To change this behavior for operating as a local user
1
From the Windows Start menu, navigate to Setting > Control Panel > Administrative Tools > Local
Security Policy > Security Settings > Local Policies > Security Options.
2
Locate Network access: sharing and security model for local accounts policy from the list.
3
Right‐click Network access: sharing and security model for local accounts and click Properties.
Network access: sharing and security model for local accounts Properties window appears.
4
Select Classic – local users authenticate as themselves from the drop‐down menu and click Apply.
For security reasons, it is recommended to allow the Telnet server to use only NTLM authentication, and to
disable password‐based authentication.
N
You must have local administrator permissions to use NTLM.
OTE
To view the current Telnet server authentication settings
1
From the Windows Start menu, select Run and type cmd. The Command Prompt appears.
2
Type tlntadmn to view the local host settings.
3
Type
tlntadmn config sec=+ntlm
4
Type
tlntadmn config sec=-passwd
VI-SDK
VI‐SDK is a VMware proprietary API used by third‐party applications to query VMware's model, control the
virtual infrastructure's behavior, and receive notifications on changes in the virtual infrastructure
environment. VI‐SDK also allows you to discover, configure, and monitor all aspects of VMware ESX servers
and Virtual Center.
VI‐SDK on Virtual Center accesses information about the entire Virtual Infrastructure deployment, whereas
VI‐SDK on an ESX only access information about that ESX.
VI‐SDK is implemented by standard web services with a published WSDL and runs over HTTPS by default.
A VI‐SDK URL is the URL of the VI‐SDK server on the target host. This URL is used on all hosts in the policies
scope so it does not contain the server part of the URL. For example, if the URL is /sdk:925 and discovery is
done against host 1.2.3.4, the actual URL used to connect to the host is https://1.2.3.4/sdk:925. By default, the
URL field is initialized to /sdk, which is the default VI‐SDK URL.
N
The VI‐SDK reports the IP address of a virtual machine only if VM‐tools is running on the virtual
OTE
machine's guest OS.
Detail Discovery with VI-SDK
ADM uses VI‐SDK to access a Virtual Center to obtain information about ESX Server and the virtual machines
that are installed on them.
VI-SDK Deployment Recommendations
For VI‐SDK to work properly, the Web Access Option must be enabled in the Virtual Center. VMware
recommends that you assign read‐only permission to the user account that is created for Detail Discovery.
Firewall Settings
VI‐SDK queries are performed over HTTPS. If a firewall exists between the ADM appliance and the monitored
network, TCP port 443 must be open for connections that are initiated by the ADM appliance.
VMware, Inc.
to turn on NTLM authentication.
to turn off password‐based authentication.
Chapter 5 Discovery
45