Use the following procedure to add an ESXi host as a vMA target for fatspass authentication.

1

Log in to vMA as vi-admin.

2

Add an ESXi server as a vMA target by running the following command: vifp addserver server2.mycomp.com --authpolicy fpauth

Here, --authpolicy fpauth indicates that the target needs to use the fastpass authentication.

You are prompted for the target server’s root user password.root@<servername>’s password:

3

Specify the root password for the ESXi host that you want to add.

vMA does not retain the root password. Instead, vMA adds vi-admin and vi-user to the ESXi host, and stores the obfuscated passwords that it generates for those users in the VMware credential store.

In a vSphere Web Client connected to the target server, the Recent Tasks panel displays information about the users that vMA adds. The target server’s Users and Groups panel displays the users if you select it.

Caution

Remove users added by vMA from the target server only if you have deleted the vMA virtual machine, but did not remove the target servers.

4

Review and accept the security risk information.

5

Verify that the target server has been added.

The display shows all target servers and the authentication policy used for each target.

vifp listservers --long
server1.mycomp.com ESX adauth
server2.mycomp.com ESX fpauth
server3.mycomp.com ESXi adauth
vc1.mycomp.com vCenter adauth
vc2.mycomp.com vCenter fpauth
6

Set the target as the default for the current session. vifptarget --set | -s <server>

7

Verify that you can run a vSphere CLI command without authentication by running a command, for example:esxcli network nic list

The command runs without prompting for authentication information.

Important

If the name of a target server changes, you must remove the target server by using vifp removeserver with the old name, then add the server using vifp addserver with the new name.