Securing Virtual Machines
As with vCenter Server, any discussion of how to secure a VM is really a discussion of how to secure the guest OS within that VM. Entire books have been and are being written about how to secure Windows, Linux, Solaris, and the other guest OSs vSphere supports, so we won't attempt to cover that sort of material here. However, we will provide three recommendations for securing VMs such that, if your datacenter does ever get compromised, the attack vector of your workloads is very limited. Three of these are specific to the vSphere virtualized environment, whereas the other is broader and more general.
First, we want to call your attention to the vSphere encryption policies.
Configuring a Key Management Server for VM and VSAN Encryption
vSphere provides some outstanding data encryption functionality by integrating with an External Key Management Server (KMS) running version 1.1 of the Key Management Interoperability Protocol (KMIP). KMIP is an extensibility...
