Apart from the vSphere Client, there are three primary interfaces for administration.

DCUI

DCUI stands for Direct Console User Interface.  It refers to the screen that is presented to the user when ESXi is installed for the first time. It is a menu-driven, text-based interface that appears on the physical console of the ESXi server hardware—or via the remote console feature of some hosts; for example, HP Integrity Integrated Lights-Out (iLO) and Dell Remote Assistant Controller (DRAC). Through this interface, an administrator can perform basic tasks such as configuring the management network, resetting the root password, and rebooting the host. Any task that is more sophisticated requires using one of the other interfaces. After the host has been joined to the vCenter Server, the administrator has the option of disabling the DCUI, forcing all host-level management interaction to occur
through one of the other interfaces.
image
 

ESXi Shell

The shell is an interactive CLI that can be used to perform monitoring and diagnostics. The
most important element in the vSphere ESXi Shell is called ESXCLI, a command set that provides a full set of monitoring and configuration capabilities for nearly all aspects of ESXi functionality. With ESXCLI, an administrator can perform activities such as listing all network interfaces, performing low-level configuration of an HBA interface, querying kernel parameters, and so on. Of the three interfaces, vSphere ESXi Shell is the most in-depth and complete, so it should be used only for troubleshooting and resolving problems. Unlike a typical Linux shell, vSphere ESXi Shell has a limited set of generic commands, such as for file or process manipulation. Access to vSphere ESXi Shell comes in two forms:
  1. Local access is available on the local console of the host, as it is for the DCUI.
  2. Remote access is available to the host via SSH over the management network.
Each of these forms of access can be disabled independently as part of the host’s configuration. For example, the remote (SSH) access can be disabled while still allowing local console access. In all cases, to be granted vSphere ESXi Shell access, an administrator role must be assigned to the user.
It is also this feature of ESXi that causes many people to compare it to Linux and claim that is another form of Linux.
There are two primary ways in which to define and authenticate users who are able to log in to the shell and the other management interfaces of the host. The first way is to create local user accounts on the ESXi host directly. These users, and their passwords, are not synchronized with any other host, so each account creation must be done independently of one another. The second way is to use a centralized authentication directory, such as Microsoft Active Directory. When an ESXi host is joined to an Active Directory domain, it can check usernames and passwords against this central store without requiring any information to be stored locally.
vTip: The dcui command can be issued on the shell to display a DCUI emulator.
vTip: ESXi is NOT Linux.

Host Agent

The host agent, or hostd, is a process running on all ESXi hosts; it provides access to the host that is governed according to the VMware vSphere API model. It plays the role of converting API calls into the corresponding low level actions on the ESXi host. The most popular method of utilizing this API is via CLIs. The two primary CLIs in vSphere are VMware vSphere PowerCLI™, based on Microsoft Windows PowerShell, and the vSphere CLI, a unique set of CLI tools that can be installed on any Linux or Windows system. Any software program that utilizes Web services can also communicate directly with the host agent, enabling more programmatic access. There are several language bindings available for the vSphere Web services API, including Java and .NET. The vSphere Client also uses this agent for managing the ESXi.

vTip: Putting the management interfaces of ESXi and vCenter on a separate, access-controlled management LAN is recommended. This makes it more secure.