Home > Blogs > VMware Security & Compliance Blog

vSphere Security Blog Update


Those of you that follow the vSphere Security blog are probably wondering why there hasn’t been much information posted here. I have been posting in the vSphere Blog in order to get more eyes on the security messaging of vSphere. I would encourage you to follow me there or at @vSphereSecurity on Twitter for more frequent updates.

Please note that the big news is the release of the vSphere 5.5 Hardening Guide. This release comes less than 3 weeks after the general availability of vSphere 5.5. If you have input into future hardening guide releases, please don’t hesitate to contact me!

Here’s a list of a few of the more recent items that I’ve posted in case you missed them.

  1. The vSphere 5.5 Hardening Guide has been released!
  2. vSphere Web Client Roles and Permissions How-To Video
  3. Virtual Appliances getting more secure with vSphere 5.5 – Part 1
  4. Virtual Appliances getting more secure with vSphere 5.5 – Part 2
  5. Virtual Appliances getting more secure with vSphere 5.5 – Part 3
  6. Virtual Appliances getting more secure with vSphere 5.5 – Part 4
  7. ESXi, syslog and logins
  8. “It’s a Unix system, I know this!”
  9. Grant shell access to this user? No worries mate!
  10. Skating your way to the SDDC

Thanks for all your interest in making vSphere an even better and more secure platform. I encourage you to get involved and reach out to me with your input, thoughts and concerns. Security is not a destination, it’s a journey so we can always be working to make things better!


This entry was posted in Uncategorized and tagged , , on by .
Mike Foley

About Mike Foley

Mike Foley is a Senior Technical Marketing Architect at VMware. His primary focus is on security of the core platform, vSphere. His primary goal is to help IT/VI Admins build more secure platforms that stand up to scrutiny from security teams with the least impact to IT Operations. Mike is also the current author of the vSphere Security Configuration (formerly Hardening) Guide. Previously, Mike was on the evangelist team at RSA where he concentrated on virtualization and cloud security and contributed as a member of the product architect team. Mike has a personal blog at https://yelof.com and contributes to the VMware vSphere and Security blogs as well. Follow him at @vSphereSecurity on Twitter

5 thoughts on “vSphere Security Blog Update

  1. John McCaffrey

    Does KB 2010332 apply to vCenter 5.0?

    It is linked from the vSphere 5.0 hardening guide but the “Product Versions” section to the right of the KB only states “VMware vCenter Server 4.1.x”

    (Mentioned in line 12 of the “ESXi” tab under the ID enabled-nfc-ssl)

    vSphere 5.0 ESXI

  2. Mike FoleyMike Foley Post author

    I honestly don’t know. The 5.0 hardening guide was before my time. Seeing as the KB is saying 4.1 only and I know that there’s been lots of OpenSSL updates since then, I’m leaning towards saying No.

  3. Pingback: IT Secure Site » Blog Archive » VMware CP&C releases Microsoft Security Advisory 2896666 toolkit for VCM!

Comments are closed.