Host hardware must enable and configure a TPM 2.0

СредњаНиво 1Аутоматскаvmware

Опис

ESXi can use Trusted Platform Modules (TPM) 2.0 to enable advanced security features that prevent malware, remove dependencies, and secure hardware lifecycle operations. The audit runs esxcli hardware trustedboot get and requires "Tpm Present: true"; TPM attestation alarms are still reviewed in vCenter. Runs in the ESXi Shell (busybox sh) as root.

Како се проверава

Метод провере: Команда љуске

shell

out=$(esxcli hardware trustedboot get 2>/dev/null) || exit 1
v=$(printf '%s\n' "$out" | awk -F': *' 'tolower($1) ~ /^ *tpm present$/ {print $2; exit}' | tr 'A-Z' 'a-z' | sed 's/ *$//')
if [ "$v" = true ]; then echo compliant; else echo "Tpm Present: ${v:-not reported}"; fi

Очекивани излаз: compliant

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

1. Place the host in maintenance mode. 2. reboot into BIOS/UEFI. 3. Enable and activate the TPM 4. Select TPM 2.0 mode, and ensure UEFI/Secure Boot prerequisites required by the server vendor are enabled. 5. Save changes. 6. reboot with command reboot 7. Verify again with esxcli hardware trustedboot get and esxcli system settings encryption get.

Својства

Оперативни системи: Било који
Ознаке: vmwareesxihardware
Референца: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 1.4 Host hardware must enable and configure a TPM 2.0

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target vmware