The operating system must enforce dual authorization, based on organizational policies and procedures for organization-defined privileged commands.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-OS-000006-ESXI5-PF	SRG-OS-000006-ESXI5-PF	SRG-OS-000006-ESXI5-PF_rule		Medium

Description
Dual authorization mechanisms require two distinct approving authorities to approve the use of the command prior to it being invoked. An organization may determine certain commands or configuration changes require dual-authorization before being activated. The operating system must have the ability to enforce this dual authorization. Applicable, but permanent finding - The Hypervisor does not support this functionality as it is not a GP OS.

Description

Dual authorization mechanisms require two distinct approving authorities to approve the use of the command prior to it being invoked. An organization may determine certain commands or configuration changes require dual-authorization before being activated. The operating system must have the ability to enforce this dual authorization. Applicable, but permanent finding - The Hypervisor does not support this functionality as it is not a GP OS.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-SRG-OS-000006-ESXI5-PF_chk )
ESXi does not support this requirement. This is a permanent finding.

Fix Text (F-SRG-OS-000006-ESXI5-PF_fix)
This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented but this finding cannot be considered fixed.