Host must enforce password complexity

Méthode de vérification

Méthode d'audit: Commande shell

out=$(esxcli system settings advanced list -o /Security/PasswordQualityControl 2>/dev/null) || exit 1
v=$(printf '%s\n' "$out" | sed -n 's/^ *String Value: *//p' | head -n 1)
m=$(printf '%s\n' "$v" | tr ' ' '\n' | sed -n 's/^min=//p' | head -n 1)
[ -n "$m" ] || { echo "no min= in '$v'"; exit 1; }
printf '%s\n' "$m" | awk -F, '{ if (NF == 5 && $1 == "disabled" && $2 == "disabled" && $3 == "disabled" && $4 == "disabled" && $5 ~ /^[0-9]+$/ && $5 + 0 >= 15) print "compliant"; else print "min=" $0 }'

Sortie attendue

compliant

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

To set the password complexity requirements, perform the following PowerCLI command: Get-VMHOST | Get-AdvancedSetting -Name "Security.PasswordQualityControl" | Set- AdvancedSetting -Value "retry=3 min=disabled,disabled,disabled,disabled,15" The above requires all passwords to be 15 or more characters long and comprised of at least one character from four distinct character sets.

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

tmaegis scan --target vmware