Virtualization Security: Protecting Virtualized Environments

Chapter 2

Securing Hypervisors

This chapter is about locking down virtualization platforms, specifically Type I hypervisors. Hardening the hypervisor should really be viewed as a standard practice, much as it should be for enterprise servers of any importance. There are an incredible number of configuration options for the major platforms (ESXi, Hyper-V, and XenServer). In this chapter, I'll cover the most fundamental, getting you to a sound security state that conforms to industry best practices. Where appropriate, I'll refer to outside sources for more in-depth information that's somewhat outside the scope of this book. Overall, these settings will help you secure your hypervisors to a reasonable level for most organizations.

In this chapter, ...