Solved

VMX settings recommended by Hardening Guide not in vmx files

Posted on 2014-10-24
2
294 Views
Last Modified: 2014-10-24
I have something called the "vSphere 5.5 Security Hardening Guide" and it recommends that the following values be put into the individual Virtual Machine vmx files.

My question is: Why aren't these values in my current vms files at all?  It's not that I have to check to see if the values are set as recommended, but the settings themselves don't exist in the vmx files.

Can I just add them in?  Or is the fact that they are not there at all a problem?

Thanks.

The recommended settings:

isolation.tools.diskShrink.disable = "TRUE"
isolation.tools.diskWiper.disable = "TRUE"
vmci0.unrestricted = "FALSE"
isolation.device.connectable.disable = "TRUE"
RemoteDisplay.maxConnections = "2"
log.keepOld = "10"
log.rotateSize = "100000"
tools.setInfo.sizeLimit = "1048576"
0
Comment
Question by:gateguard
2 Comments
 
LVL 119

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE^2) earned 500 total points
ID: 40402288
They are never in the VMs by default, you need to add them, if these Risks apply to your Security and Governance at your organisations, go ahead and add them, they will cause no issues.

Make sure you shutdown the VM first, and enter them through the Advanced Settings.
0
 

Author Closing Comment

by:gateguard
ID: 40402298
Thank you, Andrew.  Much appreciated.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When we have a dead host and we lose all connections to the ESXi, and we need to find a way to move all VMs from that dead ESXi host.
In this article, I will show you HOW TO: Suppress Configuration Issues and Warnings Alert displayed in Summary status for ESXi 6.5 after enabling SSH or ESXi Shell.
Teach the user how to convert virtaul disk file formats and how to rename virtual machine files on datastores. Open vSphere Web Client: Review VM disk settings: Migrate VM to new datastore with a thick provisioned (lazy zeroed) disk format: Rename a…
Teach the user how to install log collectors and how to configure ESXi 5.5 for remote logging Open console session and mount vCenter Server installer: Install vSphere Core Dump Collector: Install vSphere Syslog Collector: Open vSphere Client: Config…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question