You can use the vSphere Web Client to enable local and remote (SSH) access to the ESXi Shell and to set the idle timeout and availability timeout.

Note: Access the host by using the vSphere Web Client, remote command-line tools (vCLI and PowerCLI), and published APIs. Do not enable remote access to the host using SSH unless special circumstances require that you enable SSH access.


If you want to use an authorized SSH key, you can upload it. See ESXi SSH Keys.


  1. Browse to the host in the vSphere Web Client inventory.
  2. Click Configure.
  3. Under System, select Security Profile.
  4. In the Services panel, click Edit.
  5. Select a service from the list.
    • ESXi Shell
    • SSH
    • Direct Console UI
  6. Click Service Details and select the startup policy Start and stop manually.
    When you select Start and stop manually, the service does not start when you reboot the host. If you want the service to start when you reboot the host, select Start and stop with host.
  7. Select Start to enable the service.
  8. Click OK.

What to do next

Set the availability and idle timeouts for the ESXi Shell. See Create a Timeout for ESXi Shell Availability in the vSphere Web Client and Create a Timeout for Idle ESXi Shell Sessions in the vSphere Web Client