The vCenter Server must limit membership to the "TrustedAdmins" Single Sign-On (SSO) group.
An XCCDF Rule
Description
The vSphere "TrustedAdmins" group grants additional rights to administer the vSphere Trust Authority feature. To force accountability and nonrepudiation, the SSO group "TrustedAdmins" must be severely restricted.
- ID
- SV-258957r961863_rule
- Version
- VCSA-80-000291
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
From the vSphere Client, go to Administration >> Single Sign On >> Users and Groups >> Groups.
Click the next page arrow until the "TrustedAdmins" group appears.
Click "TrustedAdmins".