Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-258968 | VCSA-80-000303 | SV-258968r961863_rule | Medium |
Description |
---|
vCenter Server is delivered as an appliance, and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary. vCenter Server High Availability uses SSH to coordinate the replication and failover between the nodes. Use of this feature requires SSH to remain enabled. |
STIG | Date |
---|---|
VMware vSphere 8.0 vCenter Security Technical Implementation Guide | 2024-07-11 |
Check Text ( C-62708r934560_chk ) |
---|
Open the Virtual Appliance Management Interface (VAMI) by navigating to https:// Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the "SystemConfiguration.BashShellAdministrator" group. Select "Access" on the left navigation pane. If "SSH Login" is not "Deactivated", this is a finding. |
Fix Text (F-62617r934561_fix) |
---|
Open the Virtual Appliance Management Interface (VAMI) by navigating to https:// Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the "SystemConfiguration.BashShellAdministrator" group. Select "Access" on the left navigation pane. Click "Edit" then disable "Activate SSH Login" and click "OK". |