The ESXi host Secure Shell (SSH) daemon must not allow authentication using an empty password.
An XCCDF Rule
Description
Configuring this setting for the SSH daemon provides additional assurance that remote logon via SSH will require a password, even in the event of misconfiguration elsewhere.
- ID
- SV-256387r959010_rule
- Version
- ESXI-70-000015
- Severity
- Low
- References
- Updated
Remediation Templates
A Manual Procedure
From an ESXi shell, add or correct the following line in "/etc/ssh/sshd_config":
PermitEmptyPasswords no