4 Replies Latest reply on Nov 19, 2012 4:08 AM by Jmort

Hardening Guide on nested ESXi

Jmort Nov 18, 2012 7:37 AM

Hi all, I am having a bit of trouble running the perl script against my lab environment. I have ESXi 5.1 (free version) running a trial version of vSphere nested within, I have added my exisitng host with numerous VM's attached to the vCenter and they are listed. I log into the vMa and then run the perl script against the vCenter using valid root creds and the report is generated however it contains no detail at all (takes 3 seconds to generate btw). Could anyone help me with some pointers on what to look for please?

I am running the script from the vi-admin home location.

Cheers

1. Re: Hardening Guide on nested ESXi

lamw Nov 18, 2012 9:12 AM (in response to Jmort)

Currently there is not a vSphere Security Hardening Guide for vSphere 5.1, it's only applicable for 5.0 and hence the script is not generating any output.
Like Show 0 Likes(0)

Actions
2. Re: Hardening Guide on nested ESXi

Jmort Nov 18, 2012 11:18 AM (in response to lamw)

@lamw thanks for the reply, is it something that I could undertake to update the script? I noticed the api version points to 5.0.0 does it need to reference 5.1.0?
Like Show 0 Likes(0)

Actions
3. Re: Hardening Guide on nested ESXi

lamw Nov 18, 2012 11:29 AM (in response to Jmort)

Yes, it's something you could probably do. Each check as a section that defines the valid version of vSphere (as certain checks are only applicable to certain versions). I guess, if you want to check the same set of 5.0 settings (not all would apply) but you could do is just append any entries that supports 5.0 to 5.1.

Again, no guarantee you won't hit any issues, but it should be pretty straight forward.
Like Show 0 Likes(0)

Actions
4. Re: Hardening Guide on nested ESXi

Jmort Nov 19, 2012 4:08 AM (in response to lamw)

Yep no worries modded the script to check for version 5.1.0 in each finding and voila all good!. Many thanks for your help.
Like Show 0 Likes(0)

Actions