Book Image

Learning VMware vSphere

By : Rebecca Fitzhugh, Abhilash G B
Book Image

Learning VMware vSphere

By: Rebecca Fitzhugh, Abhilash G B

Overview of this book

Computer virtualization is a method to enable the running of multiple application workloads on a machine to achieve efficient utilization and reduce the number of physical machines in a data center. This has now become the foundation of many modern day data centers. What began as a technology to virtualize x86 architecture has now grown beyond the limits of a server’s hardware and into the realm of storage and network virtualization. VMware is currently the market leader in developing data center virtualization solutions. This book goes into the details of designing and implementing VMware solutions that form the foundation of a VMware infrastructure. The book begins by introducing you to the concepts of server virtualization followed by the architecture of VMware’s hypervisor – ESXi and then by its installation and configuration. You then learn what is required to manage a vSphere environment and configure advanced management capabilities of vCenter. Next you are taken through topics on vSphere Networking, Storage, ESXi Clustering, Resource Management and Virtual Machine Management. You will then be introduced to SSL Certificate Management and its use in a vSphere environment. Finally, you will learn about the lifecycle management of a vSphere environment by effectively monitoring, patching and upgrading vSphere components using Update Manager. By the end of the book, you will know how to use VMware’s vSphere suite of components to lay the foundation of a modern day virtual infrastructure.
Table of Contents (18 chapters)
Learning VMware vSphere
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface

Securing virtual machines


For the most part, virtual machines should be secured in the same way as a physical server. Ensure that anti-virus and patches are kept up to date. Disable anything that is unnecessary on the virtual machine. For example, if serial ports or the floppy drive are not in use for a virtual machine, disable those interfaces or remove those devices. Unused interfaces could potentially be used for direct access to a virtual machine. Ideally, these configurations are made once on a virtual machine that is converted to a template, thereby reducing the risk of misconfiguration.

There are several advanced configurations that can be made to help harden the virtual machines. To do so:

  1. Navigate to a virtual machine in the inventory using the vSphere Web Client.

  2. Right-click on the virtual machine and select Edit Settings… :

  3. Click on the VM Options tab and expand VMware Remote Console Options.

  4. Modify the VMware Remote Console Options as needed:

    • Guest OS lock: This setting specifies...