vifp Target Management Commands
The vifp interface allows administrators to add, list, and remove target servers and to manage the vi-admin user’s password.
vifp addserver
Adds a vCenter Server system or ESXi host as a vMA target server.
Usage
vifp addserver <server>
[- -authpolicy <fpauth | adauth>]
[- -protocol <http | https>]
[- -portnumber <portnum>]
[- -servicepath <servicepath>]
[- -username <username>]
[- -password <password>]
Description
After a server is added as a vMA target, you must run vifptarget <server> before you run vSphere CLI commands or vSphere SDK for Perl scripts against that system. The system remains a vMA target across vMA reboots, but running vifptarget again is required after each logout. See vifptarget Command for vi-fastpass Initialization.
After you run vifptarget, you can run vSphere CLI or vSphere SDK for Perl commands and scripts and you are no longer prompted for authentication information, as follows:
If you add a vCenter Server system as a vMA target, you can run most commands on all ESXi hosts that the vCenter Server system manages using the vSphere CLI --vihost option. The vSphere CLI Installation and Reference Guide includes a table that shows which commands cannot target a vCenter Server system.
See Add Target Servers to vMA and Running vSphere CLI for the Targets.
Options
Example
vifp addserver my_vCenter
Adds a vCenter Server system as a vMA target. You are prompted for a user name and password. The user must have login privileges on the vCenter Server system.
vifp addserver myESX42
Adds an ESXi host to vi-fastpass. You are prompted for the root password for the target system.
vifp removeserver
Removes a specified vMA target that was previously added with vifp addserver.
If the target is an ESXi system, you need superuser privileges for removal. If the target is a vCenter Server system, any user with connection privileges can remove the target. You only have to specify the <server> option, without the password.
Usage
vifp removeserver
<server>
[- -protocol <http | https>]
[- -portnumber <portnum>]
[- -servicepath <servicepath>]
[- -username <username>]
[- -password <password>]
[--force]
Description
Run vifp removeserver for each vMA target before you delete the vMA instance. If you do not run vifp removeserver, the vi-user and vi-admin users remain on the target server. If you later this server to vMA, vMA creates two more accounts on this server. Run vifp removeserver to avoid having multiple users created by vMA on each target server.
Options
Password of the user specified by - -username. Use the password you used when adding the server.
Examples
vifp removeserver <vCenter_Address>
Removes a vCenter Server system. You are not prompted for a password.
vifp removeserver <esxi_Address>
Removes an ESXi host.
vifp rotatepassword
Specifies vi-admin and vi-user password rotation parameters.
Important This command applies only to ESXi target servers with the fpauth authentication policy. You cannot rotate passwords for targets with adauth authentication policy and for vCenter Server targets.
Usage
vifp rotatepassword
[- -now [- -server <server>] |
- -never |
- -days <days>]
Description
vMA changes passwords for vi-admin and vi-user both in the local credential store and on the target server. vMA attempts the password rotation at midnight.
If one or more of the target servers is down when vMA attempts password rotation, vMA repeats the attempt the next day at midnight.
Options
Examples
vifp rotatepassword - -now
Immediately rotates passwords of all ESXi vMA target servers.
vifp rotatepassword - -now - -server <server_address>
Immediately rotates the password of a specific server.
vifp rotatepassword - -days 7
Sets the password rotation policy to rotate the password of all ESXi vMA targets every seven days.
For example, if you add server1 on 9/1, and server2 on 9/2, and run vifp rotatepassword - -days 7, vMA rotates the password for server1 at midnight on 9/8 and the password for server2 at midnight on 9/9. vMA rotates the server1 password again on 9/15 and the server2 password again on 9/16. If you then run vifp rotatepassword - -days 3, vMA rotates the server1 password on 9/18 and the server2 password on 9/19.
vifp rotatepassword
Displays the current password rotation policy.
vifp listservers
Lists target systems.
Usage
listservers [-l | --long]
Description
You can use this command to verify that addserver succeeded. This command does not require administrator privileges on vMA.
Example
vifp listservers --long
Lists all servers that are vMA targets, for example:
server1.mycomp.com             ESX        fpauth
server2.mycomp.com             ESX        adauth
server3.mycomp.com             ESXi       fpauth
vc42.mycomp.com                vCenter    adauth
vifp reconfigure
Reconfigures target systems. This can be done to change authentication policy or the configured Active Directory user.
Usage
reconfigure <server>
[--authpolicy <fpauth | adauth>]
[--protocol <http | https>]
[--portnumber <portnum>]
[--servicepath <servicepath>]
[--username <username>]
[--password <password>]
Description
You can use this command to reconfigure the authentication policy or the users. This command can be run only by administrators.
Options