VMware vSphere 8.0 ESXi Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-OS-000355-VMM-001330
Group -
SRG-OS-000366-VMM-001430
Group -
The ESXi Image Profile and vSphere Installation Bundle (VIB) acceptance level must be verified.
Verify the ESXi Image Profile to only allow signed VIBs. An unsigned VIB represents untested code installed on an ESXi host. The ESXi Image profile supports four acceptance levels: 1. VMwareCertif...Rule High Severity -
SRG-OS-000379-VMM-001550
Group -
The ESXi host must enable bidirectional Challenge-Handshake Authentication Protocol (CHAP) authentication for Internet Small Computer Systems Interface (iSCSI) traffic.
When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, there is potential for a man-in-the-middle att...Rule Medium Severity -
SRG-OS-000423-VMM-001700
Group -
SRG-OS-000478-VMM-001980
Group -
The ESXi host Secure Shell (SSH) daemon must be configured to only use FIPS 140-2 validated ciphers.
Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. ESXi must implement cryptographic modules adhering to the higher standards approved by...Rule Medium Severity -
SRG-OS-000480-VMM-002000
Group -
SRG-OS-000023-VMM-000060
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.