Skip to main content

Configure the security zone

The security zone isolates clusters within it from other clusters. The secret level of a VM

in the security zone must be secret, confidential, or top secret. A VM in the security zone can be migrated and cloned only within the cluster to which the VM belongs. A VM in the security zone cannot be cloned or converted to a template. The secret level of a VM in the non-security zone must be internal use only, and the VM can be migrated and cloned only within the non-security zone.

Prerequisites

The security zone is available only when the secure mode is enabled. For more information about the secure mode, see "Configure system parameters."

Restrictions and guidelines

In RBAC mode, only a security administrator can configure the security zone. Hosts and clusters in the security zone cannot use the same shared storage as hosts and clusters not in the security zone.

Procedure

  1. On the top navigation bar, click Security. 2. From the left navigation pane, select Security Zone.