Change the default ESX Admins group to achieve greater levels of security and enable vSAN to provision the Virtual Machine Swap files as thin to save space in the vSAN datastore. 

Procedure

  1. Log in to the Management vCenter Server by using the vSphere Web Client.
    1. Open a Web browser and go to https://sfo01m01vc01.sfo01.rainpole.local/vsphere-client.
    2. Log in using the following credentials.

      Setting

      Value

      User name

      administrator@vsphere.local

      Password

      vsphere_admin_password

  2. Change the default ESX Admins group.
    1. In the Navigator, click Hosts and Clusters and expand the entire sfo01m01vc01.sfo01.rainpole.local tree.
    2. Select the sfo01m01esx01.sfo01.rainpole.local host.
    3. Click the Configure tab, click System > Advanced System Settings.
    4. Click the Edit button.
    5. In the filter box, enter esxAdmins and wait for the search results.
    6. Change the value of Config.HostAgent.plugins.hostsvc.esxAdminsGroup to SDDC-Admins and click OK.
  3. Provision Virtual Machine swap files on vSAN as thin.
    1. In the Navigator, click Hosts and Clusters and expand the entire sfo01m01vc01.sfo01.rainpole.local tree
    2. Select the sfo01m01esx01.sfo01.rainpole.local host.
    3. Click the Configure tab, click System > Advanced System Settings.
    4. Click the Edit button.
    5. In the filter box, enter vsan.swap and wait for the search results.
    6. Change the value of VSAN.SwapThickProvisionDisabled to 1 and click OK.
  4. Disable the SSH warning banner.
    1. In the Navigator, click Hosts and Clusters and expand the entire sfo01m01vc01.sfo01.rainpole.local tree
    2. Select the sfo01m01esx01.sfo01.rainpole.local host.
    3. Click the Configure tab, click System > Advanced System Settings.
    4. Click the Edit button.
    5. In the filter box, enter ssh and wait for the search results.
    6. Change the value of UserVars.SuppressShellWarning to 1 and click OK.