The operating system must uniquely identify and must authenticate non-organizational users (or processes acting on behalf of non-organizational users).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-OS-000121-ESXI5-PNF	SRG-OS-000121-ESXI5-PNF	SRG-OS-000121-ESXI5-PNF_rule		Medium

Description
Non-organizational users include all operating system users other than organizational users which include employees or individuals the organization deems to have equivalent status of employees (e.g., contractors, guest researchers, individuals from allied nations). Non-organizational users shall be uniquely identified and authenticated for all accesses other than those accesses explicitly identified and documented by the organization when related to the use of anonymous access. Applicable, but permanent not-a-finding - root is the only local account, all other users (org and non-org) are required to be handled by Active Directory.

Description

Non-organizational users include all operating system users other than organizational users which include employees or individuals the organization deems to have equivalent status of employees (e.g., contractors, guest researchers, individuals from allied nations). Non-organizational users shall be uniquely identified and authenticated for all accesses other than those accesses explicitly identified and documented by the organization when related to the use of anonymous access. Applicable, but permanent not-a-finding - root is the only local account, all other users (org and non-org) are required to be handled by Active Directory.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-SRG-OS-000121-ESXI5-PNF_chk )
ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding.

Fix Text (F-SRG-OS-000121-ESXI5-PNF_fix)
This requirement is permanent not a finding. No fix is required.