ESXi Shell Access with the Direct Console
An ESXi system includes a direct console (also called DCUI) that allows you to start and stop the system and to perform a limited set of maintenance and troubleshooting tasks. The direct console includes the ESXi Shell, which is disabled by default. You can enable the ESXi Shell in the direct console or by using the vSphere Client. You can enable local shell access or remote shell access:
The ESXi Shell includes all ESXCLI commands, a set of deprecated esxcfg- commands, and a set of commands for troubleshooting and remediation.
VMware recommends you install the vCLI package on a supported Windows or Linux system or deploy the vMA virtual appliance, and run commands against your ESXi hosts. Run commands directly in the ESXi Shell in troubleshooting situations only.
Enabling Local ESXi Shell Access
You can enable the ESXi Shell from the direct console or from the vSphere Client.
If you have access to the direct console, you can enable the ESXi Shell from there.
To enable the ESXi Shell in the direct console
1
2
Scroll to Troubleshooting Options and press Enter.
3
Choose Enable ESXi Shell and press Enter.
On the left, Enable ESXi Shell changes to Disable ESXi Shell. On the right, ESXi Shell is Disabled changes to ESXi Shell is Enabled.
4
If you do not have access to the direct console, you can enable the ESXi Shell from the vSphere Client.
To enable the local or remote ESXi Shell from the vSphere Client
1
Select the host, click the Configuration tab, and click Security Profile in the Software panel.
2
3
Select ESXi Shell and click Options.
4
To change the Startup policy across reboots, click Start and stop with host and reboot the host.
5
Click OK.
After you have enabled the ESXi Shell, you can use it from that monitor or through a serial port.
The ESXi Shell timeout setting specifies how long, in minutes, you can leave an unused session open. By default, the timeout for the ESXi Shell is 0, which means the session remains open even if it is unused. If you change the timeout, for example, to 30 minutes, you have to log in again after the timeout period has elapsed.
You can modify the timeout from the Direct Console or from the vSphere Client.
To modify the ESXi Shell Timeout
a
Select Modify ESXi Shell timeout and press Enter.
b
a
b
c
Locate UserVars.ESXiShellTimeOut and enter the timeout value in minutes.
d
Using the Local ESXi Shell
After you enable the ESXi Shell in the direct console, you can use it from main direct console screen or remotely through a serial port.
To use the local ESXi Shell
1
2
When you type the password, characters are not displayed on the console.
3
4
To log out, type exit in the shell.
5
See vSphere Installation and Setup documentation for information on serial port setup.