One-way CHAP authentication for VMware hosts can be set up. Two-way CHAP authentication
for VMware hosts is not supported.
About this task
To set up one-way CHAP authentication on a VMware host, complete the following
steps:
Procedure
-
From the vSphere Client screen, click the Inventory tab.
-
Click Storage Adapters.
-
Select the iSCSI storage adapter, and then right-click and select
Properties.
-
Click CHAP authentication.
-
Select the preferred settings and enter the passwords:
-
From the CHAP (target authenticates host) menu, click Use CHAP.
-
Click Use initiator name to use initiator's IQN as
the user name for CHAP authentication or type the user name that you set with the
chhost CLI command (iscsiusername field) on the system.
-
Enter the CHAP secret.
- To set up the two-way authentication, repeat the previous steps and then complete these
steps:
- From the Mutual CHAP authentication menu, click Use
CHAP.
- Click Name and enter the value as
clustername
.
The clustername
can be found by lssystem
command.
- Enter the CHAP secret. The chap secret must match with what is configured with the
chsystem.
Note: Before upgrading to 8.5.3.0, if the customer has configured two way chap authentication, they
must first switch to one way chap and then back to two way chap once the upgrade is complete. This
is required because clustername
as a user name is not supported for two way chap
secret in earlier releases.