VMCH-65-000034 – Console access through the VNC protocol must be disabled on the virtual machine.
Details The VM console enables you to connect to the console of a virtual machine, in effect seeing what a...
- Home
- Security Hardening
- DISA STIG VMware vSphere Virtual Machine 6.5 V2R1
DISA STIG VMware vSphere Virtual Machine 6.5 V2R1
VMCH-65-000018 – The unexposed feature keyword isolation.tools.ghi.trayicon.disable must be set on the virtual machine.
Details Some virtual machine advanced settings parameters do not apply on vSphere because VMware virtual machines work on both vSphere...VMCH-65-000036 – Informational messages from the virtual machine to the VMX file must be limited on the virtual machine.
Details The configuration file containing these name-value pairs is limited to a size of 1MB. If not limited, VMware tools...VMCH-65-000040 – Shared salt values must be disabled on the virtual machine.
Details When salting is enabled (Mem.ShareForceSalting=1 or 2) in order to share a page between two virtual machines both salt...VMCH-65-000041 – Access to virtual machines through the dvfilter network APIs must be controlled.
Details An attacker might compromise a VM by making use the dvFilter API. Configure only those VMs to use the...VMCH-65-000042 – System administrators must use templates to deploy virtual machines whenever possible.
Details By capturing a hardened base operating system image (with no applications installed) in a template, ensure all virtual machines...VMCH-65-000043 – Use of the virtual machine console must be minimized.
Details The VM console enables a connection to the console of a virtual machine, in effect seeing what a monitor...VMCH-65-000047 – The virtual machine guest operating system must be locked when the last console connection is closed.
Details When accessing the VM console the guest OS must be locked when the last console user disconnects, limiting the...VMCH-65-000048 – 3D features on the virtual machine must be disabled when not required.
Details It is recommended that 3D acceleration be disabled on virtual machines that do not require 3D functionality, (e.g. most...VMCH-65-000049 – Encryption must be enabled for vMotion on the virtual machine.
Details vMotion migrations in vSphere 6.0 and earlier transferred working memory and CPU state information in clear text over the...