Updated Information

This vSphere Security document is updated with each release of the product or when necessary.

This table provides the update history of the vSphere Security documentation.

Revision	Description
28 SEP 2022	Minor update to Renew or Refresh ESXi Certificates.
14 JUN 2022	Fixed the steps to add NTP servers in Add or Replace NTP Servers in the vCenter Server Appliance Configuration.
28 APR 2022	Minor update to Storage Views Privileges.
21 MAR 2022	Fixed a typo in Upload an SSH Key Using a vifs Command. Minor update to Host Upgrades and Certificates. Fixed incorrect commands in step 4 in Use Custom Certificates with Auto Deploy. Minor update to Restore ESXi Certificate and Key Files. Removed the tabular information from Incoming and Outgoing Firewall Ports for ESXi Hosts, Required Ports for vCenter Server and Platform Services Controller, and Ports That Support Disabling TLS Versions. Going forward, see the VMware Ports and Protocols Tool™ at https://ports.vmware.com/. As part of transitioning all the ports information to the Ports and Protocols Tool, the "Additional vCenter Server TCP and UDP Ports" topic has also been removed. Added information to Virtual Machine Encryption Interoperability. Minor update to Resolve ESXi Host Encryption Mode Issues. Added required privileges to Create a Virtual Machine with a Virtual Trusted Platform Module, Enable Virtual Trusted Platform Module for an Existing Virtual Machine, and Remove Virtual Trusted Platform Module from a Virtual Machine. For a standalone ESXi host, clarified that you must run the reconfigureEsx ESXiHost command from a vCenter Server system in Enable or Disable TLS Versions on ESXi Hosts.
22 OCT 2021	Updated Replace a Default Certificate and Key with the vifs Command and Replace a Default Certificate Using HTTPS PUT with an alternative to restart the management agents after replacing the certificate. Minor update to Use vSphere Authentication Proxy to Add a Host to a Domain. Corrected a typo in Change the Encryption Policy for Virtual Disks. Corrected a command in Ensure Proper SNMP Configuration. Minor update to Revert TLS Configuration Changes. Minor update to About DISA STIGs. Minor update to Single Sign-On Audit Events.
31 MAR 2021	Minor update to Security Best Practices and Resources. Updated multiple topics in vSphere Permissions and User Management Tasks. Minor update to Securing ESXi Hosts. Updated ESXi Passwords and Account Lockout to include more information about password options. Minor update to SSH Security. Minor update to ESXi Networking Security Recommendations. Minor update to View Certificate Expiration Information for Multiple ESXi Hosts. Updated Renew or Refresh ESXi Certificates to include verification steps. Updated Requirements for ESXi Certificate Signing Requests with more information about generating CSRs. Updated Manage the Acceptance Levels of Hosts and VIBs to correct the syntax of the CLI command and to clarify where to go for support for VMwareAccepted and PartnerSupported VIBs. Updated Create a Timeout for Idle ESXi Shell Sessions to show that a value of zero (0) disables the idle time. Minor update to Use the Direct Console User Interface to Enable Access to the ESXi Shell. Minor update to Securing ESXi Hosts with Trusted Platform Module. Updated Troubleshoot ESXi Host Attestation Problems to add more information about checking the vpxd.log file. Minor update to Securing Virtual Machines. Minor update to Minimize Use of the Virtual Machine Console. Minor update to Prevent Virtual Machines from Taking Over Resources. Minor update to Disable Unnecessary Functions Inside Virtual Machines. Updated Disable Unused Display Features to show that you need to power off the virtual machine. Updated multiple topics in Securing Virtual Machines with Virtual Trusted Platform Module. Updated General Networking Security Recommendations with more information on the Spanning Tree Protocol (STP). Updated Adopting Network Isolation Practices with information about isolating vSAN traffic. Updated multiple topics in Understanding vSphere Hardening and Compliance.
13 AUG 2020	At VMware, we value inclusion. To foster this principle within our customer, partner, and internal community, we are replacing some of the terminology in our content. We have updated this guide to remove instances of non-inclusive language.
18 JUN 2020	Updated Required Privileges for Common Tasks to show required privileges for adding a single host to a data center and adding multiple hosts to cluster. Updated Replacing ESXi SSL Certificates and Keys with a link to the VMware knowledge base article at https://kb.vmware.com/s/article/56441 (Configuring Custom Certificates on ESXi hosts to authenticate vSAN hosts). Added port 15080 (Analytics service internal port) to ports information. Minor update to Remove Virtual Trusted Platform Module from a Virtual Machine.
28 APR 2020	Updated Replacing ESXi SSL Certificates and Keys to refer to the correct information about using custom certificates. Minor update to Prevent a Virtual Machine User or Process from Disconnecting Devices. Updated required privileges for moving hosts into a cluster in Required Privileges for Common Tasks. Added information about VMware Remote Console version 11.0 to Connecting to the Virtual Machine Console Through a Firewall. Removed the cross reference to "Enable or Disable a Service" from Enable vSphere Authentication Proxy, as it does not apply to vCenter Server. Minor update to Use the Direct Console User Interface to Enable Access to the ESXi Shell. Updated videos in Add Allowed IP Addresses for an ESXi Host and ESXi Firewall Configuration to show the vSphere Client. Added a reference to the vSphere Networking documentation about configuring virtual machine adapters for promiscuous mode in Promiscuous Mode Operation. ESXi Certificate Default Settings now shows the correct parameter for "Number of days the certificate is valid" (vpxd.certmgmt.certs.daysValid).
23 DEC 2019	Corrected the information about Port 80 and Port 9000 to show that they are outgoing firewall connections in Incoming and Outgoing Firewall Ports for ESXi Hosts. Corrected a link in About DISA STIGs.
14 NOV 2019	Added information about vSphere support for the Federal Information Processing Standard 140-2 in About vSphere Security. Added log filename and location for Quick Boot to ESXi Log File Locations. Corrected the information about Port 9080 to show that it is an incoming firewall connection in Incoming and Outgoing Firewall Ports for ESXi Hosts.
27 AUG 2019	Corrected steps in Synchronize ESXi Clocks with a Network Time Server. Made minor update to Virtual Machine Service Configuration Privileges.
10 JUL 2019	Updated Virtualization-based Security Best Practices, Enable Virtualization-based Security on a Virtual Machine, and Enable Virtualization-based Security on an Existing Virtual Machine, to reflect that virtualization-based security (VBS) is now supported on Microsoft Server 2019. Made minor updates to Virtual Machine Encryption Interoperability and Encrypted vSphere vMotion.
11 APR 2019	Initial release.