Low Hanging Fruit of Virtualization Security

I was invited to CSI 2010 this year to speak on the Low Hanging Fruit of Virtualizaiton Security. This presentation brought to light some simple to implement features that would give you the most security for what I consider very little cost or effort. These 7 items if implemented will improve the overall security of your virtual environment.

Anybody Seen My Memory Stick?

I got a call from a client today that is running a VMware ESXi server as a proof of concept in their SMB environment. The admin that setup the VMware ESXi Server configured the ESXi server to boot and run ESXi from a USB memory stick. Things have been running fine but the company and the administrator that setup the server had a falling out, so to speak, and the administrator left the company and took the USB memory stick with him. The server continues to run fine as ESXi basically runs from memory but, rebooting this host is now not an option since there are no files available for the host to boot from. So what is the best way to recover and get things back to normal? I did a little research and the information that I have found will work will both ESXi 3.x as well as vSphere ESXi.

My Experience with VMUGs

When I first got started in virtualization it was a very new technology and during that time there were not that many resources available to the virtualization administrator and sometimes it would have been nice to be able to see what others were doing and to be able to share my thoughts and ideas with others to make sure I was presenting the best possible solution to my customers. During these early years the VMTN Community Forum was established and these forums were the place to do this collaboration. I found this to be one of the best arenas to ask questions and share ideas. The VMTN Community area quickly took off and in a lot of cases was the quickest way to find an answer, solution to your problem or issue you were trying to resolve.

The Desktop Virtualization Iceberg

Desktop Virtualization is not an easy undertaking. There – I’ve said it. “But,” you may say, “I take a copy of the desktops I have, I run them on servers in the data-centre. Once that’s done, I don’t need to update those desktop devices; I can update the virtualized workspace instead far more quickly. The desktops are running on server hardware so they will be more reliable. Eventually, someone may well offer to host these workspaces on some infrastructure out in The Cloud”.
“Really, how hard can it be?”