Virtual machines must remove unnecessary AHCI devices

MittelStufe 1Manuelle Prüfungvmware

Beschreibung

Removing unnecessary devices from virtual machines minimizes the attack surface and reduces potential pathways for data exfiltration or unauthorized data capture. This practice aligns with the principle of least functionality, ensuring that VMs have only the essential components required to perform their designated functions. Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Inspect VM hardware for unnecessary SATA/AHCI controllers. With PowerCLI/Get-View, review virtual devices and identify VirtualAHCIController devices that do not back a required virtual disk or CD/DVD device.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

To remediate this recommendation, power off the VM if required and remove unused AHCI/SATA controllers only after removing or moving dependent devices. Do not remove a controller that is actively backing a required virtual disk.

Eigenschaften

Betriebssysteme: Beliebig
Tags: vmwareesxivirtual-machine
Referenz: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 7.11 Virtual machines must remove unnecessary AHCI devices