VMware Cloud Community
robertfriend
Contributor
Contributor

Enable SSL3 using powercli

I need to enable SSL3 on a series of hosts (per Configuring SSLv3 protocol on vSphere 5.5 (2146255) | VMware KB). Per that KB the process involves using EXCLI to run the following: esxcli system settings advanced set -o /UserVars/ESXiRhttpproxyDisabledProtocols -s "" then running esxcli system settings advanced list -o /UserVars/ESXiRhttpproxyDisabledProtocols to confirm the change.


I have a large number of these to do and would like to use PowerCLI but am having trouble. This is what I have so far:


$getcli = Get-EsxCli -V2 -VMHost host.local

$getcli.system.settings.advanced.list -o /UserVars/ESXiRhttpproxyDisabledProtocols


The lines above are the confirmation portion of the KB and are just being used for test. Where I am running into issues is at the -o variable. I cannot seem to find the PowerCLI equivalent



Message was edited by: robertfriend Fixed title

Reply
0 Kudos
4 Replies
LucD
Leadership
Leadership

You're using the V2 version of Get-Esxcli, but calling in the non-V2 way.

Try like this, does that work for you?

$parmList = @{

  option = '/UserVars/ESXiRhttpproxyDisabledProtocols'

}

$esxcli = Get-EsxCli -VMHost MyEsx -V2

$esxcli.system.settings.advanced.list.Invoke($parmList)


Blog: lucd.info  Twitter: @LucD22  Co-author PowerCLI Reference

Reply
0 Kudos
robertfriend
Contributor
Contributor

Thank you for that. I'll give that a shot and report back!

Reply
0 Kudos
robertfriend
Contributor
Contributor

Unfortunately I receive the following:

Message: Unable to find option ESXiRhttpproxyDisabledProtocols;

InnerText: Unable to find option ESXiRhttpproxyDisabledProtocolsEsxCLI.CLIFault.summary

At line:6 char:1

+ $esxcli.system.settings.advanced.list.Invoke($parmList)

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    + CategoryInfo          : OperationStopped: (:) [], ViError

    + FullyQualifiedErrorId : VMware.VimAutomation.Sdk.Types.V1.ErrorHandling.VimException.ViError

Is it possible that not all ESXCLI commands are possible through powercli?

Reply
0 Kudos
LucD
Leadership
Leadership

No, they should all be there.

I suspect that the error on the 'list' is there because the entry doesn't exist yet.

You could check this through the Web Client and the Advanced Settings option for the ESXi node.

Try enabling it first, and then a list.

Like this

$parmList = @{

  option = '/UserVars/ESXiRhttpproxyDisabledProtocols'

}

$parmSet = @{

  option = '/UserVars/ESXiRhttpproxyDisabledProtocols'

  stringvalue = ''

}

$esxcli = Get-EsxCli -VMHost MyEsx -V2

$esxcli.system.settings.advanced.set.Invoke($parmSet)

$esxcli.system.settings.advanced.list.Invoke($parmList)


Blog: lucd.info  Twitter: @LucD22  Co-author PowerCLI Reference

Reply
0 Kudos