Removing Web-Access from ESX Server

[danielnek]

I've installed ESX 3.0.1.

I am going to remove the Web-Access and JAVA from the ESX Server.

I found the folder named "webAccess" that incluses the java process in the /usr/lib/vmware directory.

My plan is:

Run "ps -aef | grep java

kill all java processes

remove the webAccess folder

Can anyone tell me if the above steps cause any problems?

Thanks,

[doctormiru]

Hi

We disabled Web UI using the following procedure (for me it's the proper solution).

\- Make a copy of the file /etc/vmware/hostd/config.xml

\- Edit the file and remove the code within the section [/b]

\- restart the mgmt-vmware[/b] service

Regards

Michael

[admin]

This won't remove the components but it will prevent them from starting.

first stop web access as it is running

\# service vmware-webAccess stop

then we need to prevent it from starting

\# chmod -x /etc/init.d/vmware-webAccess

done.

[esiebert7625 · Accepted solution]

There is a service called vmware-webAccess (located in /etc/init.d), if you can prevent it from starting at boot that should do it for you.

[esiebert7625]

Also see this post, it has another solution...

http://www.vmware.com/community/thread.jspa?threadID=59508&tstart=0

[Texiwill]

Hello,

Another option is to use:

chkconfig vmware-webAccess off

service vmware-webAccess stop

And that will disable webAccess from starting on boot and stop it from running. I am not sure you want to delete the webAccess folder as it could cause some updates to fail and the files could be used by other components that are not using webAccess. I have not looked into how isolated webAccess is from the other management tools for ESX.

Best regards,

Edward

[danielnek]

It would be very good solution to remove the apache tomcat and java from the ESX server because DoD General Purpose STIG (Security Technical Implementation Guides) requires to remove them

Can I disable the Web-Access and then remove the apache tomcat and java application?

Thanks,

[kirklarsen]

Hi,

Yes, if your running ESX 3.5 and earlier you can even remove the webAccess component.

1. rpm -e VMware-webCenter-esx

This will remove it from disk.

--Ksl

Kirk Larsen

Product Security Officer

VMware Inc.