Virtual machines must require encryption for Fault Tolerance

보통레벨 1수동 검토vmware

설명

Requiring encryption for Fault Tolerance in virtual machines is critical for ensuring secure data transmission between primary and secondary VMs, especially in environments where sensitive data is processed. While the default setting 'opportunistic' may result in encryption due to widespread AES-NI support in vSphere-compatible hardware, enforcing the 'required' setting for ... Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

The following PowerCLI command may be used: (Get-VM -Name $VM).ExtensionData.Config.FtEncryptionMode

조치 방법

조치 방식: 가이드 또는 인프라 패치

The following PowerCLI command may be used: $VMview = Get-VM -Name $VM | Get-View $ConfigSpec = New-Object VMware.Vim.VirtualMachineConfigSpec $ConfigSpec.FtEncryptionMode = New-object VMware.Vim.VirtualMachineConfigSpecEncryptedFtModes $ConfigSpec.FtEncryptionMode = "ftEncryptionRequired" $VMview.ReconfigVM_Task($ConfigSpec)

속성

운영 체제: 모두
태그: vmwareesxivirtual-machine
참고 자료: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 7.3 Virtual machines must require encryption for Fault Tolerance