Skip to content
Log In

II - Mission Support Public

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000480-VMM-002000

    Group
    Show

  • The ESXi host must use sufficient entropy for cryptographic operations.

    Starting in vSphere 8.0, the ESXi Entropy implementation supports the FIPS 140-3 and EAL4 certifications. Kernel boot options control which entropy sources to activate on an ESXi host. In computin...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    Group
    Show

  • The ESXi host must not enable log filtering.

    The log filtering capability allows users to modify the logging policy of the syslog service that is running on an ESXi host. Users can create log filters to reduce the number of repetitive entries...
    Rule Medium Severity
    Show

  • SRG-OS-000033-VMM-000140

    Group
    Show

  • The ESXi host must use DOD-approved encryption to protect the confidentiality of network sessions.

    Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session. In ESXi 8.0 Update 3 and newer TLS profiles are availab...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    Group
    Show

  • The ESXi host must disable key persistence.

    When using a standard key provider, the ESXi host relies on vCenter Server to manage the encryption keys. When using a trusted key provider, the ESXi host relies directly on the Trust Authority Hos...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    Group
    Show

  • The ESXi host must deny shell access for the dcui account.

    The dcui user is used for process isolation for the DCUI itself. The account has shell access which can be deactivated to reduce attack surface.
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    Group
    Show

  • The ESXi host must disable virtual hardware management network interfaces.

    Hardware management controllers often present virtual or USB NICs to the ESXi host. These can be used as backdoors and should be deactivated both in the hardware configuration and in ESXi.
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules