Setting up authentication for VMware hosts

One-way CHAP authentication for VMware hosts can be set up. Two-way CHAP authentication for VMware hosts is not supported.

About this task

To set up one-way CHAP authentication on a VMware host, complete the following steps:

Procedure

  1. From the vSphere Client screen, click the Inventory tab.
  2. Click Storage Adapters.
  3. Select the iSCSI storage adapter, and then right-click and select Properties.
  4. Click CHAP authentication.
  5. Select the preferred settings and enter the passwords:
    1. From the CHAP (target authenticates host) menu, click Use CHAP.
    2. Click Use initiator name to use initiator's IQN as the user name for CHAP authentication or type the user name that you set with the chhost CLI command (iscsiusername field) on the system.
    3. Enter the CHAP secret.
  6. To set up the two-way authentication, repeat the previous steps and then complete these steps:
    1. From the Mutual CHAP authentication menu, click Use CHAP.
    2. Click Name and enter the value as clustername. The clustername can be found by lssystem command.
    3. Enter the CHAP secret. The chap secret must match with what is configured with the chsystem.
    Note: Before upgrading to 8.5.3.0, if the customer has configured two way chap authentication, they must first switch to one way chap and then back to two way chap once the upgrade is complete. This is required because clustername as a user name is not supported for two way chap secret in earlier releases.