A policy describes how a specific configuration setting is applied. You can edit policies belonging to a specific Host Profile.

About this task

When you edit the Host Profile, you can expand the Host Profile's configuration hierarchy to see the sub-profile components that comprise the Host Profile. These components are categorized by functional group or resource class to make it easier to find a particular parameter. Each subprofile component contains one or more attributes and parameters, along with the policies and compliance checks.

Each policy consists of one or more options that contains one or more parameters. Each parameter consists of a key and a value. The value can be one of a few basic types, for example integer, string, string array, or integer array.

Table 1. Subset of Host Profile Subprofile Configurations

Subprofile Configuration

Example Policies and Compliance Checks

Notes

Memory reservation

Set memory reservation to a fixed value.

Storage

Configure storage options, including Native Multi-Pathing (NMP), Pluggable Storage Architecture (PSA), FCoE and iSCSI adapters, and NFS storage.

  • Use the vSphere CLI to configure or modify the NMP and PSA policies on a reference host, and then extract the Host Profile from that host. If you use the Profile Editor to edit the policies, to avoid compliance failures, make sure that you understand interrelationships between the NMP and PSA policies and the consequences of changing individual policies. For information about the NMP and PSA, see the vSphere Storage documentation.

  • Setting values for the Initiator IPv6 Address and Initiator IPv6 Prefix options in a Host Profile with independent hardware iSCSI adapters has no effect on the HBA because no independent iSCSi HBAs have IPv6 support.

  • Add the rules that change device attributes before extracting the Host Profile from the reference host. After attaching a host to the Host Profile, if you edit the profile and change the device attributes (for example, mask device paths or adding SATP rules to mark the device as SSD) you are prompted to reboot the host to make the changes. However, after rebooting, compliance failures occur because the attributes changed. Because Host Profiles extract device attributes before rebooting, if any changes occur after the reboot, it evaluates and finds those changes, and reports it as noncompliant.

Networking

Configure virtual switch, port groups, physical NIC speed, security and NIC teaming policies, vSphere Distributed Switch, and vSphere Distributed Switch uplink port.

When DHCPv6 is enabled in the networking subprofile, manually turn on the corresponding ruleset in the firewall subprofile.

Date and Time

Configure the time settings and timezone of server.

For the time zone, enter a UTC string. For example, "America/Los_Angeles" for United States Pacific time zone.

The default time zone is set to the local time and location of the vSphere Web Client machine.

Configure Network Time Protocol (NTP) correctly. You can configure the NTP settings on the host's Configuration tab. Click Time Configuration, and then click Properties at the top right of the panel.

Firewall

Enable or disable a ruleset.

Security

Add a user or a user group and set the root password.

Service

Configure settings for a service.

Advanced

Modify advanced options.

  • Host Profiles do not check advanced settings if they are the same as the default settings. vCenter Server copies only the advanced configuration settings that have changed and that differ from the default values. In addition, compliance checks are limited to the settings that are copied.

  • Host Profiles does not support the configuration of PCI devices for virtual machine passthrough on the ESXi host.

Other profile configuration categories include: user group, authentication, kernel module, DCUI keyboard, host cache settings, SFCB, resource pools, login banner, SNMP agent, power system, and CIM indication subscriptions.

Procedure

  1. Edit the Host Profile.
  2. Expand a subprofile until you reach the policy to edit.
  3. Select the policy.

    The policy options and parameters appear on the right side of the Edit Host Profile window.

  4. Make changes to the policy.