Details
http://kb.vmware.com/kb/2004746
Solution
Perform the following-1. From the vSphere web client select the host.
2. Select ‘Manage’ -> ‘Security Profile’.
3. Scroll down to ‘Services’.
4. Click ‘Edit…’.
5. Select ‘ESXi Shell’.
6. Click ‘Stop’.
7. Change the Startup Policy ‘Start and Stop Manually’Additionally, the following PowerCLI command will implement the recommended
configuration state-# Set ESXi Shell to start manually rather than automatic for all hosts
Get-VMHost | Get-VMHostService | Where { $_.key -eq ‘TSM’ } | Set-VMHostService – Policy Off
Default Value-The prescribed state is the default state.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system VMware.