Updated Information

This vSphere Security document is updated with each release of the product or when necessary.

This table provides the update history of the vSphere Security documentation.

Revision	Description
15 FEB 2023	Minor update to Virtual Machine Encryption Interoperability.
27 SEP 2022	Updated the vSphere Inventory Hierarchy figure in Hierarchical Inheritance of Permissions. Minor update to Renew or Refresh ESXi Certificates. Minor update to Enable or Disable UEFI Secure Boot for a Virtual Machine.
27 APR 2022	Minor update to Storage Views Privileges.
25 MAR 2022	Removed the tabular information from Incoming and Outgoing Firewall Ports for ESXi Hosts, Required Ports for vCenter Server and Platform Services Controller, and Ports That Support Disabling TLS Versions. Going forward, see the VMware Ports and Protocols Tool™ at https://ports.vmware.com/. As part of transitioning all the ports information to the Ports and Protocols Tool, the "Additional vCenter Server TCP and UDP Ports" topic has also been removed. Added information to vCenter Server Appliance Security Best Practices.
27 OCT 2021	Minor update to Use vSphere Authentication Proxy to Add a Host to a Domain. Fixed command in Ensure Proper SNMP Configuration. Added commands for viewing the current TLS settings to Disable TLS Versions on ESXi Hosts. Minor update to Revert TLS Configuration Changes.
14 AUG 2020	At VMware, we value inclusion. To foster this principle within our customer, partner, and internal community, we are replacing some of the terminology in our content. We have updated this guide to remove instances of non-inclusive language.
26 JUN 2020	Minor updates to Replacing ESXi SSL Certificates and Keys. Updated Ports That Support Disabling TLS Versions to clarify that you can use a TLS 1.2 only connection to an external Microsoft SQL Server database. Added description for Virtual machine.Configuration.Toggle fork parent in Virtual Machine Configuration Privileges. Minor update to Use the Direct Console User Interface (DCUI) to Enable Access to the ESXi Shell.
29 AUG 2019	Corrected steps in Synchronize ESXi Clocks with a Network Time Server. Made minor update to Required Ports for vCenter Server and Platform Services Controller. Made minor update to Virtual Machine Service Configuration Privileges.
16 APR 2019	Made minor updates to Encrypt an Existing Virtual Machine or Virtual Disk. Added cross-references to Virtual Disk Encryption. Added information about the WSManagement Service in Control Access for CIM-Based Hardware Monitoring Tools. Corrected the steps in Update the vCenter Server TRUSTED_ROOTS Store (Custom Certificates).
26 FEB 2019	Corrected "Used for Node-to-Node Communication" description for TCP port 7444 in Required Ports for vCenter Server and Platform Services Controller.
14 JAN 2019	Corrected the maximum number of failed attempts before account is locked, and when the account is unlocked, in ESXi Passwords and Account Lockout. Added information about how to enable the CIM service in Control Access for CIM-Based Hardware Monitoring Tools. Clarified how to download the certificate from the vCenter Server host in Import the vSphere Authentication Proxy Certificate to ESXi Host. Updated the configuration file example in Set Up vSphere Authentication Proxy to Use Custom Certificates.
09 NOV 2018	Corrected the location of the camconfig script on vCenter Server for Windows in Enable Client Authentication for vSphere Authentication Proxy. Updated information about the TRUSTED_ROOTS store in Use Custom Certificates with Auto Deploy. Updated Enable Smart Card Authentication to clarify that the certificates must be in PEM format. Updated discussion about encryption privileges in Prerequisites and Required Privileges for Encryption Tasks to clarify what happens when you create a virtual machine. Corrected the procedure to use vSphere Web Client in Change the Certificate Mode. Updated information about how to create a user for CIM applications in Control Access for CIM-Based Hardware Monitoring Tools.
22 JUN 2018	Added information about host encryption mode in Host Encryption Mode. Updated information about the successful backup example in Perform an Optional Manual Backup. Added text that you can configure user name and password authentication and smart card authentication at the same time in Securing the ESXi Hypervisor. Added information about reconfiguring a standalone ESXi host in Disable TLS Versions on ESXi Hosts.
15 JUN 2018	Corrected step in Disable TLS Versions on ESXi Hosts. You must log in to the vCenter Server system.
05 JUN 2018	Updated port information for vSphere Authentication Proxy in Required Ports for vCenter Server and Platform Services Controller. Added link for more information about assigning permissions to users and groups from a joined Active Directory domain in Add a Host to a Directory Service Domain, View Directory Service Settings, and Configure a Host to Use Active Directory. Added PowerCLI example code and updated note on upgrading a virtual machine that uses BIOS to EFI in Enable or Disable UEFI Secure Boot for a Virtual Machine. Added link to VMware vSphere Central site in VMware Security Resources on the Web. Updated information about vMotion, and encrypted and unencrypted virtual machines, in Encrypted vSphere vMotion. Added link for more information about assigning permissions to a user for an ESXi host in root User Privileges. Added text that the same rules apply for VLANs in a vSphere Distributed Switch as they do in a standard switch in Secure vSphere Distributed Switches and Distributed Port Groups. Updated the name of the Hardening Guide, now known as the Security Configuration Guide, in Related Documentation. Added information about using the vCLI command in Add Allowed IP Addresses for an ESXi Host. Added link to VMware Knowledge Base article 2008226 in ESXi ESXCLI Firewall Commands.
18 MAY 2018	Updated note for ports 80 and 443 in Required Ports for vCenter Server and Platform Services Controller.
03 MAY 2018	Initial release.