
VMware, Inc. 61
7
TheVMwareEndpointsystemdeliversanintrospection‐basedantivirussolutionthatusesthehypervisorto
scanguestvirtualmachinesfromtheoutsidewithonlyathinagentoneachguestvirtualmachine.
YouinstalledthevShieldEndpointserviceaspartofESXhostpreparation.Youmustperformthefollowing
tasksin
sequencetocompleteEPSecinstallation.
Register an SVM with the vShield Endpoint Service on an ESX Host
Youcanregisterandunregisterathird‐partyantivirussecurityvirtualmachine(SVM)withvShieldEndpoint.
InthePOSTrequest,vmIdisthe0‐basedindexofthevNICthattheSVMusestocommunicatewiththevShield
Endpointservice.ThevShieldManagerconnectsthevNICtothecorrectportgroup
toenablecommunication
betweentheSVMandthevShieldEndpointservice.
ToregisterSVMsonmultipleESXhostsinasingleRESTcall,includemultiple<SvmRegister />sectionsin
therequestbody.
Example 7-1. Registering an SVM with vShield Endpoint Service
Request:
POST <vshieldmanager-uri>/api/1.0/endpointsecurity/svm
<VShieldEndpointSecurity>
<SvmRegister>
<vmId>vmid_of_svm_vm</vmId>
<ipAddress>ipaddress_of_svm_vnic</ipAddress>
<port>port_for_communication</port>
<vendorId>partner_identification_string</vendorId>
</SvmRegister>
</VShieldEndpointSecurity>
Where:
vmId istheSVMmanagedobjectIDinvCenter.
ipAddressistheIPaddressoftheSVM’svNICthatisconnectedtothevmkernelportgroup.
portistheportonwhichtheSVMlistenstoconnectionfromtheEPSecvmkernelmodule.
vendorIdisthestringthatisusedasanidentifierofthepartnerwhoownstheSVM.
vShield Endpoint Management
7
IMPORTANTAllvShieldRESTrequestsrequireauthorization.Youcanusethefollowingbasicauthorization:
Authorization: Basic YWRtaW46ZGVmYXVsdA==
YWRtaW46ZGVmYXVsdA==representstheBase64encodingofthevShieldManagerdefaultlogincredentials
(admin:default).
Comentários a estes Manuais