VMware Virtualization Platform (vSphere)
What is VMware Virtualization Platform (vSphere)?
VMware vSphere is a cloud virtualization platform that includes a suite of components that deploy and manage VMware cloud-based resources. The commonly used component is vCenter Server. Frequently a vCenter Server is run as a VCSA (vCenter Server Appliance) to provide a centralized management application for all ESXi hosts, clusters, resource pools, datastores, vms and networks.
Why Should You Use the Connector for VMware Virtualization Platform?
The VMWare Virtualization Platform connector provides visibility into virtual manchines and cloud assets. You can use this visibility to:
ensure assets are managed per your security policies
find vulnerabilities quickly and remediate
How Does This Connector Work?
Lucidum executes read-only requests to the Mware REST API and ingests only meta-data about VMWare assets. Lucidum does not retrieve any data stored on your assets.
Creating a User in VMware
Before configuring the VMware Virtualization Platform connector in Lucidum, you must first create a read-only user account. Lucidum will use this user account to access the VMware Virtualization Platform.
To create a custom user role that grants the read-only access Lucidum requires, perform the following steps:
Open your vCenter client at
https://<vcenterservername>/uiSelect Menu > Administration from the drop-down.
In the menu at the left of the page, click Access Control > Roles. The Roles page appears:
Click the plus sign (+) to add a new Role. The New Role page appears:
In the pane on the left, select Storage views and select the View checkbox. Click Next.
In the next screen, enter a name for the role in the Role name field. Optionally, you can enter a description in the Description field.
Click the Finish button.
To assign the custom role to a user account, perform the following steps:
In the vCenter client, select your vCenter server containing the hosts and clusters you are monitoring and click the Permissions tab.
Click the plus sign (+) to add permissions.
Enter values in the following fields:
User. Select your domain and add the user in the field below.
Role. Select the role that you just created.
Propagate to children. Make sure to select the checkbox.
Role Permissions. Make sure to select “Modify permission“.
Configuring the Connector in Lucidum
Field | Description | Example |
|---|---|---|
Host | The hostname of a specific ESX server or of the vSphere server. | upg-dhcp-1570-vm-059.lucidum. |
User Name | The user name for a user account that has permissions to fetch assets. The user name format is user@domain. | lucidum_api |
Password | The password for a user account that has the permissions to fetch assets. | ******************* |
Port | VMWare server port. Default value is 443. | 443 |
Proxy | Select a proxy server. To configure a proxy server, see Configuring a Proxy Server. | lucidum-aws-enterprise-proxy |
Source Documentation
Creating a User in VMWare
Required Permissions
Storage views. View
API Documentation
https://developer.vmware.com/apis/vsphere-automation/latest/vcenter/authentication/