VMware vSphere 6.7 vCenter Security Technical Implementation Guide

The VMware vSphere 6.7 vCenter Security Technical Implementation Guide (V1 R4) has 62 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

62STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R4

CurrentPublished Wed Jul 26 2023

The vCenter Server must limit the use of the built-in SSO administrative account.

VMware vSphere 6.7 vCenter Security Technical Implementation Guide

Assessment Title

Rule Text

The vCenter Server must limit the use of the built-in SSO administrative account.

Description

Discussion Text

Use of the SSO administrator account should be limited as it is a shared account and individual accounts must be used wherever possible.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-243080

Rule

SV-243080r879594_rule

Severity

medium

Rule Version

VCTR-67-000010

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the built-in SSO administrator account is only used for emergencies and situations where it is the only option due to permissions.

If the built-in SSO administrator account is used for daily operations or there is no policy restricting its use, this is a finding.

Implementation Procedure

Fix Text

Develop a policy to limit the use of the built-in SSO administrator account.

STIG check 9 of 62 in the VMware vSphere 6.7 vCenter STIG checklist

← Previous · V-243079The vCenter Server must implement Active Directory authentication.Next · V-243081 →The vCenter Server must disable the distributed virtual switch health check.