Trying to Enable TLS1.0 Versions on ESXi Host 6.7

Hey all,


Trying to Enable TLS1.0 Versions on ESXi Host 6.7 which is disable but default now.


Looked at this link Enable or Disable TLS Versions on ESXi Hosts Which looked easy enough but…


ssh on to host ./reconfigureEsx: not found


VMware ESXi 6.7.0 build-10302608 HPE image


Any help would be great thanks.

 

https://www.globalsign.com/en/blog/disable-tls-10-and-all-ssl-versions/

 

Yeah I was going to say, you'd want to have a really good reason, and for it to be very non-internet facing...

 

If your hypervisor host or vcenter is web facing, may God have fucking mercy on your soul.

 

Fair point.

 

https://www.reddit.com/r/vmware/com...ions_on_esxi_host_67/?st=JS5QNIH2&sh=67d877ff


Sounds like it worked

 

If that indeed is the OP.

1. Move to VCSA - yesterday.
2. Find a piece of backup software written this millennium.

 

Yeah that was me on Reddit, solved. But yes tell me about it they are meant to update the software soon......

No it is not facing the Internets all on the LAN and once i have completed the migration ill be disable TLS 1.0

For anyone that is having the same issues with storage craft.


So I run up a windows server 2016 with vcenter 6.7 on the host.

First problem I run in to was I had to uninstall MS V C++ 2017 so vcenter could install the 2015 version.

Second problem was I have to use a full version of vsphere key on the host, I couldn't use free one.
But after that. -
Just nav to the C:\Program Files\VMware\vCenter Server\TlsReconfigurator\EsxTlsReconfigurator

Run an elevated cmd and run "reconfigureEsx ESXiHost -h 198.51.100.2 -u root -p TLS1.0 TLSv1.1 TLSv1.2 "

Reboot the host

Then connect Image manager for a HSR.

 

does shadowprotect actually leverage vmware backup api's for agentless backups now?

Wow. I mean they supported ReFS about 7 years after it was announced as the reference architecture for exchange.

I find it fucking hilarious that they require TLS 1.0...

https://support.storagecraft.com/s/...d-ESXi-6-7-By-Enabling-TLS-1-2?language=en_US

omfg.

Find another product....

 

Something something legacy LOB too afraid to switch vendors something.