Virtual machines must remove unnecessary AHCI devices

보통레벨 1수동 검토vmware

설명

Removing unnecessary devices from virtual machines minimizes the attack surface and reduces potential pathways for data exfiltration or unauthorized data capture. This practice aligns with the principle of least functionality, ensuring that VMs have only the essential components required to perform their designated functions. Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Inspect VM hardware for unnecessary SATA/AHCI controllers. With PowerCLI/Get-View, review virtual devices and identify VirtualAHCIController devices that do not back a required virtual disk or CD/DVD device.

조치 방법

조치 방식: 가이드 또는 인프라 패치

To remediate this recommendation, power off the VM if required and remove unused AHCI/SATA controllers only after removing or moving dependent devices. Do not remove a controller that is actively backing a required virtual disk.

속성

운영 체제: 모두
태그: vmwareesxivirtual-machine
참고 자료: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 7.11 Virtual machines must remove unnecessary AHCI devices