Although we discussed it in Chapter 8, Managing vSphere Security, SRM, vCloud Air and vROps let's revisit the security checking in vSphere environment. I am going to show a script here that will perform a security audit of the entire vSphere environment. This is the first version of the script and it only checks for the security parameters; it does not set the security parameters. In future, I will create another script that will set the respective parameters as well to make the environment secure. So you will have two scripts, one to check the environment and another to patch the environment as per the VMware security best practices. For these settings, I have used the security guidelines by VMware vSphere_6_0_Hardening_Guide_GA_15_Jun_2015.xls which can be found easily via Google.
So, I am not going to explain the security checking portion, but we're going to discuss the structure of the script and what each portion does. Remember this is a first cut of the script...
