In this video, I walk you through the top security hardening steps I recommend for anyone running Proxmox VE 9. No matter whether or not it is in your home lab or a production environment, I cover everything from locking down SSH access and enabling the Proxmox firewall, to configuring Let’s Encrypt TLS certificates. Also, we look at setting up 2FA, and keeping your hypervisor properly patched. These are the exact steps I take to secure my own Proxmox nodes.
Want a power efficient Proxmox 9 home server? https://geni.us/geekoma52025-3
128 GB RAM Kit for Home Lab: https://geni.us/crucial12GBddr5
Read the written review of the Proxmox VE 9 Security Hardening guidance:
https://www.virtualizationhowto.com/2025/08/top-security-hardening-steps-for-proxmox-ve-9/
https://www.skool.com/homelabexplorers/about?ref=25f64c297b724689ae81c7dd30ba2c21
★ Substack URL: bleevht.substack.com
★ Subscribe to the channel: https://www.youtube.com/channel/UCrxcWtpd1IGHG9RbD_9380A?sub_confirmation=1
★ My blog: https://www.virtualizationhowto.com
★ Twitter: https://twitter.com/vspinmaster
★ LinkedIn: https://www.linkedin.com/in/brandon-lee-vht/
★ Github: https://github.com/brandonleegit
★ Facebook: https://www.facebook.com/people/VirtualizationHowto/100092747277326/
★ Discord: https://discord.gg/Zb46NV6mB3
★ Pinterest: https://www.pinterest.com/brandonleevht/
Introduction to Proxmox VE 9 security – 0:00
SSH security – 0:39
Walking through securing SSH in Proxmox – 2:15
Proxmox VE 9 Firewall – 4:02
Stepping through the Proxmox Firewall – 5:01
Trusted SSL certificates – 8:26
Stepping through Let’s Encrypt in Proxmox – 9:19
Use 2FA authentication – 11:00
Setting up 2FA in Proxmox VE 9 – 11:52
Keep your Proxmox VE 9 Server updated – 12:29
Looking at setting up your updates – 13:42
Use Role Based Access Control (RBAC) – 14:44
Setting up RBAC in Proxmox VE 9 – 15:00
Roles to maybe create in Proxmox VE 9 – 15:56
Secure your storage and backups – 16:09
Proxmox Backup Server security – 16:25
Monitor your Proxmox VE 9 Server – 16:41
Disable unused hardware – 16:57
Enable Secure Boot – 17:06
Protect management interfaces – 17:10
Use a UPS – 17:29
Wrapping up Proxmox VE 9 security hardening tips – 17:35
