Solved

lockdown mode / DCIU

Posted on 2013-12-03
5
491 Views
Last Modified: 2013-12-05
can enforcing lockdown mode /disabling DCUI create any support type issues? I.e. are there any cases whereby you may wish to perform troubleshooting directly on the host as opposed to using vCenter?

And secondly is it an easy thing to enable/disable - or quite a time consuming excercise? I was thinking it could be enabled (ld mode) by default and temporarily disabled if theres a genuine business case/then re-enabled after the work is done?
0
Comment
Question by:pma111
  • 3
  • 2
5 Comments
 
LVL 118

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE) earned 500 total points
ID: 39692709
1. Yes it can cause issues, if you visit the console, to perform additional diagnostics, and the console is locked, you will not be able to access the server.

A bit like if there is no keyboard attached!

2. It is easy to enable and disable from vSphere vCenter Server.

VMware KB: Enabling or disabling Lockdown mode on an ESXi host
0
 
LVL 3

Author Comment

by:pma111
ID: 39692718
So is that the appraoch you follow, enable LD mode by default, disable as and when neccesary?
0
 
LVL 118
ID: 39692724
If you believe you may have a security risk in your computer room or datacentre.

We see it enable, when you have servers in a shared datacentre location with many other companies servers.
0
 
LVL 3

Author Comment

by:pma111
ID: 39692736
But it would also save the impact if someone gained unauthorised access to the server room, i.e. break in? i,e,.defence in depth strategy, or are you pretty much toast if someone breaks in anyway?
0
 
LVL 118
ID: 39692741
If someone broke in, they could remove the server!

and deal with access to the server later. (easily!)
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Last article we focus in how to VMware: How to create and use VMs TAGs – Part 1 so before follow this article and perform the next tasks, you should read the first article how to create the TAG before using them in Veeam Backup Jobs.
In this article, I will show you HOW TO: Create your first Windows Virtual Machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, the Windows OS we will install is Windows Server 2016.
Teach the user how to edit .vmx files to add advanced configuration options Open vSphere Web Client: Edit Settings for a VM: Choose VM Options -> Advanced: Add Configuration Parameters:
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now