Configure vSphere Scanning

Note: You need administrator permissions to complete the following procedures.

You can configure a scan to scan the following virtual environments:

  • ESXi/vSphere that vCenter manages

  • ESXi/vSphere that vCenter does not manage

  • Virtual machines

Scenario 1: Scanning ESXi/vSphere Not Managed by vCenter

To configure an ESXi/vSphere scan that vCenter does not manage:

  1. Create a scan.

  2. In the Basic scan settings, in the Targets section, type the IP address or addresses of the ESXi host or hosts.

  3. Click the Credentials tab.

    The Credentials options appear.

  4. From the Categories drop-down, select Miscellaneous.

    A list of miscellaneous credential types appears.

  5. Click VMware ESX SOAP API.

  6. In the Username box, type the username associated with the local ESXi account.

  7. In the Password box, type the password associated with the local ESXi account.

  8. If your vCenter host includes an SSL certificate (not a self-signed certificate), deselect the Do not verify SSL Certificate check box. Otherwise, select the check box.

  9. Click Save.

Scenario 2: Scanning vCenter-Managed ESXI/vSpheres

To configure an ESXi/vSphere scan managed by vCenter:

  1. Create a scan.

  2. In the Basic scan settings, in the Targets section, type the IP addresses of:

    • the vCenter host.

    • the ESXi host or hosts.

  3. Click the Credentials tab.

    The Credentials options appear.

  4. From the Categories drop-down, select Miscellaneous.

    A list of miscellaneous credential types appears.

  5. Click VMware vCenter SOAP API.

  6. In the vCenter Host box, type the IP address of the vCenter host.

  7. In the vCenter Port box, type the port for the vCenter host. By default, this value is 443.

  8. In the Username box, type the username associated with the local ESXi account.

  9. In the Password box, type the password associated with the local ESXi account.

  10. If the vCenter host is SSL enabled, enable the HTTPS toggle.

  11. If your vCenter host includes an SSL certificate (not a self-signed certificate), select the Verify SSL Certificate check box. Otherwise, deselect the check box.

  12. Click Save.

Scenario 3: Scanning Virtual Machines

You can scan virtual machines just like any other host on the network. Be sure to include the IP address or addresses of your virtual machine in your scan targets. For more information, see Create a Scan.