Skip to content
ATO Pathways
  Log In

VMware vSphere 7.0 ESXi Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ESXi host must require TPM-based configuration encryption.

    &lt;VulnDiscussion&gt;An ESXi host's configuration consists of configuration files for each service that runs on the host. The configuration files ...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ESXi host must implement Secure Boot enforcement.

    &lt;VulnDiscussion&gt;Secure Boot is part of the UEFI firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or a...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ESXi Common Information Model (CIM) service must be disabled.

    &lt;VulnDiscussion&gt;The CIM system provides an interface that enables hardware-level management from remote applications via a set of standard ap...
    Rule Medium Severity
    Show

  • SRG-OS-000478-VMM-001980

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ESXi host SSH daemon must be configured to only use FIPS 140-2 validated ciphers.

    &lt;VulnDiscussion&gt;Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. ESXi must implemen...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules