Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-64093 | VMCH-06-000028 | SV-78583r1_rule | Medium |
Description |
---|
Ensure that no device is connected to a virtual machine if it is not required. For example, floppy, serial and parallel ports are rarely used for virtual machines in a datacenter environment, and CD/DVD drives are usually connected only temporarily during software installation. |
STIG | Date |
---|---|
VMware vSphere Virtual Machine Version 6 Security Technical Implementation Guide | 2015-12-09 |
Check Text ( C-64843r1_chk ) |
---|
From the vSphere Client select the Virtual Machine right click and go to Edit Settings. Review the VMs hardware and verify no floppy devices exist. or From a PowerCLI command prompt while connected to the ESXi host or vCenter server run the following command: Get-VM | Get-FloppyDrive | Select Parent, Name, ConnectionState If a virtual machine has a floppy drive present, this is a finding. |
Fix Text (F-70021r1_fix) |
---|
The VM must be powered off in order to remove a floppy drive. From the vSphere Client select the Virtual Machine right click and go to Edit Settings. Select the floppy drive and click remove then OK. or From a PowerCLI command prompt while connected to the ESXi host or vCenter server run the following command: Get-VM "VM Name" | Get-FloppyDrive | Remove-FloppyDrive |