Rotate your device back to portrait to use STIG Vault.
The VMWare ESXi 5.0 Server Security Technical Implementation Guide (V2 R1) has 133 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
Ask the SA if a documented procedure is used to overwrite sensitive data in VMDK flat files prior to deletion. The procedure must include a command to zero out data and the file must then be deleted. See some examples directly below.
vmkfstools --writezeroes <path+vmdk_flat_file>
or
dd if=/dev/zero of=<path+vmdk_flat_file>
If a documented procedure to overwrite sensitive data in VMDK flat files prior to deletion does not exist, this is a finding.
Create and document a procedure to zero out sensitive data prior to removal of the VMDK file. Command line interface commands such as vmkfstools, dd, and rm must be used, per the examples below.
vmkfstools --writezeroes <path+vmdk_flat_file>
or
dd if=/dev/zero of=<path+vmdk_flat_file>
Note: The vSphere Client does not automatically zero out a VMDK file when it is destroyed.