Disable lockdown mode to allow configuration changes from direct connections to the ESXi host. Leaving lockdown mode enabled results in a more secure environment.

You can disable lockdown mode as follows:
From the Graphical User Interface
Users can disable both normal lockdown mode and strict lockdown mode from the vSphere Client.
From the Direct Console User Interface
Users who can access the Direct Console User Interface on the ESXi host can disable normal lockdown mode. In strict lockdown mode, the Direct Console Interface service is stopped.

Procedure

  1. Browse to a host in the vSphere Client inventory.
  2. Click Configure.
  3. Under System, select Security Profile.
  4. In the Lockdown Mode panel, click Edit.
  5. Click Lockdown Mode and select Disabled to disable lockdown mode.
  6. Click OK.

Results

The system exits lockdown mode, vCenter Server displays an alarm, and an entry is added to the audit log.