VMware vSphere 6.7 vCenter Security Technical Implementation Guide

The VMware vSphere 6.7 vCenter Security Technical Implementation Guide (V1 R4) has 62 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

62STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R4

CurrentPublished Wed Jul 26 2023

The vCenter Server must enable certificate based authentication.

VMware vSphere 6.7 vCenter Security Technical Implementation Guide

Assessment Title

Rule Text

The vCenter Server must enable certificate based authentication.

Description

Discussion Text

The vSphere Client is capable of CAC authentication. This capability must be enabled and properly configured.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-243114

Rule

SV-243114r879887_rule

Severity

medium

Rule Version

VCTR-67-000059

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

See supplemental document.

Ensure that CAC authentication is required to log in to the vSphere Client. If CAC authentication is not required, this is a finding.

Implementation Procedure

Fix Text

Configure CAC Authentication per supplemental document.

STIG check 42 of 62 in the VMware vSphere 6.7 vCenter STIG checklist

← Previous · V-243113The vCenter Server Machine SSL certificate must be issued by a DoD certificate authority.Next · V-243115 →The vCenter Server must enable revocation checking for certificate-based authentication.