Virtual machines (VMs) must be configured to lock when the last console connection is closed.
An XCCDF Rule
Description
When accessing the VM console, the guest operating system must be locked when the last console user disconnects, limiting the possibility of session hijacking. This setting only applies to Windows-based VMs with VMware tools installed.
- ID
- SV-258714r933203_rule
- Version
- VMCH-80-000201
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
For each virtual machine do the following:
From the vSphere Client, right-click the Virtual Machine and go to Edit Settings >> VM Options >> VMware Remote Console Options.
Check the box next to "Lock the guest operating system when the last remote user disconnects". Click "OK".