Secure the management Interface of an ESXi host and the virtual machine guest operating system by restricting the services and management agents that are allowed to interface directly with the host or virtual machine. Securing ESXi HostsThe ESXi hypervisor architecture has many built-in security features such as CPU isolation, memory isolation, and device isolation. You can configure additional features such as lockdown mode, certificate replacement, and smart card authentication for enhanced security. Securing Virtual MachinesThe guest operating system that runs in the virtual machine is subject to the same security risks as a physical system. Secure virtual machines as you would secure physical machines.