Details
Create a list of highly trusted users that would be able to override lockdown mode and
access the DCUI in the event a host became isolated.
*Rationale*
Lockdown disables direct host access requiring admins manage hosts from vCenter.
However, if a host becomes isolated from vCenter the admin would become locked out and
would be unable to manage the host. To avoid potentially becoming locked out of an ESXi
hosts that is running in locked down mode set the DCUI.Access to a list of highly trusted
users that are allowed to override the lockdown mode and access the DCUI.
Solution
To implement the recommended configuration state, run the following ESXi shell
command-vim-cmd hostsvc/advopt/update DCUI.Access string [USERS]
Default Value-The prescribed state is not the default state.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system VMware.