VMware ESXi
TMA-ESXI9-1.6
Host integrated hardware management controller must enable time synchronization
説明
Cryptography, audit logging, cluster operations, and incident response/forensics depend deeply on synchronized time. This recommendation extends to all devices in infrastructure. The recommendation for NTP is to have at least four sources. Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.
チェック方法
監査方法: 手動レビュー
1. Verify that NTP or another approved time synchronization mechanism is enabled 2. Verify that the ESXi host uses reliable time synchronization esxcli system ntp get
修正方法
修正方法: ガイダンスまたは IaC パッチ
1. Enable NTP or the vendor-supported automatic time synchronization service. 2. Enter the organization's approved NTP servers. 3. Configure multiple authoritative NTP sources where supported. 4. Configure the appropriate time zone. 5. Save/apply the configuration.
プロパティ
- オペレーティングシステム
- すべて
- タグ
- vmwareesxihardware
- 参照
- CIS VMware ESXi 9.0 Benchmark v1.0.0 - 1.6 Host integrated hardware management controller must enable time synchronization