TMAegisБета
Више правила за vmware

VMware ESXi

TMA-ESXI9-2.4

Host image profile acceptance level must be PartnerSupported or higher

ВисокаНиво 1Аутоматскаvmware

Опис

The acceptance level on ESXi regulates the type of software that can be installed on the system, with four distinct levels: VMwareCertified, VMwareAccepted, PartnerSupported, and CommunitySupported. It's advised to set the acceptance level to PartnerSupported or higher to ensure that only tested and digitally signed vSphere Installation Bundles (VIBs) are allowed for ... The audit runs esxcli software acceptance get and accepts VMwareCertified, VMwareAccepted or PartnerSupported. Runs in the ESXi Shell (busybox sh) as root.

Како се проверава

Метод провере: Команда љуске

shell
v=$(esxcli software acceptance get 2>/dev/null) || exit 1
case "$v" in VMwareCertified|VMwareAccepted|PartnerSupported) echo compliant ;; *) echo "acceptance level: $v" ;; esac
Очекивани излаз
compliant

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

To verify the host image profile acceptance level perform the following: 1. From the vSphere Web Client, select the host. 2. Click Configure, then under System select Security Profile. 3. Under Host Image Profile Acceptance Level select Edit 4. In the dropdown select one of the following - VMware Certified, VMware Accepted, or Partner Supported. To implement the recommended configuration state, run the following PowerCLI command (in the example code, the level is Partner Supported): # Set the Software AcceptanceLevel for each host<span> Foreach ($VMHost in Get-VMHost ) { $ESXCli = Get-EsxCli -VMHost $VMHost $ESXCli.software.acceptance.Set("PartnerSupported") }

Својства

Оперативни системи
Било који
Ознаке
vmwareesxibase
Референца
CIS VMware ESXi 9.0 Benchmark v1.0.0 - 2.4 Host image profile acceptance level must be PartnerSupported or higher

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell
tmaegis scan --target vmware