VMware ESXi
TMA-ESXI9-8.3
VMware Tools should configure automatic upgrades as appropriate for the environment
Descrição
Automatic upgrades of VMware Tools can be managed via vSphere, ensuring VMware Tools versions remain current. This functionality is advisable unless alternative management and update mechanisms are in place. It is recommended to have automatic updates enabled to minimize administrative overhead and maintain up-to- date features and security patches. Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.
Como é verificado
Método de auditoria: Revisão manual
Inside each guest OS: Review each VM's VMware Tools upgrade policy in vSphere (Edit Settings > VM Options > VMware Tools) and the guest's package-management policy. Verify that automatic upgrade behavior matches the organization's approved change-management model.
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
To remediate this recommendation, enable automatic VMware Tools upgrades only where appropriate, or configure a controlled centralized update process. In vSphere select the approved 'check and upgrade Tools during power cycling' behavior as appropriate for the environment.
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- vmwareesxivmware-tools
- Referência
- CIS VMware ESXi 9.0 Benchmark v1.0.0 - 8.3 VMware Tools should configure automatic upgrades as appropriate for the environment