You can enable and disable normal lockdown mode from the Direct Console User Interface (DCUI). You can enable and disable strict lockdown mode only from the vSphere Web Client.
- Accounts in the Exception Users list who have administrator privileges on the host. The Exception Users list is meant for service accounts such as a backup agent.
- Users defined in the
DCUI.Accessadvanced option for the host. This option can be used to enable access in case of catastrophic failure.
For ESXi 6.0 and later, user permissions are preserved when you enable lockdown mode. User permissions are restored when you disable lockdown mode from the Direct Console Interface.
DCUI.Accessadvanced option to guarantee that the host remains accessible.
To retain permissions, disable lockdown mode for the host from the vSphere Web Client before the upgrade.
- At the Direct Console User Interface of the host, press F2 and log in.
- Scroll to the Configure Lockdown Mode setting and press Enter to toggle the current setting.
- Press Esc until you return to the main menu of the Direct Console User Interface.