Host must have an accurate DCUI.Access list

СреднийУровень 1Ручная проверкаvmware

Описание

The DCUI.Access parameter in VMware ESXi is used to specify a list of users who are permitted to access the Direct Console User Interface (DCUI) of the ESXi host, especially when Lockdown Mode is enabled. This parameter helps in controlling and securing access to the ESXi host by allowing only authorized users to override Lockdown Mode and access the DCUI, particularly in ... Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

To verify a proper trusted users list is set for DCUI, perform the following from the vSphere web client: 1. From the vSphere Web Client, select the host. 2. Click Configure then expand System. 3. Select Advanced System Settings then click Edit. 4. Enter DCUI.Access in the filter. 5. Verify that the DCUI.Access attribute is set to a comma-separated list of the users who are allowed to override lockdown mode. Alternately, the following PowerCLI command may be used: Get-VMHost | Get-AdvancedSetting -Name DCUI.Access

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

To set a trusted users list for DCUI, perform the following from the vSphere web client: 1. From the vSphere Web Client, select the host. 2. Click Configure then expand System. 3. Select Advanced System Settings then click Edit. 4. Enter DCUI.Access in the filter. 5. Set the DCUI.Access attribute is set to a comma-separated list of the users who are allowed to override lockdown mode.

Свойства

Операционные системы: Любая
Теги: vmwareesximanagement
Источник: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 3.18 Host must have an accurate DCUI.Access list