When you set up CHAP name and secret at the iSCSI/iSER adapter level, all targets receive the same parameters from the adapter. By default, all discovery addresses or static targets inherit CHAP parameters that you set up at the adapter level.

The CHAP name cannot exceed 511 alphanumeric characters and the CHAP secret cannot exceed 255 alphanumeric characters. Some adapters, for example the QLogic adapter, might have lower limits, 255 for the CHAP name and 100 for the CHAP secret.

Prerequisites

  • Before setting up CHAP parameters for software or dependent hardware iSCSI, determine whether to configure unidirectional or bidirectional CHAP. Independent hardware iSCSI adapters do not support bidirectional CHAP.
  • Verify CHAP parameters configured on the storage side. Parameters that you configure must match the ones on the storage side.
  • Required privilege: Host.Configuration.Storage Partition Configuration

Procedure

  1. Navigate to the iSCSI or iSER storage adapter.
    1. In the vSphere Client, navigate to the ESXi host.
    2. Click the Configure tab.
    3. Under Storage, click Storage Adapters, and select the adapter (vmhba#) to configure.
  2. Click the Properties tab and click Edit in the Authentication panel.
  3. Specify authentication method.
    • None
    • Use unidirectional CHAP if required by target
    • Use unidirectional CHAP unless prohibited by target
    • Use unidirectional CHAP
    • Use bidirectional CHAP. To configure bidirectional CHAP, you must select this option.
  4. Specify the outgoing CHAP name.

    Make sure that the name you specify matches the name configured on the storage side.

    • To set the CHAP name to the iSCSI adapter name, select Use initiator name.
    • To set the CHAP name to anything other than the iSCSI initiator name, deselect Use initiator name and enter a name in the Name text box.
  5. Enter an outgoing CHAP secret to be used as part of authentication. Use the same secret that you enter on the storage side.
  6. If configuring bidirectional CHAP, specify incoming CHAP credentials.
    Make sure to use different secrets for the outgoing and incoming CHAP.
  7. Click OK.
  8. Rescan the iSCSI adapter.

Results

If you change the CHAP parameters, they are used for new iSCSI sessions. For existing sessions, new settings are not used until you log out and log in again.

What to do next

For other configuration steps you can perform for the iSCSI or iSER storage adapters, see the following topics: