《vSphere41]1新功能-技术培训60分钟版本.pptVIP

默认情况下，当启用TSM时，该功能会在10分钟后自动关闭。 这个时间可以配置，超时也可以禁用。 当TSM超时后，正在运行的session不受影响。TSM中执行的所有命令，都会由hostd记录日志发送到syslog，提供未来审计需要 By default, after you enable TSM (both local and remote), they will automatically become disabled after 10 minutes. This time is configurable, and the timeout can also be disabled entirely. When TSM times out, running sessions are not terminated, allowing you to continue a debugging session. All commands issued in TSM are logged by hostd and sent to syslog, allowing for an incontrovertible audit trail. * TSM is recommended to be used for Support, troubleshooting, and break-fix Scripted deployment preinstall, postinstall, and first boot scripts Discouraged uses are Any other scripts Running commands/scripts periodically (cron jobs) Leaving open for routine access or permanent SSH connection * AD integration provides authentication for all local services, which include vSphere Client Other access based on vSphere API DCUI Tech Support Mode (local and remote) It has a nominal Active Directory groups functionality: Members of “ESX Admins” AD group have Administrative privilege, i.e. the local “Administrator” role Administrative privilege includes: Full Administrative role in vSphere Client and vSphere API clients DCUI access Tech Support Mode access (local and remote) Thus, non-root users can be authorized to access DCUI and TSM. * 现在有一个功能来完全锁定一个主机。ESXi4.1的锁定模式，强制所有的远程访问都通过vCenter进行。唯一的本地访问root用户通过DCUI-例如，在vCenter宕机后，关闭锁定模式。在vCenter中有一个选项，来禁用DCUI，在这样的情况下，只有vCenter能访问。如果vCenter宕机，唯一的办法就是重新安装。 当然，在需要的时候，锁定模式可以禁用，如果需要通过TSM进行管理的话。 There is now an ability to totally lock down a host. Lockdown mode in ESXi 4.1 forces all remote access to go through vCenter. The only local access is for root to access the DCUI – this could be used, for example, to turn off lockdown mode in case vCenter is down. However, there is an option to disable DCUI in vCenter. In this case, with Lockdown mode turned on, there is no possible way to manage the host directly – eve