Scan Configuration — VMware vCenter API

Complete the following steps to configure Tenable Security Center with the VMware vCenter API integration.

  1. Log into your Tenable Security Center user interface.

  2. In the left navigation pane, click Scanning. A menu appears.

  3. Click Credentials.

    The Credentials page appears.

  4. Click +Add at the top of the screen.

    The Add Credential page appears.

  5. In the Miscellaneous section, click VMware vCenter API.

    The Add Credential page for that credential type appears.

  6. In the Name box, type a name for the credential.

  7. (Optional) Add a description.

  8. (Optional) Add a tag to the credential.

    For more information, see Scan Configuration — VMware vCenter API in the Tenable Security Center documentation.

  9. Configure each of the following options for the selected credential.

    Option Description Required
    vCenter API Authentication Method Choose from the available authentication methods:

    • Password (manual entry through username and password)

    • PAM Integration (use a specific PAM to gather vCenter API authentication credentials from the available list)

    		 Yes
    vCenter Host The IP address or hostname of the vCenter instance. Yes
    vCenter Port The TCP port that vCenter listens on for communications from Tenable. By default, Tenable uses 443. Yes
    Username The username for the vCenter server account that Tenable uses to perform checks on the target system. Yes (if Username and Password authentication is selected)
    Password The password for the vCenter server user. Yes (if Username and Password authentication is selected)
    HTTPS When enabled, Tenable connects using secure communication (HTTPS). When disabled, Tenable connects using standard HTTP. Yes
    Verify SSL Certificate When enabled, Tenable verifies that the SSL certificate on the server is signed by a trusted CA. If you are using a self-signed certificate, disable this setting. No
    Use Auto Discovery Option that toggles on access to configure host and virtual machine auto-discovery. No
    Auto Discover Managed VMware ESXi Hosts Adds any discovered VMware ESXi hypervisor hosts to the scan targets you include in your scan. No
    Auto Discover Managed VMware ESXi Virtual Machines Adds any discovered VMware ESXi hypervisor virtual machines to the scan targets you include in your scan. No

  10. Click Submit to save your credential.