Security Hardening Guide

[gujarnilesh]

Hi,

I am trying to cover all the checks specifed in vSphere 4.0 Security Hardening Guide, via a automated script to call API.

I am finding hard to refer to API for checks mentioned in the Guide. So is there a Check's to API ready references avalible by vmware.

here is what i want to do few examples.

CODE TASK API CALL

VMX01 Prevent Virtual Disk Shrinking

VMX02 "Prevent others users from spying on Administrator remote consoles"

VMX03 Disable Copy/Paste to Remote Console

VMX10 Ensure Unauthorized Devices are Not Connected

VMX11 "Prevent Unauthorized Removal, Connection and Modification of Devices"

Nilesh

Can someone point me to a table that can achive these check via API calls.

[lamw]

Take a look at this script -

You can view the source to see which vSphere API calls are being used. Majority of the VirtualMachine checks is just verifying that certain params are defined in the .vmx configuration file and set true/false or a specific value.

=========================================================================

William Lam

VMware vExpert 2009

VMware ESX/ESXi scripts and resources at:

Twitter: @lamw

VMware Code Central - Scripts/Sample code for Developers and Administrators

VMware Developer Community

If you find this information useful, please award points for "correct" or "helpful".