Strict Lockdown Mode has been enabled on an ESXi host. Which action should an administrator perform to allow ESXi Shell or SSH access for users with administrator privileges?

Question

Accepted Answer

B. Add the users to Exception Users and enable the service. VMware's Strict Lockdown Mode blocks all direct host access except for accounts explicitly added to the Exception Users list in the Direct Console User Interface (DCUI) or vCenter. Adding users to Exception Users and then enabling the ESXi Shell or SSH service is the only supported mechanism to allow that access while keeping Strict Lockdown Mode active.

Answer

A. Grant the users the administrator role and enable the service. Assigning the administrator role does not exempt a user from Strict Lockdown Mode restrictions; role assignment and lockdown mode exception lists are independent controls.

Answer

C. No action can be taken, Strict Lockdown Mode prevents direct access. Strict Lockdown Mode does not make direct access completely impossible - the Exception Users list exists precisely to allow controlled individual exceptions.

Answer

D. Add the users to vsphere.local and enable the service. vsphere.local is the SSO domain for vCenter Server identity, not a mechanism for bypassing ESXi host-level Strict Lockdown Mode restrictions.

Strict Lockdown Mode has been enabled on an ESXi host. Which action should an administrator perform to allow ESXi Shell or SSH access for users with administrator privileges?

Question

Options

How the community answered

Why each option

Topics

Community Discussion