vCLI and Lockdown Mode

Lockdown mode can disable all direct root access to
machines.
To make changes to
systems in lockdown mode you must go through a
system that manages the
system. You can use the
or vCLI commands that support the
--vihost
option. The following commands cannot run against
systems and are therefore not available in lockdown mode.
  • vifs
  • vicfg-user
  • vicfg-cfgbackup
  • vihostupdate
  • vmkfstools
  • vicfg-ipsec
If you have problems running a command on an
host directly, without specifying a
target, check whether lockdown mode is enabled on that host. See the
vSphere Security
documentation.