Skip to content
ATO Pathways
  Log In

VMware vSphere 8.0 ESXi Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ESXi host must use sufficient entropy for cryptographic operations.

    &lt;VulnDiscussion&gt;Starting in vSphere 8.0, the ESXi Entropy implementation supports the FIPS 140-3 and EAL4 certifications. Kernel boot options...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ESXi host must not enable log filtering.

    &lt;VulnDiscussion&gt;The log filtering capability allows users to modify the logging policy of the syslog service that is running on an ESXi host....
    Rule Medium Severity
    Show

  • SRG-OS-000033-VMM-000140

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ESXi host must use DOD-approved encryption to protect the confidentiality of network sessions.

    &lt;VulnDiscussion&gt;Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ESXi host must disable key persistence.

    &lt;VulnDiscussion&gt;When using a standard key provider, the ESXi host relies on vCenter Server to manage the encryption keys. When using a truste...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ESXi host must deny shell access for the dcui account.

    &lt;VulnDiscussion&gt;The dcui user is used for process isolation for the DCUI itself. The account has shell access which can be deactivated to red...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ESXi host must disable virtual hardware management network interfaces.

    &lt;VulnDiscussion&gt;Hardware management controllers often present virtual or USB NICs to the ESXi host. These can be used as backdoors and should...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules