Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The ESXi host must remove keys from the SSH authorized_keys file.
Description
Discussion Text
ESXi hosts come with SSH, which can be enabled to allow remote access without requiring user authentication. To enable password-free access, copy the remote user's public key into the "/etc/ssh/keys-root/authorized_keys" file on the ESXi host.
The presence of the remote user's public key in the "authorized_keys" file identifies the user as trusted, meaning the user is granted access to the host without providing a password.
If using Lockdown Mode and SSH is disabled, then logon with authorized keys will have the same restrictions as username/password.
The presence of the remote user's public key in the "authorized_keys" file identifies the user as trusted, meaning the user is granted access to the host without providing a password.
If using Lockdown Mode and SSH is disabled, then logon with authorized keys will have the same restrictions as username/password.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.