VMware virtual machines are designed to work on both vSphere systems and hosted virtualization platforms such as Workstation and Fusion. Certain VMX parameters do not need to be enabled when you run a virtual machine on a vSphere system. Disable these parameters to reduce the potential for vulnerabilities.

Before you begin

Turn off the virtual machine.

Procedure

  1. Find the virtual machine in the vSphere Web Client inventory.
    1. To find a virtual machine, select a datacenter, folder, cluster, resource pool, or host.
    2. Click the Related Objects tab and click Virtual Machines.
  2. Right-click the virtual machine and click Edit Settings.
  3. Select VM Options.
  4. Click Advanced and click Edit Configuration.
  5. Add or edit the following parameters.

    Name

    Value

    isolation.tools.unity.push.update.disable

    TRUE

    isolation.tools.ghi.launchmenu.change

    TRUE

    isolation.tools.memSchedFakeSampleStats.disable

    TRUE

    isolation.tools.getCreds.disable

    TRUE

    isolation.tools.ghi.autologon.disable

    TRUE

    isolation.bios.bbs.disable

    TRUE

    isolation.tools.hgfsServerSet.disable

    TRUE

  6. Click OK.

Results

Setting isolation.tools.hgfsServerSet.disable to true disables registration of the guest's HGFS server with the host. APIs that use HGFS to transfer files to and from the guest operating system, such as some VIX commands or the VMware Tools auto-upgrade utility, will not function.