abugeja
Hot Shot
Hot Shot

Root ESXi Question

Hi,

In a large ESXi environment what do people do around the root ESXi account

Do you have the same root pswd on all your ESXi hosts?

Do you change the root pswd monthly, yearly?

From looking around it seems you can change the root pswd without any impact as well. Can someone please confirm this?

0 Kudos
3 Replies
daphnissov
Immortal
Immortal

The most common approaches I've seen are to use the same root password or to use something like Centrify to generate a root password per host. Yes, you can change the root password of an ESXi host live.

0 Kudos
vasan22in
Enthusiast
Enthusiast

Hello,

The best practice to set all ESXi host be in same password.

You can change it in every 6 months. You will achieve this by logging in to vcenter and change password, connect to individual ESXi host using ssh, also using a script.

Thanks,

Srini

Please consider marking this answer "correct" or "helpful" if you think your query have been answered correctly. Thanks, Srini
0 Kudos
abugeja
Hot Shot
Hot Shot

Agree for day to day support having the same root pswd over all your ESXi hosts is easier but what about in terms of security best practises.

0 Kudos