Updated Information

This vSphere Security document is updated with each release of the product or when necessary.

This table provides the update history of the vSphere Security documentation.

Revision	Description
31 MAR 2021	Minor update to Security Best Practices and Resources. Updated multiple topics in vSphere Permissions and User Management Tasks. Minor update to Securing ESXi Hosts. Updated ESXi Passwords and Account Lockout to include more information about password options. Minor update to SSH Security. Minor update to ESXi Networking Security Recommendations. Minor update to View Certificate Expiration Information for Multiple ESXi Hosts. Updated Renew or Refresh ESXi Certificates to include verification steps. Updated Requirements for ESXi Certificate Signing Requests with more information about generating CSRs. Updated Manage the Acceptance Levels of Hosts and VIBs to correct the syntax of the CLI command and to clarify where to go for support for VMwareAccepted and PartnerSupported VIBs. Updated Create a Timeout for Idle ESXi Shell Sessions to show that a value of zero (0) disables the idle time. Minor update to Use the Direct Console User Interface to Enable Access to the ESXi Shell. Minor update to Securing ESXi Hosts with Trusted Platform Module. Updated Troubleshoot ESXi Host Attestation Problems to add more information about checking the vpxd.log file. Minor update to Securing Virtual Machines. Minor update to Minimize Use of the Virtual Machine Console. Minor update to Prevent Virtual Machines from Taking Over Resources. Minor update to Disable Unnecessary Functions Inside Virtual Machines. Updated Disable Unused Display Features to show that you need to power off the virtual machine. Updated multiple topics in Securing Virtual Machines with Virtual Trusted Platform Module. Updated General Networking Security Recommendations with more information on the Spanning Tree Protocol (STP). Updated Adopting Network Isolation Practices with information about isolating vSAN traffic. Updated multiple topics in Understanding vSphere Hardening and Compliance.
13 AUG 2020	At VMware, we value inclusion. To foster this principle within our customer, partner, and internal community, we are replacing some of the terminology in our content. We have updated this guide to remove instances of non-inclusive language.
18 JUN 2020	Updated Required Privileges for Common Tasks to show required privileges for adding a single host to a data center and adding multiple hosts to cluster. Updated Replacing ESXi SSL Certificates and Keys with a link to the VMware knowledge base article at https://kb.vmware.com/s/article/56441 (Configuring Custom Certificates on ESXi hosts to authenticate vSAN hosts). Added port 15080 (Analytics service internal port) to Additional vCenter Server TCP and UDP Ports. Minor update to Remove Virtual Trusted Platform Module from a Virtual Machine.
28 APR 2020	Updated Replacing ESXi SSL Certificates and Keys to refer to the correct information about using custom certificates. Minor update to Prevent a Virtual Machine User or Process from Disconnecting Devices. Updated required privileges for moving hosts into a cluster in Required Privileges for Common Tasks. Added information about VMware Remote Console version 11.0 to Connecting to the Virtual Machine Console Through a Firewall. Removed the cross reference to "Enable or Disable a Service" from Enable vSphere Authentication Proxy, as it does not apply to vCenter Server. Minor update to Use the Direct Console User Interface to Enable Access to the ESXi Shell. Updated videos in Add Allowed IP Addresses for an ESXi Host and ESXi Firewall Configuration to show the vSphere Client. Added a reference to the vSphere Networking documentation about configuring virtual machine adapters for promiscuous mode in Promiscuous Mode Operation. ESXi Certificate Default Settings now shows the correct parameter for "Number of days the certificate is valid" (vpxd.certmgmt.certs.daysValid).
23 DEC 2019	Corrected the information about Port 80 and Port 9000 to show that they are outgoing firewall connections in Incoming and Outgoing Firewall Ports for ESXi Hosts. Corrected a link in About DISA STIGs.
14 NOV 2019	Added information about vSphere support for the Federal Information Processing Standard 140-2 in About vSphere Security. Added log filename and location for Quick Boot to ESXi Log File Locations. Corrected the information about Port 9080 to show that it is an incoming firewall connection in Incoming and Outgoing Firewall Ports for ESXi Hosts.
27 AUG 2019	Corrected steps in Synchronize ESXi Clocks with a Network Time Server. Made minor update to Virtual Machine Service Configuration Privileges.
10 JUL 2019	Updated Virtualization-based Security Best Practices, Enable Virtualization-based Security on a Virtual Machine, and Enable Virtualization-based Security on an Existing Virtual Machine, to reflect that virtualization-based security (VBS) is now supported on Microsoft Server 2019. Made minor updates to Virtual Machine Encryption Interoperability and Encrypted vSphere vMotion.
11 APR 2019	Initial release.