Encrypting and setting up an expiry date for a virtual machine is one of the new feature in VMware workstation 10. This would be a handy option in testing environment or if you are preparing a virtual machine for a contractor or third party member who do not need to use the VM after certain time. This will allow administrators to restrict the virtual machine access automatically by policies and settings while deploying. Here is a step by step guide explaining how to configure expiring virtual machine in VMware workstation 10 and how it can be renewed or re-used when it is required.
You must have the latest VMware workstation 10 to get this expiry VM feature. Also the particular virtual machine should be encrypted with password to set restrictions and expiry date.
Here is the screenshot shows disabled restriction (also expiry) option because of ‘Not encrypted’.
How to Configure Expiring Virtual Machine
1) Go to settings of virtual machine and encrypt it.
Encryption process will take some time to complete depending on size of virtual machine. Once encryption completed, you could see the enabled restriction options.
When a VM is encrypted with password, the following dialog box will prompt next time to power on.
2) Click ‘Enabled restriction’ and set a password. This will protect other users from modifying settings of virtual machine. But still these users can use encryption password which was created in step-1 to open and power on the particular virtual machine.
But, without knowing the restriction password, an user can’t modify VM settings or export it to different host.
The ‘Require the user to change the encryption password’ will force the user to change encryption password when particular virtual machine is copied or moved to different host or in same host.
For example, once this virtual machine copied or moved to different or same host, encryption password needs to be changed. This option allows end user to have own different password than original password. It is similar to force an user to change a new password in Windows domain active directory environment.
In this case, I copied the same virtual machine on same host computer and opened. First time I had to enter the encryption password which was set initially, but immediately it popped up to set a new encryption password as shown below.
Remember – This is just a new encryption password to open and run virtual machine. The restriction password which protects from modifying settings remains same on copied or moved virtual machine.
‘Allow USB connection’ restriction will restrict the user to connect USB devices to virtual machine. Very useful feature.
3) The expiry date can be set easily in next option.
Under Advanced option you will find expiry messages, time server that VMware workstation 10 will check/synchronize the time and some more options. All settings are very easy to set up and customizing them will give a professional approach in deploying expiry virtual machine in your environment.
Here is the message appeared when an user tried to open expired virtual machine in VMware workstation 10.
4) If you like to extend the expiry date or change the date for expired virtual machine or remove expiry settings, you must use the restriction password (configured in step 2) and modify these settings.
This is really a great feature on a desktop virtualization software. It would be great to implement in your production or lab environment by restricting virtual machine access for end users or testers.