Unauthorized floppy devices must be disconnected on the virtual machine (VM).

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Unauthorized floppy devices must be disconnected on the virtual machine (VM).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-256457	VMCH-70-000008	SV-256457r886414_rule		Medium

Description
Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD/DVD drives are usually connected only temporarily during software installation.

STIG	Date
VMware vSphere 7.0 Virtual Machine Security Technical Implementation Guide	2023-06-22

Details

Check Text ( C-60132r886412_chk )
Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI. From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command: Get-VM \| Get-FloppyDrive \| Select Parent, Name, ConnectionState If a virtual machine has a floppy drive connected, this is a finding.

Fix Text (F-60075r886413_fix)
Floppy drives are no longer visible through the vSphere Client and must be done via the API or PowerCLI. From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command: Get-VM "VM Name" \| Get-FloppyDrive \| Remove-FloppyDrive Note: The VM must be powered off to remove the floppy drive.