Security

Welcome to vSphere Central!

posted

I am pleased to announce the release of a brand new technical resource center called vSphere Central.  This site brings together a variety of technical assets from VMware that helps users understand how vSphere works, how to implement various features, plan upgrades, and more.  With content in a range of formats, including text, video, and Read more...

Learn about vSphere 6.5 at VMworld

posted

Ever since VMware released vSphere 6.5 late last year, the response from customers has been overwhelming positive.  Customers have been especially excited by features such as enterprise-grade vCenter Server Appliance (VCSA), built-in encryption features, and a modern API set.  Now that people have learned about these new capabilities, we decided for this year’s VMworld to Read more...

Using the vCenter Login Banner for RSA SecurID support

posted

In vSphere 6.0 Update 2 we added the capability to use RSA SecurID for two-factor authentication (2FA) in to the web client (only). I wrote about that in a two part blog series. Part 1 and Part 2 I recently got an email from a customer asking me about the implementation of the RSA SecurID Read more...

Secure By Default – VM.disable-unexposed-features

posted

I’m super happy to announce that we are showing more progress in our quest for “Secure By Default” for ESXi and vCenter Server. This latest update is one that is near and dear to many of you who live and breath by the Hardening Guide (now called the Security Configuration Guide in 6.5) and its Read more...

Secure Boot for ESXi 6.5 – Hypervisor Assurance

posted

I’ve talked about how vSphere has been moving towards a “secure by default” stance over the past few years. This can clearly be seen in the new vSphere 6.5 Security Configuration Guide where the number of  “hardening” steps are growing smaller with every release. In this blog post we will go over another “secure by Read more...

Learn about vSphere 6.5 – and Win a Drone!

posted

If you haven’t yet taken the Hands-on Lab for vSphere 6.5, now is the perfect time to do so.  When it was originally released during VMworld 2016, this lab was running a pre-release version of vSphere. The HOL team has been hard at work, and they have just updated the lab to the officially released version of Read more...

vSphere 6.5 Security Configuration Guide now available

posted

Announcing the GA release of the vSphere Security Configuration Guide!   Rename As I mentioned in my previous blog post where I announced the availability of the Security Configuration Guide (SCG) Release Candidate, the term “Hardening Guide” will no longer be used starting with vSphere 6.5.  Only an increasingly small subset of the settings are Read more...
TLS Reconfigurator

vSphere and TLS 1.2

posted

I traditionally don’t write much about compliance. I’ve been very focused on security. But some might ask “Aren’t they the same thing?”  My answer is unequivocally “No” but remember, this is my opinion and in the world of security, we are all entitled to our opinion, right? Security vs. Compliance Security is a practice. It’s Read more...