Graphical desktop environments provided by the system must automatically lock after 15 minutes of inactivity and the system must require users to re-authenticate to unlock the environment.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
GEN000500-ESXI5-PNF	GEN000500-ESXI5-PNF	GEN000500-ESXI5-PNF_rule		Medium

Description
If graphical desktop sessions do not lock the session after 15 minutes of inactivity, requiring re-authentication to resume operations, the system or individual data could be compromised by an alert intruder who could exploit the oversight. This requirement applies to graphical desktop environments provided by the system to locally attached displays and input devices as well as to graphical desktop environments provided to remote graphical desktop systems, including thin clients. Applicable, but permanent not-a-finding - No Graphical desktop environment.

Description

If graphical desktop sessions do not lock the session after 15 minutes of inactivity, requiring re-authentication to resume operations, the system or individual data could be compromised by an alert intruder who could exploit the oversight. This requirement applies to graphical desktop environments provided by the system to locally attached displays and input devices as well as to graphical desktop environments provided to remote graphical desktop systems, including thin clients. Applicable, but permanent not-a-finding - No Graphical desktop environment.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-GEN000500-ESXI5-PNF_chk )
ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding.

Fix Text (F-GEN000500-ESXI5-PNF_fix)
This requirement is permanent not a finding. No fix is required.