How to maintain ZeroLock Protection when applying ESXi Patches.
Once the ZeroLock® agent is installed on the ESXi operating system, the ESXi default configuration profile is applied. This profile has program filtering enabled by default, which can cause a problem when applying ESXi patches to the host system.
If using the ESXi default configuration profile or one of your own, it must be edited to ensure that program filtering is off when applying the patch.
For ease of explanation, we will use the ESXi default configuration profile as an example of how to disable program filtering.
-
Create a duplicate configuration profile of ESXi default by opening SYSTEM CONFIGURATION | CONFIG PROFILES and selecting the ESXi default profile. Next, click the Duplicate button.
-
On the New Configuration Profile screen, give your profile a name and description then scroll down to the ESXi box. Once there, click the green box next to Enable Program Filter which will turn red, indicating the Program Filter is now off. When done, select CREATE.
- Go to the Endpoints page, select the endpoint(s) you are applying the new Config Profile to and, from the Actions drop-down menu, select Set Endpoint Profile.
-
Select the profile you created then click the Set Configs button.
- The new configuration profile can take up to 5 minutes to activate. When it has you will see it listed in the Profile column on the Endpoints screen.
- Once the ESXi patch has been applied, switching back to the ESXi default configuration profile only requires repeating steps 3 and 4.