What is VMware Virtualization Platform (vSphere)? #
VMware Virtualization Platform (also called vSphere) allows businesses to virtualize physical servers to consolidate resources and enhance availability. The two core components of vSphere are ESXi and vCenter Server. ESXi is the virtualization platform where you create and run virtual machines and virtual appliances. vCenter Server provides a centralized management application for all ESXi hosts, clusters, resource pools, datastores, VMs, and networks.
Why Should You Use the Connector for VMware Virtualization Platform? #
The VMWare Virtualization Platform connector provides visibility into virtual machines and cloud assets. You can use this visibility to:
-
ensure assets are managed per your security policies
-
find vulnerabilities quickly and remediate
How Does This Connector Work? #
Lucidum executes read-only requests to the VMware REST API and ingests only meta-data about VMWare assets. Lucidum does not retrieve any data stored on your assets.
Configuring the Connector in Lucidum #
|
Field |
Description |
Example |
|---|---|---|
|
Host |
The hostname of a specific ESX server or of the vSphere server. |
upg-dhcp-1570-vm-059.lucidum. |
|
User Name |
The user name for a user account that has permissions to fetch assets. The user name format is user@domain. |
lucidum_api |
|
Password |
The password for a user account that has the permissions to fetch assets. |
******************* |
|
Port |
VMWare server port. Default value is 443. |
443 |
|
Proxy |
Select a proxy server. To configure a proxy server, see Configuring a Proxy Server. |
lucidum-aws-enterprise-proxy |
Source Documentation #
Creating a User in VMWare #
Before configuring the VMware Virtualization Platform connector in Lucidum, you must first create a read-only user account. Lucidum will use this user account to access the VMware Virtualization Platform.
To create a custom user role that grants the read-only access Lucidum requires, perform the following steps:
-
Open your vCenter client atÂ
https://<vcenterservername>/ui -
Select Menu >Â Administration from the drop-down.
-
In the menu at the left of the page, click Access Control > Roles. The Roles page appears:
-
Click the plus sign (+) to add a new Role. The New Role page appears:
-
In the pane on the left, select Storage views and select the View checkbox. Click Next.
-
In the next screen, enter a name for the role in the Role name field. Optionally, you can enter a description in the Description field.
-
Click the Finish button.
To assign the custom role to a user account, perform the following steps:
-
In the vCenter client, select your vCenter server containing the hosts and clusters you are monitoring and click the Permissions tab.
-
Click the plus sign (+) to add permissions.
-
Enter values in the following fields:
-
User. Select your domain and add the user in the field below.
-
Role. Select the role that you just created.
-
Propagate to children. Make sure to select the checkbox.
-
Role Permissions. Make sure to select “Modify permission“.
Required Permissions #
Storage views > View
API Documentation #
https://developer.vmware.com/apis/vsphere-automation/latest/vcenter/authentication/
