Details

The default certificates are not signed by a trusted certificate authority (CA) and should be

replaced with valid certificates that have been issued by a trusted CA.

*Rationale*

Using the default self-signed certificate may increase risk related to man-in-the-middle (MITM) attacks.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Leverage VMware’s SSL Certificate Automation Tool to install CA-signed SSL
certificates. For more information on this tool, please
see http-//kb.vmware.com/kb/2057340.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/2168

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Unix.

References

• 800-53|SC-12

Source

• Tenable.com/audits