Details

Use of the SSO administrator account should be limited as it is a shared account and individual accounts must be used wherever possible.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

A policy should be developed to limit the use of the built-in SSO administrator account.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-5_Y21M10_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Identification and Authentication.This control applies to the following type of system VMware.

References

• 800-53|IA-2(5)
• CAT|II
• CCI|CCI-000770
• Rule-ID|SV-216833r612237_rule
• STIG-ID|VCWN-65-000010
• STIG-Legacy|SV-104563
• STIG-Legacy|V-94733
• Vuln-ID|V-216833

Source

• Tenable.com/audits