For software and dependent hardware iSCSI adapters, you can configure different CHAP credentials for each discovery address or static target.

When configuring CHAP parameters, make sure that they match the parameters on the storage side. The CHAP name should not exceed 511 and the CHAP secret 255 alphanumeric characters.

Required privilege: Host.Configuration.Storage Partition Configuration


Launch the vSphere Client and log in to a vCenter Server system.

Before setting up CHAP parameters for software and dependent hardware iSCSI, determine whether to configure one-way or mutual CHAP.

  • In one-way CHAP, the target authenticates the initiator.
  • In mutual CHAP, both the target and initiator authenticate each other. Make sure to use different secrets for CHAP and mutual CHAP.


  1. Access the iSCSI Initiator Properties dialog box.
  2. Select either Dynamic Discovery tab or Static Discovery tab.
  3. From the list of available targets, select a target you want to configure and click Settings > CHAP.
  4. Configure one-way CHAP in the CHAP area.
    1. Deselect Inherit from parent.
    2. Select one of the following options:
      • Do not use CHAP unless required by target
      • Use CHAP unless prohibited by target
      • Use CHAP. To be able to configure mutual CHAP, you must select this option.
    3. Specify the CHAP name.

      Make sure that the name you specify matches the name configured on the storage side.

      • To set the CHAP name to the iSCSI initiator name, select Use initiator name.
      • To set the CHAP name to anything other than the iSCSI initiator name, deselect Use initiator name and enter a name in the Name field.
    4. Enter a one-way CHAP secret to be used as part of authentication. Make sure to use the same secret that you enter on the storage side.
  5. To configure mutual CHAP, first configure one-way CHAP by following directions in Step 4.
    Make sure to select Use CHAP as an option for one-way CHAP. Then, specify the following in the Mutual CHAP area:
    1. Deselect Inherit from parent.
    2. Select Use CHAP.
    3. Specify the mutual CHAP name.
    4. Enter the mutual CHAP secret. Make sure to use different secrets for the one-way CHAP and mutual CHAP.
  6. Click OK.
  7. Rescan the initiator.


If you change the CHAP or mutual CHAP parameters, they are used for new iSCSI sessions. For existing sessions, new settings are not used until you log out and login again.