Knowledge Base

The VMware Knowledge Base provides support solutions, error messages and troubleshooting guides
 
Search the VMware Knowledge Base (KB)   View by Article ID
 

Safe import of virtual machines to ESX/ESXi (2034095)

Details

This KB provides guidance on safe importing of virtual machines (VMs) and explains why .vmdk files should not be imported without any sanitization.

Virtual machines are made from configuration files and content files. The .vmx and .vmdk files of a virtual machine hold its configuration and define the virtual machine's runtime container. They contain privileged information that is not part of what is inside this container.

Virtual machine configuration files should be carefully handled when imported into ESX/ESXi. In an environment that allows less privileged or untrusted users to import virtual machines, user-provided virtual machine configuration files such as .vmx and .vmdk files must be sanitized.

Solution

VMware recommends that virtual machines are imported using the Open Virtualization Format (OVF). The OVF specification describes an open, secure, portable, efficient andĀ  extensible format for the packaging and distribution of software to be run in virtual machines. During the import while the VMware specific configuration files are created, sanitization of the configuration files occurs.

Below are answers to frequently asked questions on OVF files.

Q. Is it possible to import VMDKs directly?

A. While it is possible to import a VMDK file directly this is strongly discouraged outside of controlled environments. Less privileged or untrusted users should not be allowed access to hypervisor storage. The VMware recommended method of importing VMDK files is an OVF import that verifies the VMDK. VMware Cloud Director, for example, only allows VMs to be imported as OVFs. vCenter Server allows both OVF files and VMDK file to be imported.

Q. What is the difference between OVF and VMDK?

A. An OVF file generically describes both a virtual machine and its disks, while a VMDK descriptor file only describes the files/devices of a virtual disk. OVF files can refer to VMDK disk images but not to VMDK descriptors. This is further explained here. See also, The Open Virtual Machine Format Whitepaper for OVF Specification.

Q. Where can I find more information on VMDK file integrity?

A. SeeĀ  KB 1003743: Verifying ESX/ESXi virtual machine file integrity and KB 1002511: Recreating a missing virtual machine disk(VMDK) descriptor file.

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 6 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.
What can we do to improve this information? (4000 or fewer characters)
  • 6 Ratings
Actions
KB: