The operating system must employ automated mechanisms to centrally verify configuration settings.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-OS-000093-ESXI5-PNF	SRG-OS-000093-ESXI5-PNF	SRG-OS-000093-ESXI5-PNF_rule		Medium

Description
Configuration settings are the configurable security-related parameters of information technology products that are part of the information system. Security-related parameters are those parameters impacting the security state of the system including parameters related to meeting other security control requirements. Rather than visiting each and every system when verifying configuration changes, organizations will employ automated tools that can make changes across all systems. This greatly increases efficiency and manageability of applications in a large scale environment. vCenter is the central management facility for any/all ESXi hosts. vCenter auto-blocks access to direct vSphere modification(s). vCenter maintains image of registered servers for rollback in case of unauthorized changes.

Description

Configuration settings are the configurable security-related parameters of information technology products that are part of the information system. Security-related parameters are those parameters impacting the security state of the system including parameters related to meeting other security control requirements. Rather than visiting each and every system when verifying configuration changes, organizations will employ automated tools that can make changes across all systems. This greatly increases efficiency and manageability of applications in a large scale environment. vCenter is the central management facility for any/all ESXi hosts. vCenter auto-blocks access to direct vSphere modification(s). vCenter maintains image of registered servers for rollback in case of unauthorized changes.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-SRG-OS-000093-ESXI5-PNF_chk )
ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding.

Fix Text (F-SRG-OS-000093-ESXI5-PNF_fix)
This requirement is permanent not a finding. No fix is required.