Search the VMware Knowledge Base (KB)
View by Article ID

Logging in to the ESXi host fails with the error: Authentication denied. Direct console access has been disabled by the administrator (1000424)

  • 9 Ratings


  • Cannot log in to the ESXi host locally.
  • Cannot log in to the ESXi server via SSH.
  • Cannot connect to vCenter Server.
  • When you log in as root directly to DCUI, you see this message:

    Authentication denied. Direct console access has been disabled by the administrator for hostname.


This issue occurs if Total Lockdown Mode is enabled.
For more information about Lockdown Mode Configurations, see the ESXi Lockdown Mode section of the ESXi Configuration Guide.


To resolve this issue, the Direct Console UI needs to be started.
To start the Direct Console UI:
  1. Connect to the ESXi host with the vSphere Client.
  2. Click the Configuration tab.
  3. Click Security Profile.
  4. Under Services, click Properties.
  5. Ensure that Direct Console UI in the list are running, else select Options.
  6. Select Direct Console UI from the list and click Options.
  7. Set the Startup Policy to Start and stop with host.
  8. Click Start.
  9. Click OK.
If the issue persists, reboot the ESXi host. If during reboot there are any post errors, do the necessary corrective actions.

If this does not resolve the issue, reinstall ESXi.


cannot-log-into-vcenter vcenter-login-fails esxi-lockdown-mode esxi-login-fails

See Also

Update History

11/16/2012 - Added ESXi 5.0.x and vCenter Server 5.0.x to Product Versions

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.


  • 9 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)

Please enter the Captcha code before clicking Submit.
  • 9 Ratings