A policy describes how a specific configuration setting should be applied. The Profile Editor allows you to edit policies belonging to a specific host profile.

On the left side of the Profile Editor, you can expand the host profile. Each host profile is composed of several subprofiles that are designated by functional group to represent configuration instances. Each subprofile contains many policies and compliance checks that describe the configuration that is relevant to the profile. You can configure certain subprofiles, example policies, and compliance checks.

Each policy consists of one or more options that contains one or more parameters. Each parameter consists of a key and a value. The value can be one of a few basic types, for example integer, string, string array, or integer array.

Table 1. Subset of Host Profile Subprofile Configurations
Sub-Profile Configuration Example Policies and Compliance Checks Notes
Memory reservation Set memory reservation to a fixed value.
Storage Configure storage options, including Native Multi-Pathing (NMP), Pluggable Storage Architecture (PSA), FCoE and iSCSI adapters, and NFS storage.
  • Use the vSphere CLI to configure or modify the NMP and PSA policies on a reference host first, and then extract the host profile from that host. If you use the Profile Editor to edit the policies, to avoid compliance failures, make sure that you thoroughly understand interrelationships between the NMP and PSA policies and the consequences of changing individual policies. For information on the NMP and PSA, see the vSphere Storage documentation.
  • Setting values for the Initiator IPv6 Address and Initiator IPv6 Prefix options in a host profile with independent hardware iSCSI adapters has no effect on the HBA because no independent iSCSi HBAs have IPv6 support.
  • Add the rules that change device attributes before extracting the host profile from the reference host. After attaching a host to the host profile, if you edit the profile and change the device attributes (for example, mask device paths or adding SATP rules to mark the device as SSD) you are prompted to reboot the host in order to make the changes. However, after rebooting compliance failures occur because the attributes changed. Because Host Profiles extract device attributes before rebooting, if any changes occur after the reboot, it evaluates and finds those changes, and reports it as non-compliant.
Networking Configure virtual switch, port groups, physical NIC speed, security and NIC teaming policies, vSphere Distributed Switch, and vSphere Distributed Switch uplink port.

When DHCPv6 is enabled in the networking sub-profile, the corresponding ruleset must also be manually turned on in the firewall subprofile.

Date and Time Configure the time settings and timezone of server.

For the time zone, enter a UTC string. For example, "America/Los_Angeles" for United States Pacific time zone.

The default time zone is set to the local time and location of the vSphere Client machine.

Network Time Protocol (NTP) should be correctly configured. You can configure the NTP settings on the host's configuration tab. Click Time Configuration, then Properties at the top right of the panel.

Firewall Enable or disable a ruleset.
Security Add a user or a usergroup and set the root password.
Service Configure settings for a service.
Advanced Modify advanced options.
  • Host Profiles do not check advanced settings if they are the same as the default settings. vCenter Server only copies the advanced configuration settings that have changed and differ from the default values. In addition, compliance checks are limited to only the settings that are copied.
  • Host Profiles does not support the configuration of PCI devices for virtual machine passthrough on the ESXi host.

Other profile configuration categories include: user group, authentication, kernel module, DCUI keyboard, host cache settings, SFCB, resource pools, login banner, SNMP agent, power system, and CIM indication subscriptions.


  1. Open the Profile Editor for the profile to edit.
  2. On the left side of the Profile Editor, expand a subprofile until you reach the policy to edit.
  3. Select the policy.
    On the right side of the Profile Editor, the policy options and parameters are displayed on the Configuration Details tab.
  4. Select a policy option from the drop-down menu and set its parameter.
  5. Click OK when you are finished editing the profile.
    Note: The change is made when the "Update host profile" task is completed in the Recent Tasks status. If you attempt to apply the profile before the task is complete, the profile configuration does not contain the change.
  6. (Optional) If you make a change to a policy, but want to revert back to the default option, click Revert and the option is reset.