VM Web Console cannot be accessed for more than 30 minutes in 6.7 after closing vCenter Web Client

Products

• VMware vCenter Server
• VMware vSphere ESXi

Issue/Introduction

This is an informational document only.

Symptoms:
After upgrading to vCenter to 6.7, users cannot keep the VM Web Console open for more than 30 minutes after closing vCenter Web Client tab in Explorer.

Environment

VMware vCenter Server Appliance 6.7.x
VMware vSphere Web Client 6.7.x

Cause

With vSphere 6.7 by design, websocket connection will terminate when vSphere session or Web Client session is closed

Resolution

VMware encourages to have the vCenter server logged in another tab or to use VMware Remote Console tool.

Additional Information

Impact/Risks:
Attacker may get access to the VM even if the vSphere-client session is terminated (exploitability is very limited)
We have to assume that the attacker has access to the user's browser (e.g. a malicious browser plugin installed).