ESXi Shell Access with the Direct Console
An ESXi system includes a direct console (also called DCUI) that allows you to start and stop the system and to perform a limited set of maintenance and troubleshooting tasks. The direct console includes the ESXi Shell, which is disabled by default. You can enable the ESXi Shell in the direct console or by using the vSphere Web Client. You can enable local shell access or remote shell access:
The ESXi Shell includes all ESXCLI commands, a set of deprecated esxcfg- commands, and a set of commands for troubleshooting and remediation.
VMware recommends you install the vCLI package on a supported Windows or Linux system or deploy the vMA virtual appliance, and run commands against your ESXi hosts. Run commands directly in the ESXi Shell in troubleshooting situations only.
Enabling Local ESXi Shell Access
You can enable the ESXi Shell from the direct console or from the vSphere Web Client.
If you have access to the direct console, you can enable the ESXi Shell from there.
To enable the ESXi Shell in the direct console
1
2
Scroll to Troubleshooting Options and press Enter.
3
Choose Enable ESXi Shell and press Enter.
On the left, Enable ESXi Shell changes to Disable ESXi Shell. On the right, ESXi Shell is Disabled changes to ESXi Shell is Enabled.
4
If you do not have access to the direct console, you can enable the ESXi Shell from the vSphere Web Client.
To enable the ESXi Shell from the vSphere Web Client
1
Select the host, click Manage, and keep Settings selected.
2
Click Security Profile.
3
4
Select ESXi Shell.
To change the Startup policy across reboots, select Start and stop with host and reboot the host.
5
Click OK.
After you have enabled the ESXi Shell, you can use it from that monitor or through a serial port.
ESXi Shell Timout
The ESXi Shell timeout setting specifies how long, in minutes, you can leave an unused session open. By default, the timeout for the ESXi Shell is 0, which means the session remains open even if it is unused. If you change the timeout, for example, to 30 minutes, you have to log in again after the timeout period has elapsed.
You can modify the timeout from the Direct Console or from the vSphere Web Client.
To modify the ESXi Shell Timeout
a
Select Modify ESXi Shell timeout and press Enter.
b
a
Select the host, click Manage, and keep Settings selected.
b
Click Advanced System Settings.
c
Select UserVars.ESXiShellTimeOut and Click the Pen icon above the list of names.
d
e
Using the Local ESXi Shell
After you enable the ESXi Shell in the direct console, you can use it from main direct console screen or remotely through a serial port.
To use the local ESXi Shell
1
2
When you type the password, characters are not displayed on the console.
3
4
To log out, type exit in the shell.
5
See vSphere Installation and Setup documentation for information on serial port setup.