The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
GEN000590-ESXI5-PF	GEN000590-ESXI5-PF	GEN000590-ESXI5-PF_rule		Medium

Description
Systems must employ cryptographic hashes for passwords using the SHA-2 family of algorithms or FIPS 140-2 approved successors. The use of unapproved algorithms may result in weak password hashes more vulnerable to compromise. Permanent finding - Unable to determine with available documentation.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-GEN000590-ESXI5-PF_chk )
ESXi does not support this requirement. This is a permanent finding.

Fix Text (F-GEN000590-ESXI5-PF_fix)
This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented but this finding cannot be considered fixed.