Mastering PowerCLI

Security Hardening Script

Although we discussed it in Chapter 8, Managing vSphere Security, SRM, vCloud Air and vROps let's revisit the security checking in vSphere environment. I am going to show a script here that will perform a security audit of the entire vSphere environment. This is the first version of the script and it only checks for the security parameters; it does not set the security parameters. In future, I will create another script that will set the respective parameters as well to make the environment secure. So you will have two scripts, one to check the environment and another to patch the environment as per the VMware security best practices. For these settings, I have used the security guidelines by VMware vSphere_6_0_Hardening_Guide_GA_15_Jun_2015.xls ...