vCLI Host Management
Commands and Lockdown Mode
For additional
security, an administrator can place one or more hosts managed by a
system in lockdown mode. Lockdown mode affects login privileges for the
host.
See the
vSphere Security
document in the vSphere Documentation Center for a detailed discussion of
normal lockdown mode and strict lockdown mode, and of how to enable and disable
them.
To make changes to
systems in
lockdown mode, you must go through a
system that manages the
system as
the user
vpxuser
and include both the
--server
and
--vihost
parameters.
esxcli --server MyVC --vihost MyESXi storage filesystem list
The command prompts for the
system user name and password.
The following commands cannot
run against
systems and are therefore not available in lockdown mode.
- vifs
- vicfg-user
- vicfg-cfgbackup
- vihostupdate
- vmkfstools
If you have problems running a
command on an
host
directly, without specifying a
target, check whether lockdown mode is enabled on that host.