You can create an iSCSI initiator group to provide access control for iSCSI targets. Only iSCSI initiators that are members of the initiator group can access the iSCSI targets.


  1. Navigate to the vSAN cluster in the vSphere Web Client.
  2. Click the Configure tab. Under vSAN, click iSCSI Initiator Groups.
  3. In the vSAN iSCSI Initiator Groups section, click the Add a new iSCSI initiator group (Create license icon) icon.

    The New vSAN iSCSI Initiator Group dialog box is displayed.

  4. Enter a name for the iSCSI initiator group.
  5. (Optional) To add members to the initiator group, enter the IQN of each member.

    Use the following format to enter the member IQN:



    • YYYY = year, such as 2016

    • MM = month, such as 09

    • domain = domain where the initiator resides

    • name = member name (optional)

  6. Click OK.

What to do next

Add members to the iSCSI initiator group.