Protecting Virtual Machine Configuration

Parallels Desktop Enterprise Edition provides the ability to password-protect the configuration settings of a virtual machine. When deploying Parallels Desktop, you can set the password in the source virtual machine before adding it to the deployment package. The deployed virtual machines will retain the password and the Mac users will not be able to modify the configuration without providing the correct password.

Using Parallels Desktop Graphical User Interface to Set the Password

The password is set using the Parallels Desktop graphical user interface as follows:

1. In OS X, open Parallels Desktop and select the desired virtual machine.
2. On the Parallels Desktop menu bar, select Actions > Configure to open the virtual machine configuration dialog.
3. Select Security .
4. Click the Restrict Editing: Turn On button.
5. Enter the password, then enter it again to verify and click OK .

To change or remove the password:

• To change the password, click Restrict Editing: Change Password , then enter the old and the new passwords.
• To remove the password, click Restrict Editing: Turn Off , then enter the current password to remove the configuration lock.

If the password is set and the user tries to view or modify the virtual machine configuration, a dialog will be displayed asking to provide the password. Without the correct password, the user will be denied access to the virtual machine configuration dialog.

Using Command Line Tools to Set the Password

In addition to the graphical user interface, you can use the prlctl command-line utility to set, reset, and view the password protection of a virtual machine.

To set the password, type the following command in Terminal:

prlctl set "vm_name" --password-to-edit

where vm_name is the virtual machine name in quotes.

You'll be asked to enter a password and then confirm it.

Please enter a new password:

Please confirm password:

To change or remove the password, type the following command:

prlctl set "vm_name" --password-to-edit

where vm_name is the virtual machine name in quotes.

You'll be asked to enter the current password.

Please enter current password:

You will then be asked to enter and confirm a new password. To remove the password, leave the line blank and press Enter twice (when asked to enter and confirm the password).

Please enter a new password:

Please confirm password:

To view the current protection status, type the following command:

prlctl list "vm_name" -i

The output will look similar to the following:

Encrypted: no

Edit restricted: yes

Compatibility with Other Parallels Desktop Versions

The configuration protection functionality works only in Parallels Desktop 7 or later. If you set a password in a virtual machine and then open the virtual machine in an earlier version of Parallels Desktop, the protection will NOT work (i.e. the user will be able to view and modify the virtual machine configuration).

You can only set or remove the password in the Enterprise Edition of Parallels Desktop. However, if the password is set and the virtual machine is opened in the Standard Edition of Parallels Desktop, the password will continue to work (i.e the virtual machine configuration will remain locked).