V1R3 changes
VMware vSphere 7.0 VAMI STIG V1R3 (2026-09-30) replaced V1R2 (2023-07-26): 2 checks updated. It has 28 checks, against 28 in V1R2.
V1R3 checklistV1R2 checklist Compare V1R2 and V1R3 in STIG Compare
- 0 added
- 0 removed
- 2 updated
Updated fields: Discussion 2
Updated in V1R3 (2)
V-256654CAT IIVAMI must only load allowed server modules.Discussion
Discussion
A web server can provide many features, services, and processes. Some of these may be deemed unnecessary or too unsecure to run on a production DODDoW system.
VAMI can be configured to load any number of external modules, but only a specific few are provided and supported by VMware. Additional, unexpected modules must be removed.
V-256672CAT IVAMI must enable FIPS mode.Discussion
Discussion
Encryption is only as good as the encryption modules used. Unapproved cryptographic module algorithms cannot be verified and cannot be relied on to provide confidentiality or integrity, and DODDoW data may be compromised due to weak algorithms. FIPS 140-2 is the current standard for validating cryptographic modules.
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R3 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.