Objective 7.1 – Secure ESX/ESXi Hosts Question

[Valley911]

Hey All,

I am currently working on my study guide for the DCA exam and have stumbled a little bit with objective 7.1 Secure ESX/ESxi hosts, and more specifically the section for "Customize SSH Seetings for Increased Security". The only documentation I have been able to find related to this topic is in the "ESX Configuration Guide" on page 202 and VMware KB 1017910. In the ESX config guide it details how to LOWER the security requirments over the default (allowing root acces, changing the SSH protocol version, etc) and KB article explains how to set a timeout for TechSupport Mode (both local and remote). I am assuming these are not the types of answers they are looking for as the section is for increasing the security level.

Any clarification or possilbe tips somebody could offer would be greatly appreciated.

TIA,

-Jason

**My apologizes if this type of question should not be posted, if not please remove**

[firestartah]

Hi

Sean Crookston has covered all the possible ways in his VCAP-DCA index page for the 7.1 objective

http://www.seancrookston.com/2010/09/27/vcap-dca-objective-7-1-secure-esxi-hosts/

Gregg

[Valley911]

Greg,

Thank you for the response. I have seen Sean's post, but not to split hairs I am more concerned that the information he has on his blog as well as what I have found in the documentation would not be "increasing the security" as the section states in the blue print. If enabling the root account for SSH is what they are looking for that is fine, I just want to be sure I am not missing something.

TIA,

-Jason

[firestartah · Accepted solution]

Hi

Well as far as I know the stuff covered there is it. Sean passed his no problem and from a number of friends who have written the exam they have all used the same resources covered in that and have passed it fine. But maybe other people who have written it can contribute and who may be able to add somethign else?

[Valley911]

Greg,

That is good news. Thank you for the info.

-Jason