology to virtualize x86 architecture has now grown beyond the limits of a server’s hardware and into the realm of storage and network virtualization. VMware is currently the market leader in developing data center virtualization solutions. This book goes into the details of designing and implementing VMware solutions that form the foundation of a VMware infrastructure. The book begins by introducing you to the concepts of server virtualization followed by the architecture of VMware’s hypervisor – ESXi and then by its installation and configuration. You then learn what is required to manage a vSphere environment and configure advanced management capabilities of vCenter. Next you are taken through topics on vSphere Networking, Storage, ESXi Clustering, Resource Management and Virtual Machine Management. You will then be introduced to SSL Certificate Management and its use in a vSphere environment. Finally, you will learn about the lifecycle management of a vSphere environment by effectively monitoring, patching and upgrading vSphere components using Update Manager. By the end of the book, you will know how to use VMware’s vSphere suite of components to lay the foundation of a modern day virtual infrastructure.
Table of Contents (18 chapters)
Learning VMware vSphere
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface

Securing ESXi


Securing vSphere components is an aspect of any design and implementation. Components should be secured to minimize vulnerabilities that could be maliciously exploited. Though ESXi is secure post-installation, there are a few configurations that could be made to further harden the hypervisor. Consider using a host profile (discussed previously in Chapter 7, Understanding Host Profiles, Image Profiles, and Auto Deploy) to create a baseline and make these changes across all ESXi hosts.

Joining ESXi to an Active Directory domain

ESXi hosts may be configured to use Active Directory to manage user access. Using local user accounts on each host would be tedious, and may potentially involve having to create and manage account names and passwords across many ESXi hosts. Using a directory service, like Active Directory, can help reduce ESXi host configuration, simplifying management, and reducing the chance that a configuration issue may lead to unintended unauthorized access.

To configure...