Updated Information

This vSphere Security document is updated with each release of the product or when necessary.

This table provides the update history of the vSphere Security documentation.

Revision	Description
07 MAR 2023	Minor update to Troubleshooting and Recovering the Secure ESXi Configuration. Minor update to Recover the Secure ESXi Configuration.
15 FEB 2023	Minor update to Recover the Secure ESXi Configuration. Minor update to Virtual Machine Encryption Interoperability.
31 JAN 2023	Updated How vSphere Virtual Machine Encryption Protects Your Environment and Prerequisites and Required Privileges for Encryption Tasks to state that ESXi Shell users also have cryptographic operation privileges. Minor update to Enable Virtualization-based Security on a Virtual Machine and Enable Virtualization-based Security on an Existing Virtual Machine.
23 JAN 2023	Minor update to vSphere Native Key Provider Overview. Updated Enable Virtual Trusted Platform Module for an Existing Virtual Machine to state that the Virtual machine.Configuration.Add or remove device privilege is required.
23 DEC 2022	Minor update to Collect a vm-support Package for an ESXi Host That Uses Encryption. Minor update to Enable and Disable Key Persistence on an ESXi Host. Minor update to Remove Virtual Trusted Platform Module from a Virtual Machine.
23 NOV 2022	Minor update to vCenter Server System Roles. Updated Key Persistence Overview and Enable and Disable Key Persistence on an ESXi Host with additional information about vSphere Native Key Provider. Minor update to Secure VLANs.
13 OCT 2022	Minor update to Managing ESXi Audit Records. Fixed typo in Update a vSphere Native Key Provider. Minor updates to Virtualization-based Security Best Practices, Enable Virtualization-based Security on a Virtual Machine, and Enable Virtualization-based Security on an Existing Virtual Machine. Removed references to the vifs command. See the VMware knowledge base article at https://kb.vmware.com/article/78473.
22 AUG 2022	Minor update to Renew or Refresh ESXi Certificates. Minor update to Delete a vSphere Native Key Provider. Fixed the example in Create the Key Provider on the Trust Authority Cluster. Rewrote Disable Host Encryption Mode Using the API to use the vCenter Server Managed Object Browser (MOB). Minor update to multiple VMware vSphere Lifecycle Manager privileges topics.
28 JUL 2022	Minor update to Requirements for ESXi Certificate Signing Requests. Minor update to Virtual Trusted Platform Module Overview. Minor update to MAC Address Changes. Updated multiple topics to note that you should assign privileges that use VMware vSphere Lifecycle Manager APIs that accept URLs only to administrators or trusted users.
12 JUL 2022	Minor update to Change User Validation Settings. Minor update to Renew or Refresh ESXi Certificates. Minor update to Enable Fault Tolerance Encryption. Fixed problem with the formatting of an ESXCLI command in Enable or Disable the execInstalledOnly Enforcement for a Secure ESXi Configuration. Minor update to Disable Unused Display Features. Removed parameters that are now set to TRUE from Disable Unexposed Features. Corrected the steps in Create an Encryption Storage Policy.
15 JUN 2022	Added information about vCenter Server and encrypted communication to Securing vCenter Server Systems and Associated Services. Added information about assigning permissions on vSphere Distributed Switches to Hierarchical Inheritance of Permissions. Minor update to UEFI Secure Boot for ESXi Hosts. Added information about encryption considerations to Virtual Machine Encryption Best Practices. Minor update to vSphere Native Key Provider Overview. Added information about HostCryptoState to Disable Host Encryption Mode Using the API. Added a required privilege, Cryptographic operations.Migrate, to Create a Virtual Machine with a Virtual Trusted Platform Module and Enable Virtual Trusted Platform Module for an Existing Virtual Machine. This privilege enables a virtual machine to be powered on when DRS starts it on another host. Minor update to Connecting to the Virtual Machine Console Through a Firewall. Minor update to Enable or Disable TLS Versions on ESXi Hosts. Added information about setting permissions to Content Library Privileges. Fixed typo in vSphere Tagging Privileges.
29 APR 2022	In Managing ESXi Audit Records, the viewAudit program replaces the auditLogReader program as of vSphere 7.0 Update 3d. Minor updates to Enable or Disable the Secure Boot Enforcement for a Secure ESXi Configuration and Enable or Disable the execInstalledOnly Enforcement for a Secure ESXi Configuration. Minor updates to How vSphere Virtual Machine Encryption Protects Your Environment. Updated information about vSphere Native Key Provider and key persistence in Key Persistence Overview, Back up a vSphere Native Key Provider, and Enable and Disable Key Persistence on an ESXi Host. Minor update to vSphere Native Key Provider Overview. Fixed commands in Update a vSphere Native Key Provider. Minor update to Connecting ESXi Hosts Through Firewalls. Minor update to Storage Views Privileges.
10 MAR 2022	Minor update to Host Upgrades and Certificates. Fixed incorrect commands in step 4 in Use Custom Certificates with Auto Deploy. Updated the prerequisites in Add AMD Secure Encrypted Virtualization-Encrypted State to a Virtual Machine with the vSphere Client, Add AMD Secure Encrypted Virtualization-Encrypted State to a Virtual Machine, Enable AMD Secure Encrypted Virtualization-Encrypted State on an Existing Virtual Machine with the vSphere Client, and Enable AMD Secure Encrypted Virtualization-Encrypted State on an Existing Virtual Machine. Minor update to Virtual Machine Encryption Interoperability. Updated vSphere Native Key Provider Overview to state that the vSphere Native Key Provider does not require a TPM 2.0. In Configure the Trusted Key Provider for Trusted Hosts Using the vSphere Client and Configure the Trusted Key Provider for Trusted Hosts Using the Command Line, clarified that when you add a vSphere Trust Authority key provider, it takes some time for the key provider to become available for use. Added required privileges to Create a Virtual Machine with a Virtual Trusted Platform Module, Enable Virtual Trusted Platform Module for an Existing Virtual Machine, and Remove Virtual Trusted Platform Module from a Virtual Machine.
19 JAN 2022	Minor update to Understanding Authorization in vSphere. Minor update to Restore ESXi Certificate and Key Files. For a standalone ESXi host, clarified that you must run the reconfigureEsx ESXiHost command from a vCenter Server system in Enable or Disable TLS Versions on ESXi Hosts. Updated Considerations When Using FIPS with information about the vCenter Server file-based backup and restore.
21 DEC 2021	Fixed a typo in Upload an SSH Key Using a vifs Command. Minor update to TPM Sealing Policies Overview. Minor update to Enable or Disable the Secure Boot Enforcement for a Secure ESXi Configuration. Minor update to Resolve ESXi Host Encryption Mode Issues. Minor update to Encrypted vSphere vMotion.
07 DEC 2021	Minor update to Comparison of vSphere Key Providers. Added new topic, Import a vSphere Native Key Provider in an Enhanced Linked Mode Configuration. Minor update to vSphere Trust Authority Best Practices, Caveats, and Interoperability. Added new topic, Rekey an Encrypted Virtual Machine Using the vSphere Client. Updated Content Library Privileges with new privileges. Updated vSphere with Tanzu Privileges with new privileges.
03 NOV 2021	Minor update to Securing the Virtual Networking Layer. Minor update to Enable or Disable the execInstalledOnly Enforcement for a Secure ESXi Configuration. Updated View Certificate Expiration Information for Multiple ESXi Hosts, Identify Virtual Trusted Platform Module Enabled Virtual Machines, View Virtual Trusted Platform Module Device Certificates, and Identify VBS-Enabled Virtual Machines to reflect a minor UI change with how to show and hide columns. Updated Manage ESXi Firewall Settings and Add Allowed IP Addresses for an ESXi Host to reflect minor UI changes. Added encryption-related information to Virtual Machine Encryption Interoperability. Updated MAC Address Changes and Forged Transmits to reflect the change in the default for both options from Accept to Reject. Corrected a privilege in Virtual Machine Provisioning Privileges. Minor update to Single Sign-On Audit Events.
05 OCT 2021	Initial release.