UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The operating system at organization-defined information system components must load and execute organization-defined applications from hardware-enforced, read-only media.


Overview

Finding ID Version Rule ID IA Controls Severity
SRG-OS-000188-ESXI5-PNF SRG-OS-000188-ESXI5-PNF SRG-OS-000188-ESXI5-PNF_rule Medium
Description
Use of non-modifiable storage ensures the integrity of the software program from the point of creation of the read-only image. Organizations may require the information system to load specified applications from hardware enforced read-only media. Hardware-enforced, read-only media includes CD-R/DVD-R disk drives. Applicable, but permanent not-a-finding - This is true of ESXi "embedded" vs ESXi "installable" which is what's covered by this document. Read-only media is generally for "appliance-only" installations. There are no organization-defined applications for this platform (may be something to be addressed at the guest OS level).
STIG Date
VMware ESXi v5 Security Technical Implementation Guide 2013-01-15

Details

Check Text ( C-SRG-OS-000188-ESXI5-PNF_chk )
ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding.
Fix Text (F-SRG-OS-000188-ESXI5-PNF_fix)
This requirement is permanent not a finding. No fix is required.