Skip to content
Log In

VMware vSphere 8.0 ESXi Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The ESXi host must use sufficient entropy for cryptographic operations.

    Starting in vSphere 8.0, the ESXi Entropy implementation supports the FIPS 140-3 and EAL4 certifications. Kernel boot options control which entropy sources to activate on an ESXi host. In computin...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    Group
    Show

  • SRG-OS-000033-VMM-000140

    Group
    Show

  • The ESXi host must use DOD-approved encryption to protect the confidentiality of network sessions.

    Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session. In ESXi 8.0 Update 3 and newer TLS profiles are availab...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    Group
    Show

  • SRG-OS-000480-VMM-002000

    Group
    Show

  • The ESXi host must deny shell access for the dcui account.

    The dcui user is used for process isolation for the DCUI itself. The account has shell access which can be deactivated to reduce attack surface.
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    Group
    Show

  • The ESXi host must disable virtual hardware management network interfaces.

    Hardware management controllers often present virtual or USB NICs to the ESXi host. These can be used as backdoors and should be deactivated both in the hardware configuration and in ESXi.
    Rule Medium Severity
    Show

  • The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via the Direct Console User Interface (DCUI).

    Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Execut...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules