
Section 4 Installation and Configuration Setting ESX(i) time
3BSE056141-510 F 43
4. Start the vSphere Client application by selecting the following:
Start > Programs > VMware > VMware vSphere Client
5. Enter the VMware ESX(i) server IP address.
6. Enter root as user name and enter the password for the VMware ESX server
that was chosen during installation.
Self-signed certificates are vulnerable to man-in-the-middle attacks and clients
receive a warning about them. Refer to the VMware vSphere 4.1 Security Hardening
Guide
(www.vmware.com/files/pdf/techpaper/VMware_vSphere_HardeningGuide_May1
0_EN.pdf) instruction for more information. Therefore, install a CA-signed
certificate on the VMware ESX server. Refer to the ESX Server 3 Configuration
Guide (www.vmware.com/pdf/vsphere4/r41/vsp_41_esx_server_config.pdf)
instruction (Authentication and User Management section) for more information.
Setting ESX(i) time
When a virtual machine is started, it initially takes the time from the ESX(i) server.
If there is a time synchronization inside the guest, the time will then be updated by
it's time source. If the ESX(i) server is not synchronized to a reliable time server,
this will create a step change in the time in the guest node which could interfere with
the applications running inside the guest. It is important that the VMware tools is
not synchronizing time with the ESX(i) server. This is the default setting and should
not be changed.
The ESX(i) server internal clock must be synchronized to a reliable NTP server.
This NTP server must have the same time as the 800xA system. Configuring of the
NTP client in the ESX(i) server is performed through the vSphere Client.
When accessing the VMware ESX(i) server via the vSphere Client software, a
warning about the VMware ESX(i) server's security certificate is displayed. The
vSphere Client communicates with the VMware ESX(i) server via an SSL
secured network connection using an SSL certificate which was automatically
created on the VMware ESX(i) server during the VMware ESX(i) installation
process. The self-signed default certificate is not recognized as a trusted
certificate because it is not signed by a commercial Certification Authority (CA).
Comentarios a estos manuales