Virtually Speaking Podcast: vSAN in VCF 9

Virtually Speaking Podcast: vSAN in VCF 9

In this episode, Pete Flecha and John Nicholson are joined by Pete Koehler to dive into the latest vSAN innovations in VMware Cloud Foundation 9. They explore key updates like global deduplication, improved network traffic separation, vSAN-to-vSAN replication with VMware Live Recovery, and […]


Broadcom Social Media Advocacy

VPC Centralized Network Connectivity – With…

VPC Centralized Network Connectivity – With Guided Edge Deployment

VPC Centralized Network Connectivity – With…

In this demo we go over the deployment of a Centralized Network Connectivity in VCF 9.0 for VPC connectivity to External Networks. Centralized Network Connectivity is a new enhancement of VCF Networking in VCF 9.0 with simpler deployment of Edge Nodes and Tier-0. 🔗


Broadcom Social Media Advocacy

What’s New in VCF Operations HCX 9.0

What’s New in VCF Operations HCX 9.0

What’s New in VCF Operations HCX 9.0

Key Points: The launch of VMware Cloud Foundation (VCF) 9.0 brings a host of new features and capabilities across the platform, and a key component is VMware Cloud Foundation (VCF) Operations HCX 9.0. This new version streamlines workload migration & mobility and day-2 operations, further […]


Broadcom Social Media Advocacy

The Role of vSAN Encryption to Secure your Data…

The Role of vSAN Encryption to Secure your Data Effectively

The Role of vSAN Encryption to Secure your Data…

Data encryption is a common technique used in environments requiring additional security levels. It consists of a process to ensure that data can only be consumed by systems with appropriate levels of access. Join this session to find out how vSAN can secure your data. The Hands-on Lab shown […]


Broadcom Social Media Advocacy

Dubai Airports Elevates Operations and Secures…

Dubai Airports Elevates Operations and Secures Infrastructure with VCF and VMware vDefend

Dubai Airports Elevates Operations and Secures…

As Dubai Airports marked its busiest year on record, the need for scalable, secure technology infrastructure has never been greater. To meet this demand, Dubai Airports has strengthened its private cloud environment with VMware Cloud Foundation and VMware vDefend. By leveraging these state-of-[…]


Broadcom Social Media Advocacy

🔐 Check VMware ESXi Hosts for Ransomware Protection with PowerCLI


Cybersecurity threats, especially ransomware, are constantly evolving, so it’s important to regularly audit your ESXi hosts to ensure they have the proper protections enabled. Today I want to share a simple but effective PowerCLI script, Get-RansomwareProtectionStatus, that quickly checks your VMware hosts for important ransomware-related security configurations.

🚀 What This Script Does
This script focuses on three key settings that enhance protection against ransomware on your ESXi hosts:

  • Encryption Mode: Checks whether TPM-based encryption is active.
  • Secure Boot Enforcement: Confirms Secure Boot is enabled.
  • Exec-Installed-Only Mode (Configured & Runtime): Ensures only binaries from installed VMware VIB packages can execute.

Having these settings properly configured greatly reduces the risk of unauthorized code execution—exactly what you want to fight ransomware!

🔧 How to Use the Script

Here’s how simple it is. First connect to your vCenter and then run a script.

.\Get-RansomwareProtectionStatus.ps1 <HOST>

It generates a clear, colored summary, instantly telling you what’s secure and what needs your attention.

.\Get-RansomwareProtectionStatus.ps1 fs-vsan-05.int.dc5.cz

Green means you’re good; red ? You’ve got work to do! Look to the official documentation:

ESXi 8.0 – https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/vsphere-security-8-0/securing-esxi-hosts/securing-the-esxi-configuration/managing-a-secure-esxi-configuration.html

ESX 9.0 – https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/9-0/vsphere-security/securing-esxi-hosts/securing-the-esxi-configuration/managing-a-secure-esxi-configuration.html

🛠️ Customize and Automate It

You can integrate this script into your monitoring routines, run it on multiple hosts with automation tools like Ansible Semaphore or GitLab CI, or even schedule regular audits.

Pro Tip: Save your reports to a file or push results directly to your monitoring dashboard to track security over time!

📦 Get the Script

Check out the script in my GitHub repo [link here] and let me know your thoughts! Direct link to script [here]

Feel free to comment or ping me on social media if you’ve enhanced it further or found a creative use case. Stay secure! 🛡️