Virtual machines must remove unnecessary AHCI devices

MediaNivel 1Revisión manualvmware

Descripción

Removing unnecessary devices from virtual machines minimizes the attack surface and reduces potential pathways for data exfiltration or unauthorized data capture. This practice aligns with the principle of least functionality, ensuring that VMs have only the essential components required to perform their designated functions. Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Inspect VM hardware for unnecessary SATA/AHCI controllers. With PowerCLI/Get-View, review virtual devices and identify VirtualAHCIController devices that do not back a required virtual disk or CD/DVD device.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

To remediate this recommendation, power off the VM if required and remove unused AHCI/SATA controllers only after removing or moving dependent devices. Do not remove a controller that is actively backing a required virtual disk.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: vmwareesxivirtual-machine
Referencia: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 7.11 Virtual machines must remove unnecessary AHCI devices