Can I use vsphere instead of vcenter for vROPs?

[BobNiaan]

Hi, im really new to vROPs, so my issue is whether I am able to just use my ESXi vSphere 6.5 to allow me to use vROPs instead of using vCenter as I need vROPs to help me on hardening of my host. This is because I only have 1 host and have a few VMs running only, thus do not need vCenter. However, upon installation of vROPs, I realize that they require me to configure my vCenter Adapter which needs a vCenter credential which I do not have. Any help would be appreciated, thanks!

[Kpitt]

Hi BobNiaan,

I don't see this listed in the documentation, but if you edit the vSphere Solution to add an adapter instance you can put the IP/FQDN of the ESXi host and it should present you with a certificate to accept and the test should work (provided you use a high level credential, in my case, I just used root).

I just tested this in my lab, the adapter instance got created, and I'm currently waiting for metric data to populate for the objects under that host. I will report back in a little while to let you know if I am getting metrics.

-Kyle

[BobNiaan]

I've tried putting my ESXi 6.5 IP at the 'vCenter Server' box under Basic Setting during configuration and it seems to 'work'. However, it's not showing any risk and alerts whatsoever and furthermore it requires me to go in quite deep to find my host (Environment > vSphere Hosts and Clusters > vSphere World > ESXi 6.5 > ha-datacenter > esxi-host ). As stated in my question above that I need to check where my host is hardened, is there a way for vROPs to show the risk on my host using the Security Hardening Guideline vSphere 6.5?

[Kpitt]

You would need to assign the Hardening Policy to the host... See attached. If this host is the only thing in your vROps environment, you can simply make the Hardening Guide the default.

I don't think the vSphere Adapter was meant for just a single host, I surprised myself when it prompted me with the Certificate so it doesn't surprise me you have to dig a little to get to it.

-K

[BobNiaan]

After making the hardening guideline my default policy, it seems that there isn't anything like alert shown. Does this means that my host is fine or did I do something wrong? (See attached picture)

[sxnxr]

I have not done this so am not an expert in any way but try clicking the two arrows next to all metrix in your second screen shot then select analysis the compliance. That should show you if you are complaint or not according to the policy