The vCenter Server must disable accounts used for Integrated Windows Authentication (IWA).
An XCCDF Rule
Description
If not used for their intended purpose, default accounts must be disabled. vCenter ships with several default accounts, two of which are specific to IWA and SASL/Kerberos authentication. If other methods of authentication are used, these accounts are not needed and must be disabled.
- ID
- SV-265979r1003616_rule
- Version
- VCSA-80-000305
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
From the vSphere Client, go to Administration >> Single Sign On >> Users and Groups >> Users.
Select the "K/M" or "krbtgt/VSPHERE.LOCAL" and click "More" then select "Disable".
Click "Ok" to disable the user account.