Host integrated hardware management controller must be secure

OrtaDüzey 1Manuel incelemevmware

Açıklama

Many servers have integrated hardware management controllers that can be extremely helpful when monitoring and updating hardware, settings, and firmware. These controllers should be checked to ensure that ALL unused functionality is disabled, ALL unused access methods are disabled, passwords and password controls are set, and firewalling and access control is in place so that ... Manual review: the check needs vCenter/PowerCLI, firmware or guest access, or an organization-specific value.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

1. Verify whether the ESXi host exposes a BMC interface: esxcli hardware ipmi bmc get 2. Find the hardware management controller and review: ; Firmware is current and vendor-supported. ; Default accounts and default passwords are not in use. ; Administrative accounts are individually assigned. ; Strong password/authentication policy is configured. ; MFA is enabled where supported. ; HTTPS/TLS is used for web management. ; Weak or obsolete protocols are disabled. ; SSH/IPMI access is disabled unless operationally required. ; Management access is restricted to authorized management networks.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Configure the controller according to the organization's secure-management baseline.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: vmwareesxihardware
Referans: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 1.5 Host integrated hardware management controller must be secure