UCF STIG Viewer Logo

The vCenter Server must disable Secure Shell (SSH) access.


Overview

Finding ID Version Rule ID IA Controls Severity
V-258968 VCSA-80-000303 SV-258968r961863_rule Medium
Description
vCenter Server is delivered as an appliance, and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary. vCenter Server High Availability uses SSH to coordinate the replication and failover between the nodes. Use of this feature requires SSH to remain enabled.
STIG Date
VMware vSphere 8.0 vCenter Security Technical Implementation Guide 2024-07-11

Details

Check Text ( C-62708r934560_chk )
Open the Virtual Appliance Management Interface (VAMI) by navigating to https://:5480.

Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the "SystemConfiguration.BashShellAdministrator" group.

Select "Access" on the left navigation pane.

If "SSH Login" is not "Deactivated", this is a finding.
Fix Text (F-62617r934561_fix)
Open the Virtual Appliance Management Interface (VAMI) by navigating to https://:5480.

Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the "SystemConfiguration.BashShellAdministrator" group.

Select "Access" on the left navigation pane.

Click "Edit" then disable "Activate SSH Login" and click "OK".