Recent Posts

Secure Boot for ESXi 6.5 – Hypervisor Assurance

posted

I’ve talked about how vSphere has been moving towards a “secure by default” stance over the past few years. This can clearly be seen in the new vSphere 6.5 Security Configuration Guide where the number of  “hardening” steps are growing smaller with every release. In this blog post we will go over another “secure by Read more...

vSphere 6.5 Security Configuration Guide now available

posted

Announcing the GA release of the vSphere Security Configuration Guide!   Rename As I mentioned in my previous blog post where I announced the availability of the Security Configuration Guide (SCG) Release Candidate, the term “Hardening Guide” will no longer be used starting with vSphere 6.5.  Only an increasingly small subset of the settings are Read more...
TLS Reconfigurator

vSphere and TLS 1.2

posted

I traditionally don’t write much about compliance. I’ve been very focused on security. But some might ask “Aren’t they the same thing?”  My answer is unequivocally “No” but remember, this is my opinion and in the world of security, we are all entitled to our opinion, right? Security vs. Compliance Security is a practice. It’s Read more...
vSphere 6.5 PWT launch

vSphere 6.5 Security Product Walkthroughs

posted

Are you aware of the VMware Product Walkthrough site? If not, you’re missing out on some really great content. A product walkthrough is a guided “tour” of many of VMware’s products. They are helpful when you want to do a dry run of a task, like encrypting a VM for example, so that you can Read more...

PowerCLI for VM Encryption

posted

Hi everyone, I’m happy (ok, beyond happy!) to announce that our VM Encryption engineering team has released a PowerCLI module for VM Encryption! In case you weren’t aware, there’s a Github repository of VMware PowerShell modules. Check them out! Included in there is the new PowerCLI Module for VM Encryption. It’s chock full of lots Read more...

vSphere 6.5 Security – Social Media Links

posted

vSphere 6.5 is announced and the interest for the security features has been off the hook! My phone has been ringing like mad and emails are coming in fast and furious from customers and VMware field folks with “Where can I learn more???”. With that in mind, I’ve created this blog post as a repository Read more...

VMworld 2016 vSphere Security Sessions

posted

  VMworld 2016 promises to bring security of the vSphere platform and security in general to the forefront. Over the past 4 years security sessions at VMworld have leaped forward to into the Top 15 out of nowhere! That is all because of a sea change in how security is managed at scale. New and Read more...

Supported vSphere vCenter and ESXi Ciphers

posted

Hi everyone, One question that comes up regularly is “What ciphers are supported on vCenter and ESXi?”. I’m happy to share that we have published a VMware Knowledge Base article outlining the supported ciphers! With all of the challenges around SSL/TLS the past year or two, having a solid idea of what ciphers are being Read more...