Solved

vSphere 4 - Disable Web-Based Datastore Browser

Posted on 2011-09-06
5
1,122 Views
Last Modified: 2012-05-12
Guys/Gals,

Is there any way of disabling the Web-Based Datastore Browser funtion for each ESX host server? I have gone as far as renaming the index.html but if you know the URL to Browse then you can still get prompted for login credentials.

We have already disabled the Web Access service as part of VMware hardening. We want to completely disable the home page and underlying access to Browse Datastores etc.

I need to disble this option to further enhance security.

Thanks in advance
0
Comment
Question by:15moorgate
  • 4
5 Comments
 
LVL 117
ID: 36488377
You can change the ports in the PROXY.XML file on the ESX hosts servers, to different hidden ports.

You can also comment out the Web Section, and Object Sections as per this document

It mentions Security Hardening
vSphere Hardening Document
0
 
LVL 117

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE) earned 500 total points
ID: 36488408
and if you want the shortcut, and don't want to read the document I've supplied!

VMware refer to this Security Code HCM02 on Page 27.

Instructions here to disable
http://kb.vmware.com/kb/1016039
0
 
LVL 117
ID: 36488422
or using vCLI

vmware-vim-cmd proxysvc/remove_service "/mob" "httpsWithRedirect"
0
 
LVL 117
ID: 36488426
if you are tempted to edit with WinSCP, make sure you backup the file first, and make the correct, corrections to the XML file, because it's very fussy.
0
 

Author Closing Comment

by:15moorgate
ID: 36501373
Thank you very much sir, greatly appreciated the quick response and all the links.

Out Internet suffered yesterday otherwise I would have closed then.

Regards
JEL
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Suggested Solutions

Create your own, high-performance VM backup appliance by installing NAKIVO Backup & Replication directly onto a Synology NAS!
In this article, I will show you HOW TO: Create your first Windows Virtual Machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, the Windows OS we will install is Windows Server 2016.
Teach the user how to rename, unmount, delete and upgrade VMFS datastores. Open vSphere Web Client: Rename VMFS and NFS datastores: Upgrade VMFS-3 volume to VMFS-5: Unmount VMFS datastore: Delete a VMFS datastore:
Teach the user how to use create log bundles for vCenter Server or ESXi hosts Open vSphere Web Client: Generate vCenter Server and ESXi host log bundle:  Open vCenter Server Appliance Web Management interface and generate log bundle: Open vCenter Se…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now