5.8 Set DCUI.Access to allow trusted users to override lockdown mode


Create a list of highly trusted users that would be able to override lockdown mode and
access the DCUI in the event a host became isolated.


Lockdown disables direct host access requiring admins manage hosts from vCenter.
However, if a host becomes isolated from vCenter the admin would become locked out and
would be unable to manage the host. To avoid potentially becoming locked out of an ESXi
hosts that is running in locked down mode set the DCUI.Access to a list of highly trusted
users that are allowed to override the lockdown mode and access the DCUI.


To implement the recommended configuration state, run the following ESXi shell
command-vim-cmd hostsvc/advopt/update DCUI.Access string [USERS]

Default Value-The prescribed state is not the default state.

See Also


Item Details


References: 800-53|AC-17(4), CSCv6|5.1

Plugin: VMware

Control ID: 94bcd2606e0c101448d06baf7ee773ceb00b23634c64b79cc7a315cba62d0cec