Home
Security Hardening
DISA STIG VMware vSphere 6.7 VCenter V1R1

DISA STIG VMware vSphere 6.7 VCenter V1R1

VCTR-67-000020 – The vCenter Server must not configure all port groups to VLAN values reserved by upstream physical switches.
Details Certain physical switches reserve certain VLAN IDs for internal purposes and often disallow traffic configured to these values. For...
VCTR-67-000023 – The vCenter Server must configure the vpxuser auto-password to be changed every 30 days.
Details By default, the vpxuser password will be automatically changed by vCenter every 30 days. Ensure this setting meets site...
VCTR-67-000024 – The vCenter Server must configure the vpxuser password meets length policy.
Details The vpxuser password default length is 32 characters. Ensure this setting meets site policies; if not, configure to meet...
VCTR-67-000025 – The vCenter Server must disable the managed object browser (MOB) at all times when not required for troubleshooting or maintenance of managed objects.
Details The MOB was designed to be used by SDK developers to assist in the development, programming, and debugging of...
VCTR-67-000026 – The vCenter Server must check the privilege reassignment after restarts.
Details Check for privilege reassignment when restarting vCenter Server. If the user or user group that is assigned the Administrator...
VCTR-67-000029 – The vCenter Server must enable all tasks to be shown to Administrators in the Web Client.
Details By default, not all tasks are shown in the Web Client to Administrators, and only that user’s tasks will...
VCTR-67-000031 – The vCenter Server must restrict the connectivity between Update Manager and public patch repositories by use of a separate Update Manager Download Server.
Details The Update Manager Download Service (UMDS) is an optional module of the Update Manager. UMDS downloads upgrades for virtual...
VCTR-67-000009 – The vCenter Server must implement Active Directory authentication.
Details The vCenter Server must ensure users are authenticated with an individual authenticator prior to using a group authenticator. Using...
VCTR-67-000033 – The vCenter Server must use a least-privileges assignment for the vCenter Server database user.
Details Least privileges mitigate attacks if the vCenter database account is compromised. vCenter requires very specific privileges on the database....
VCTR-67-000010 – The vCenter Server must limit the use of the built-in SSO administrative account.
Details Use of the SSO administrator account should be limited as it is a shared account and individual accounts must...

Prev Next

DISA STIG VMware vSphere 6.7 VCenter V1R1

VCTR-67-000020 – The vCenter Server must not configure all port groups to VLAN values reserved by upstream physical switches.

VCTR-67-000023 – The vCenter Server must configure the vpxuser auto-password to be changed every 30 days.

VCTR-67-000024 – The vCenter Server must configure the vpxuser password meets length policy.

VCTR-67-000025 – The vCenter Server must disable the managed object browser (MOB) at all times when not required for troubleshooting or maintenance of managed objects.

VCTR-67-000026 – The vCenter Server must check the privilege reassignment after restarts.

VCTR-67-000029 – The vCenter Server must enable all tasks to be shown to Administrators in the Web Client.

VCTR-67-000031 – The vCenter Server must restrict the connectivity between Update Manager and public patch repositories by use of a separate Update Manager Download Server.

VCTR-67-000009 – The vCenter Server must implement Active Directory authentication.

VCTR-67-000033 – The vCenter Server must use a least-privileges assignment for the vCenter Server database user.

VCTR-67-000010 – The vCenter Server must limit the use of the built-in SSO administrative account.