After applying Hitachi SPH, ExecInstalledOnly is disabled.

Products

• VMware vSphere ESXi

Issue/Introduction

After applying Hitachi SPH, ExecInstalledOnly is disabled. You might see warning like below.

ExecInstalledOnly has been disabled. This allows the execution of non-installed binaries on the host. Unknown content can cause malware attacks similar to Ransomware.

Environment

VMware ESXi 8.0

Cause

This could happen because of SPH upgrade. For more detail, please see the hitachi document.

https://www.hitachi.co.jp/products/it/ha8000v/support/productinfo/article.html?id=ADV-2024-0093

Resolution

Once it's happened, enable ExecInstalledOnly again by below command if needed.

esxcli system settings advanced set -o /User/execInstalledOnly -i 1