Virtual machines must require encryption for Fault Tolerance

SedangLevel 1Tinjauan manualvmware

Deskripsi

Requiring encryption for Fault Tolerance in virtual machines is critical for ensuring secure data transmission between primary and secondary VMs, especially in environments where sensitive data is processed. While the default setting 'opportunistic' may result in encryption due to widespread AES-NI support in vSphere-compatible hardware, enforcing the 'required' setting for ... Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

The following PowerCLI command may be used: (Get-VM -Name $VM).ExtensionData.Config.FtEncryptionMode

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

The following PowerCLI command may be used: $VMview = Get-VM -Name $VM | Get-View $ConfigSpec = New-Object VMware.Vim.VirtualMachineConfigSpec $ConfigSpec.FtEncryptionMode = New-object VMware.Vim.VirtualMachineConfigSpecEncryptedFtModes $ConfigSpec.FtEncryptionMode = "ftEncryptionRequired" $VMview.ReconfigVM_Task($ConfigSpec)

Properti

Sistem operasi: Apa saja
Tag: vmwareesxivirtual-machine
Referensi: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 7.3 Virtual machines must require encryption for Fault Tolerance