Hardening in Vcenter – Inactivity Timeout


Scenario:

If you open a vcenter application and forget to close the application, unauthorized person can able to change or view the configuration in Vcenter. Hence it requires session timeout if the Vcenter is not in use.

Solution:

To configure the session time out in Vcenter, you need to locate the file VpxClient.exe.config. This file is available in the following path

32bit – %PROGRAMFILES%\VMware\Infrastructure\Virtual Infrastructure Client\Launcher

64bit – %PROGRAMFILES(x86)%\VMware\Infrastructure\Virtual Infrastructure  Client\Launcher

Edit the file using text editor like Notepad, Wordpad etc…

Insert and type the text in between as given below.

 

“<!– ignore sertificate validation problems:

    <ignorecert />”

<inactivityTimeout>X</inactivityTimeout>  

 

</cmdlineFallback>

 

Save the file and close. Here X represent the time in minute.

The example screenshot of the inactivity timeout given below.

 

 

Also type the -inactivity timeout X,  by right click the VSphere client icon available in Desktop and select the shortcut option. Go to target, you will see the path of the VPXClient . At the end of the line type the –inactivity timeout X. please see the below diagram.

Advertisements

One Response to Hardening in Vcenter – Inactivity Timeout

  1. Im no professional, but I imagine you just made the best point. You obviously fully understand what youre talking about, and I can really get behind that. Thanks for being so upfront and so honest.

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: