Enable TSM and SSH on ESXi 4.1

I’ve installed the VMware ESXi 4.1 on my home lab for learning purpose.
Today I decided to enable SSH on ESXi 4.1 for further use and also check the TSM (Tech Support Mode) on ESXi 4.1 in order to checking the different area on the ESXi itself.
So as usual I pressed the ALT+F1 and …. there is new message from VMware on this page!?
“Tech Support Mode has been disabled by administrator.”


So I went back to the main page for checking any new changes in the “System Customization” page.

There is new item in menu as “Troubleshooting Options” which contain four useful option which I think would make the administrator work more easier and safer.
By entering in this menu administrators would be able to enable/disable TSM and SSH, Setting a customized time for disabling the TSM as well as restarting the management agents.

Enabling TSM

Disabling TSM

The result of enabling the TSM

Enabling SSH

Disabling SSH

Modifying Tech Support timeout
Configuring this option would let administrators to let the other technician or support group to gain access to this host for the specific period of time and prevent some mistake like forgetting to disable the TSM.

Using Tech Support Mode in ESXi 4.1

Using Tech Support Mode in ESXi 4.1

Purpose

This article provides guidance on the recommended use of Tech Support Mode for VMware ESXi 4.1.

For instructions on how to enter Tech Support Mode for VMware ESXi 4.0 and 3.5, see: Tech Support Mode for Emergency Support (1003677).

Resolution

 

Tech Support Mode

Tech Support Mode (TSM) provides a command-line interface that can be used by the administrator to troubleshoot and correct abnormal conditions on VMware ESXi hosts. TSM can be accessed in two ways:

• Logging in directly on the console of the ESXi server
• Logging in remotely via SSH

Both of these methods can be disabled, and an optional timeout value can be configured to disallow local and remote TSM access after the specified timeout period.

 

Note: Any existing open sessions are not automatically terminated at the end of the timeout period.

Using Tech Support Mode

Tech Support Mode is provided for the purposes of troubleshooting and remediation. VMware support may provide directions to use TSM in many forms including but not limited to telephone, E-mail, knowledge base articles, documentation, and remote desktop.

VMware recommends using the vSphere Client or any other VMware Administration Automation Product to perform routine ESXi host configuration tasks that do not involve a troubleshooting scenario. For scripting and automation, VMware recommends using the vCLI, PowerCLI, or the vSphere SDK instead of TSM.

TSM may be required to test and debug pre, post, or first boot scripts that are used in conjunction with the new ESXi 4.1 scripted installation feature. VMware recommends limiting testing and debugging these scripts to non-production environments prior to roll-out into production.

Enabling and Accessing Tech Support Mode

To enable local or remote TSM from the Direct Console User Interface (DCUI):

1. At the DCUI of the ESXi host, press F2 and provide credentials when prompted.
2. Scroll to Troubleshooting Options, and press Enter.
3. If you want to enable local TSM, select Local Tech Support and press Enter once. This allows users to login on the virtual console of the ESXi host.
   
   If you want to enable remote TSM, select Remote Tech Support (SSH) and press Enter once. This allows users to login via SSH on the virtual console of the ESXi host.
   
4. Optionally, if you want to configure the timeout for TSM:
5. 1. Select Modify Tech Support timeout and press Enter.
   2. Enter the desired timeout value in minutes and press Enter.
      
6. Press Esc three times to return to the main DCUI screen.

To enable local or remote TSM from the vSphere Client:

1. Select the host and click the Configuration tab.
2. Click Security profile > Properties.
3. Click Local Tech Support or Remote Tech Support (SSH) and click Options.
4. Choose the desired startup policy and click Start, then click OK.
5. Verify that the daemon selected in step 3 shows as running in the Services Properties window.

To configure the TSM timeout value using the vSphere Client:

1. Select the host and click the Configuration tab.
2. Click Advanced Settings.
3. Change the UserVars.TSMTimeOut field to the desired value in minutes.
4. Click OK.

To access the local TSM:

1. At the main DCUI screen, press ALT+F1 simultaneously. This opens a virtual console window to the host.
2. Provide credentials when prompted.
   
   Note: When typing the password, characters are not displayed on the console.

To access the remote TSM:

1. Open an SSH client.
2. Specify the IP address or domain name of the ESX host.
   
   Notes:
3. • Directions may vary depending on what SSH client you are using. For more information, consult vendor documentation and support.
   • By default, SSH works on TCP port 22.
     
4. Provide credentials when prompted.