Host must run software that has not reached End of General Support status

MediumLevel 1Manual reviewvmware

Description

The "End of General Support" (EOGS) status indicates that the software version has exceeded its primary support lifecycle, during which VMware provides new security patches, bug fixes, and technical assistance. When a product reaches this status, VMware no longer releases security updates for that version for customers outside of an extended support contract. Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

1. Execute vmware -vl or esxcli system version get 2. Record the ESXi version/build. 3. Compare the installed release to Broadcom's current lifecycle/support matrix. The host is compliant only when the installed ESXi release remains within General Support.

How it is fixed

Fix method: Guidance or infrastructure patch

To remediate this recommendation, upgrade the host to an ESXi release/build that is still within Broadcom General Support. Use vSphere Lifecycle Manager or the vendor- supported image, validate hardware compatibility first, place the host in maintenance mode, remediate/upgrade, reboot, and verify the new build.

Properties

Operating systems: Any
Tags: vmwareesxibase
Reference: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 2.1 Host must run software that has not reached End of General Support status